last executing test programs: 49.604605282s ago: executing program 0 (id=211): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000180)=[@msr={0x14, 0x20, {0x603000000013c017, 0x100000000}}, @uexit={0x0, 0x18, 0x1}, @hvc={0x32, 0x40, {0x84000005, [0x8, 0x8, 0x8, 0x0, 0x2]}}, @its_setup={0x82, 0x28, {0x1, 0x2, 0x27d}}, @memwrite={0x6e, 0x30, @generic={0x1000, 0x2ee, 0x1ff, 0x6}}, @irq_setup={0x46, 0x18, {0x0, 0x1a0}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x80000000}, @irq_setup={0x46, 0x18, {0x2, 0x38f}}, @irq_setup={0x46, 0x18, {0x3, 0x16b}}, @memwrite={0x6e, 0x30, @generic={0x40000, 0xd13, 0x8000000000000001, 0x1}}, @eret={0xe6, 0x18, 0x40}, @code={0xa, 0x84, {"a03b97d20040b0f2010180d2e20180d2230180d2640180d2020000d400001fd6008008d5007008d5000000da005881d200e0b0f2610180d2020080d2430080d2440080d2020000d440bf89d20020b8f2e10180d2a20180d2230080d2040180d2020000d4007008d5007008d5007008d5"}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x1, 0x0, 0x4, 0x1, 0x1, 0x1}}, @irq_setup={0x46, 0x18, {0x0, 0xc1}}, @code={0xa, 0xb4, {"809a94d20080b0f2c10080d2420180d2830180d2640080d2020000d41f00206b806c84d20040b0f2410080d2e20080d2430080d2e40080d2020000d4005081d20080b0f2c10180d2820080d2030180d2840080d2020000d4e00320aa0098205ee02b9cd200a0b8f2a10080d2020180d2430080d2640080d2020000d40064002f40409cd20000b0f2810180d2e20080d2a30080d2e40180d2020000d4003c004e"}}, @uexit={0x0, 0x18, 0x9}, @svc={0x122, 0x40, {0x100, [0x1, 0x6, 0x7, 0xfbcb]}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0x200, 0x4, 0xb}}, @hvc={0x32, 0x40, {0xc4000011, [0x3, 0x1, 0xffffffffffffffff, 0x80000000, 0x8]}}, @uexit={0x0, 0x18, 0x5}, @code={0xa, 0x6c, {"c00a9ed200c0b8f2e10180d2220080d2630180d2a40180d2020000d4a0fb8bd200c0b0f2610080d2220180d2430180d2240080d2020000d40010202e007008d50020c09a007008d5000008d5000028d5000020c8007008d5"}}, @smc={0x1e, 0x40, {0x86000001, [0x6, 0x9, 0x8, 0x2bb5, 0x5]}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x4, 0xd, 0x8, 0xad4, 0x3}}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0x84000051, [0x10000, 0x1, 0x400, 0x6e0, 0x8]}}, @smc={0x1e, 0x40, {0x2000, [0x9, 0xdbd0, 0x4, 0x0, 0x5]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x90, 0x5, 0x8}}], 0x584}, &(0x7f0000000780)=[@featur1={0x1, 0x8}], 0x1) mmap$KVM_VCPU(&(0x7f0000c9d000/0x2000)=nil, r3, 0x8, 0x80010, r4, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000bff000/0x400000)=nil) 48.792342889s ago: executing program 1 (id=212): r0 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8180, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ARM_VCPU_INIT(r4, 0x4020aeae, &(0x7f0000000140)={0x5, 0x8}) r5 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x35, 0xb000, 0x4, 0xffffffffffffffff, 0x5}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000240)=@arm64_fp_extra={0x60200000101000d5, 0x0}) (async) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000080)=@riscv64_config={0x8030000000100002, &(0x7f0000000000)=0x2}) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x27) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) openat$kvm(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = syz_kvm_add_vcpu$arm64(r0, &(0x7f0000000b80)={0x0, &(0x7f0000000100)=[@hvc={0x32, 0x40, {0xc4000012, [0x100000001, 0x8000000000000000, 0xffffffffffffffff, 0xee24, 0xffffffffffff0001]}}], 0x40}, &(0x7f0000000040)=[@featur1={0x1, 0x4}], 0x1) (rerun: 64) ioctl$KVM_RUN(r8, 0xae80, 0x0) 41.957665766s ago: executing program 0 (id=213): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000080)=[{0x0, &(0x7f00000000c0)=[@irq_setup={0x46, 0x18, {0x1, 0x20}}], 0x18}], 0x1, 0x0, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r3 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[@msr={0x14, 0x20, {0x603000000013da16, 0xe}}, @irq_setup={0x46, 0x18, {0x0, 0x154}}, @uexit={0x0, 0x18, 0x4}, @memwrite={0x6e, 0x30, @vgic_gicr={0x80a0000, 0x80, 0x400}}, @memwrite={0x6e, 0x30, @vgic_gicr={0x8100000, 0xa0, 0x9, 0x2}}, @msr={0x14, 0x20, {0x603000000013d000, 0x400}}, @code={0xa, 0x6c, {"006181d20000b0f2210180d2220180d2e30080d2640180d2020000d4000000fd007008d5001c202e0030005f0088a10e000028d5007008d540849fd200c0b0f2810180d2e20180d2630080d2240080d2020000d4007008d5"}}], 0x13c}, &(0x7f00000002c0)=[@featur1={0x1, 0x82}], 0x1) ioctl$KVM_GET_SREGS(r3, 0x8000ae83, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x1000020, 0x1}) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ec1000/0x3000)=nil, 0x3000) r4 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000006, 0x4d832, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f00000000c0)={0xbbfbfe6201889764, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.849035467s ago: executing program 1 (id=214): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x4, 0xb000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r1 = syz_kvm_setup_syzos_vm$arm64(r0, &(0x7f0000bff000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000003c0)={0x0, &(0x7f0000000040)=[@eret={0xe6, 0x18, 0x9}, @uexit={0x0, 0x18, 0x10001}, @svc={0x122, 0x40, {0x8400000f, [0x7, 0x2, 0x2, 0x0, 0x42]}}, @code={0xa, 0x6c, {"20fc90d200a0b8f2210180d2c20180d2a30180d2240080d2020000d400d8a05e000028d5000028d5008008d5007008d5406091d200e0b0f2610080d2620180d2030080d2a40080d2020000d4000008d50300a0d40034205e"}}, @irq_setup={0x46, 0x18, {0x0, 0x271}}, @hvc={0x32, 0x40, {0x1000000, [0x0, 0x1, 0x10, 0x9]}}, @uexit={0x0, 0x18, 0x9}, @eret={0xe6, 0x18, 0x1}, @its_send_cmd={0xaa, 0x28, {0xa, 0x0, 0x1, 0xb, 0x940, 0x9, 0x2}}, @irq_setup={0x46, 0x18, {0x4, 0x2b6}}, @hvc={0x32, 0x40, {0x84000013, [0xfb, 0x2, 0xffff, 0xa4, 0x2]}}, @msr={0x14, 0x20, {0x603000000013df6a, 0x1}}, @smc={0x1e, 0x40, {0x43000129, [0x8001, 0x0, 0x9, 0xfffffffffffffffb, 0x8]}}, @its_setup={0x82, 0x28, {0x0, 0x4, 0x2be}}, @eret={0xe6, 0x18, 0x4}, @code={0xa, 0x6c, {"a0018ed200a0b8f2810180d2020080d2e30180d2840080d2020000d4007008d50008803800b8217e1f0020eb007008d5007008d50000803860f69cd20080b0f2c10080d2420180d2a30080d2040080d2020000d4009c202e"}}, @smc={0x1e, 0x40, {0x84000013, [0x26, 0x3, 0xfffffffffffffffd, 0xb4, 0x1]}}, @uexit={0x0, 0x18, 0xfffffffffffffffd}], 0x348}, &(0x7f0000000400)=[@featur2={0x1, 0x4}], 0x1) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x0, 0x6, &(0x7f0000000440)=0xb6}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000004c0)={0xd000, 0x8000}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000500)={0x200000, 0xb000, 0x5, 0x0, 0x1}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000540)={0x314, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000580)={0x0, 0x2, 0xd000, 0x2000, &(0x7f0000ee3000/0x2000)=nil, 0x4de86e2b, r3}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000640)) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000a80)={0x10001, 0x200, 0x0, &(0x7f0000000680)=[0x5, 0x4, 0x9, 0x96, 0xbb, 0x203, 0xbf, 0x1000, 0x73a3, 0x80, 0xaf2, 0xa0, 0x6, 0x6, 0x3f8, 0x3c602833, 0x7fffffffffffffff, 0xfff, 0xffffffffffffff55, 0x10, 0x1, 0x81, 0x3, 0x4, 0x50000, 0x8, 0x3, 0xd, 0x907, 0x4c22, 0x0, 0x9, 0x100000000, 0x14acd9f0, 0x8b, 0x8, 0x0, 0x5, 0x7, 0x2, 0x5, 0xe, 0x3, 0x57e8, 0x101, 0x81, 0x4, 0xffff, 0x1, 0x8, 0x8, 0x7, 0x7, 0x1, 0x1, 0x17, 0x3, 0x6, 0x6, 0x7, 0xb, 0x9, 0x1, 0xf04, 0xa, 0x8, 0x44c, 0x5, 0x7, 0x4, 0x0, 0xff, 0x1, 0x7, 0x0, 0x6, 0x7, 0x2, 0x1, 0x5, 0x3, 0x4, 0xfffffffffffffff7, 0x0, 0x3, 0x2, 0x10001, 0xffffffffffffffff, 0x7fffffff800000, 0x7454, 0x5, 0x2, 0x3, 0x4, 0x200, 0x4, 0x6a, 0x7, 0x6, 0x10000, 0x6, 0x8, 0x0, 0x1, 0x6, 0x7fff, 0xfffffffffffffffe, 0x101, 0x6, 0x84, 0x0, 0x0, 0x8, 0x503, 0x7fffffff, 0x8, 0x100000000, 0x0, 0x52, 0x0, 0x9, 0x1, 0x517, 0x2, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffe, 0xfffffffffffffffc]}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000ac0)={0xeeee0000, 0x100000}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x32) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000b00)={0x1, 0x4}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000b80)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000b40)=0x6a}) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000001040)={0x0, &(0x7f0000000bc0)=[@uexit={0x0, 0x18, 0x8}, @code={0xa, 0xb4, {"c0cb8cd200c0b8f2010080d2c20180d2630080d2e40080d2020000d4007008d5008d90d20060b0f2a10180d2020080d2e30180d2c40180d2020000d40000679e0060600d20a294d20080b8f2610080d2e20180d2030180d2640080d2020000d4e09d85d20020b8f2410180d2020080d2e30180d2640080d2020000d4a01c8fd200e0b8f2210080d2820180d2e30180d2240180d2020000d40000201e007008d5"}}, @mrs={0xbe, 0x18, {0x603000000013c019}}, @eret={0xe6, 0x18, 0x6}, @irq_setup={0x46, 0x18, {0x0, 0x316}}, @its_send_cmd={0xaa, 0x28, {0x5, 0x1, 0x1, 0x3, 0x401, 0x8, 0x4}}, @its_setup={0x82, 0x28, {0x0, 0x0, 0x3ac}}, @svc={0x122, 0x40, {0x32000000, [0x1d5b, 0x9, 0x4, 0x3, 0x10001]}}, @eret={0xe6, 0x18, 0x3}, @irq_setup={0x46, 0x18, {0x3, 0x82}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0x8, 0x0, 0x8}}, @uexit={0x0, 0x18, 0x8}, @irq_setup={0x46, 0x18, {0x4, 0x6f}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffd0, 0x80, 0xd}}, @msr={0x14, 0x20, {0x603000000013df52, 0x1}}, @mrs={0xbe, 0x18, {0x603000000013df41}}, @code={0xa, 0x6c, {"00000079007008d5000040d4e0cb88d20020b0f2a10180d2a20080d2830080d2440180d2020000d40000181e000028d5000008d5008060880040651ee0558ad20000b8f2410080d2e20180d2a30180d2640080d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0x6, 0x71b, 0x3, 0x3}}, @smc={0x1e, 0x40, {0x80000000, [0x9e, 0x5, 0x10000, 0x1, 0xa6]}}, @hvc={0x32, 0x40, {0x8400000e, [0xb05b, 0xfffffffffffffffc, 0x5, 0x9, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013c015}}, @svc={0x122, 0x40, {0xc4000011, [0x7, 0x9, 0x10, 0x100000000, 0xff]}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x10, 0x6, 0x2}}, @eret={0xe6, 0x18, 0xdd2}], 0x450}, &(0x7f0000001080)=[@featur2], 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000001100)=@riscv64_smstateen_csr={0x0, &(0x7f00000010c0)=0x8000000000000001}) eventfd2(0x9, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000001140)={0xa, 0x6}) syz_kvm_add_vcpu$arm64(r1, &(0x7f0000001680)={0x0, &(0x7f0000001180)=[@smc={0x1e, 0x40, {0x4000000, [0xc, 0x4, 0x0, 0x9, 0x9]}}, @hvc={0x32, 0x40, {0x80, [0x400, 0x54, 0x4, 0xc3ed, 0x7]}}, @eret={0xe6, 0x18, 0xc}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x19f}}, @hvc={0x32, 0x40, {0x4000000, [0xa183, 0x7, 0x8, 0x3400, 0x8]}}, @code={0xa, 0x9c, {"c06d86d20080b8f2c10180d2220180d2a30080d2440180d2020000d4c0918dd20020b8f2210080d2020180d2630080d2a40180d2020000d480e088d20000b8f2210180d2e20180d2e30180d2c40180d2020000d400fc209b0068217e008008d5c02a92d20080b0f2010080d2420180d2630080d2a40180d2020000d4007008d50040e00d007008d5"}}, @svc={0x122, 0x40, {0x4000000, [0x9348, 0x3, 0x8, 0x3, 0x6b]}}, @irq_setup={0x46, 0x18, {0x1, 0x37f}}, @irq_setup={0x46, 0x18, {0x0, 0x245}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @uexit={0x0, 0x18, 0x9}, @hvc={0x32, 0x40, {0x8600ff01, [0x8, 0xfff, 0x9, 0x5, 0x4]}}, @svc={0x122, 0x40, {0x84000006, [0x2, 0x44, 0x80, 0x2, 0xffffffff]}}, @msr={0x14, 0x20, {0x603000000013c01c, 0x3}}, @mrs={0xbe, 0x18, {0x603000000013c527}}, @msr={0x14, 0x20, {0x603000000013dea5, 0x5}}, @msr={0x14, 0x20, {0x6030000000138016, 0x80000000}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0x10, 0x1, 0x200}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x1, 0x4, 0xb, 0xed, 0x8}}, @code={0xa, 0x3c, {"0010805f008008d500f8b07e000028d500008028000028d5007008d5008008d5000008d5000028d5"}}, @svc={0x122, 0x40, {0x4500001b, [0x1ff, 0x7, 0x8001, 0x21000000, 0x4]}}, @mrs={0xbe, 0x18, {0x603000000013dee9}}, @svc={0x122, 0x40, {0x8, [0x80000000, 0x1, 0x5, 0xffff, 0x3a78]}}, @code={0xa, 0x6c, {"007008d5008008d50048216e000028d5202097d20020b8f2810080d2a20180d2a30080d2040180d2020000d4007008d500a8200ec02c86d200c0b8f2610080d2820080d2230180d2240180d2020000d4000008d5007008d5"}}, @its_send_cmd={0xaa, 0x28, {0xc, 0x0, 0x0, 0x1, 0x80000001, 0x1, 0x2}}], 0x4ec}, &(0x7f00000016c0)=[@featur2={0x1, 0x8}], 0x1) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_vgic_v3_setup(r4, 0x2, 0x20) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000001b00)={0x10200, 0x180, 0x0, &(0x7f0000001700)=[0x1, 0xb71d, 0x7, 0x3, 0x100000001, 0xeb9d, 0x3, 0x8, 0xffffffffffffffed, 0xe, 0x8, 0x3, 0x3, 0xe, 0x8, 0x29, 0x5, 0x1, 0xffffffffffffffff, 0x5, 0xe, 0x3, 0x100000000, 0x8, 0xc, 0xfffffffffffffff8, 0x7f, 0x3a88, 0x3, 0x8, 0x0, 0x8, 0xffff, 0x1, 0x7ce, 0x8, 0x1, 0x8, 0x66c, 0x7f, 0x7fffffffffffffff, 0xb, 0x4, 0x3, 0x9, 0x1, 0x9000000000000000, 0x2, 0xa5b4, 0x2, 0x2, 0x7, 0x4, 0x9, 0x9, 0x0, 0x10001, 0xb64, 0x6, 0x7, 0xfd1, 0x7, 0x0, 0xc, 0x0, 0x3, 0x8, 0x9, 0x8, 0x8000000000000001, 0x2, 0x2, 0x5, 0x81, 0xc, 0x5c50, 0x1, 0x7, 0x6083f2be, 0x8, 0x400, 0xb997, 0x7, 0x80, 0x1, 0xfffffffffffffffd, 0x9, 0x4, 0x7fff, 0x8, 0x8000000000000001, 0x4, 0xffffffffffffffff, 0xeca4, 0x8001, 0x87, 0x1, 0xc, 0x5, 0x8, 0x6, 0x0, 0x10000, 0x0, 0x8, 0xf7f, 0x2, 0x9, 0x5, 0x6, 0x3, 0x0, 0x7, 0x5, 0x6, 0x1, 0xa9, 0x80000000, 0x81, 0x7, 0x8000000000000001, 0x0, 0x9cba, 0xffffffffffffffff, 0x8000000000000, 0x8000000000000000, 0x80000000, 0x7fff]}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, &(0x7f0000001b40)={0x29f, 0x8}) syz_kvm_setup_cpu$arm64(r6, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000001e00)=[{0x0, &(0x7f0000001b80)=[@code={0xa, 0x84, {"007008d5007008d5001c0053800e85d20020b8f2610180d2420080d2e30080d2040180d2020000d400a4006f807a9fd20040b8f2a10180d2a20080d2e30180d2840080d2020000d4007008d5007008d5008008d5a0a183d20060b8f2e10180d2420080d2230180d2840180d2020000d4"}}, @svc={0x122, 0x40, {0x80000000, [0x2, 0x8, 0x4, 0x0, 0x5]}}, @irq_setup={0x46, 0x18, {0x1, 0x351}}, @hvc={0x32, 0x40, {0x86000000, [0xc4, 0x8, 0xb, 0xff, 0x4]}}, @eret={0xe6, 0x18}, @eret={0xe6, 0x18, 0x4}, @uexit={0x0, 0x18, 0x4}, @eret={0xe6, 0x18, 0x3}, @msr={0x14, 0x20, {0x603000000013e6cb, 0x9}}, @code={0xa, 0x6c, {"007008d5000840ba008008d5000008d5e0079f1a206a9bd20080b0f2a10180d2620180d2e30080d2840180d2020000d4000028d5007008d5e0cd90d20020b8f2e10180d2c20180d2230180d2a40080d2020000d400008072"}}, @mrs={0xbe, 0x18, {0x6030000000138015}}, @irq_setup={0x46, 0x18, {0x1, 0x269}}, @smc={0x1e, 0x40, {0x84000002, [0x2dc, 0xc, 0x5, 0x80000000, 0x5]}}], 0x278}], 0x1, 0x0, &(0x7f0000001e40)=[@featur2], 0x1) 31.501693774s ago: executing program 1 (id=215): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_CAP_ARM_MTE(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) (async) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x9, 0x4, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) (async) r4 = syz_kvm_add_vcpu$arm64(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x1, 0x4}}, @its_send_cmd={0xaa, 0x28, {0xb, 0x0, 0x0, 0x9, 0x4, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) r5 = syz_kvm_vgic_v3_setup(r2, 0x1, 0x100) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) (async) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r11, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) (async) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) r13 = syz_kvm_vgic_v3_setup(r8, 0x1, 0x40) close(r12) close(0x4) close(r13) close(0x5) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r14 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r15, 0x800454d7, 0x20000003) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r16, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000040)=@attr_other={0x0, 0x4, 0x3, 0x0}) 29.228399786s ago: executing program 0 (id=216): r0 = syz_kvm_vgic_v3_setup(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x8001, 0x1c, &(0x7f0000000000)=0x1}) r1 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) r2 = syz_kvm_add_vcpu$arm64(r1, &(0x7f00000004c0)={0x0, &(0x7f0000000080)=[@its_send_cmd={0xaa, 0x28, {0xe, 0x0, 0x1, 0xe, 0xfff, 0x8000, 0x2}}, @uexit={0x0, 0x18, 0xe}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x4, 0x9, 0xffff, 0xffff, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013e609}}, @msr={0x14, 0x20, {0x603000000013dea3, 0x8e}}, @svc={0x122, 0x40, {0x10, [0x13e, 0x312ddede, 0xcb07, 0x3, 0xfff]}}, @smc={0x1e, 0x40, {0xc4000012, [0x1d2c, 0x3, 0xc, 0x100, 0x9]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe8, 0x1, 0x15}}, @svc={0x122, 0x40, {0x80000000, [0xffffffffffffff80, 0xffffffffffffffff, 0x8bf, 0x80, 0x447c]}}, @code={0xa, 0x9c, {"00d4202e008008d5000008d560dc91d20060b0f2010080d2220180d2c30080d2c40080d2020000d400b8202e007008d560fc9fd200e0b0f2e10080d2820080d2630080d2c40180d2020000d4008008d5800784d200c0b0f2e10180d2820080d2630080d2840080d2020000d420ea98d20020b8f2810080d2a20080d2e30180d2440180d2020000d4"}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x1, 0x2, 0xf, 0x6c42, 0xe9ef}}, @uexit={0x0, 0x18, 0x5}, @smc={0x1e, 0x40, {0xc7000021, [0x3, 0x2, 0xd, 0xed, 0x3]}}, @msr={0x14, 0x20, {0x603000000013de90, 0x4}}, @mrs={0xbe, 0x18, {0x603000000013d89b}}, @eret={0xe6, 0x18, 0x4}, @msr={0x14, 0x20, {0x603000000013def4, 0x6}}, @eret={0xe6, 0x18, 0x80000001}, @irq_setup={0x46, 0x18, {0x1, 0x36f}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x3, 0xe, 0xfffffff8, 0x3, 0x3}}, @eret={0xe6, 0x18, 0xc8}, @mrs={0xbe, 0x18, {0x603000000013dea3}}, @uexit={0x0, 0x18}, @its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x0, 0xe, 0x4b, 0x3, 0x3}}, @svc={0x122, 0x40, {0x100, [0x0, 0x5, 0x0, 0x7fffffffffffffff, 0x8]}}], 0x424}, &(0x7f0000000500)=[@featur2={0x1, 0xa0}], 0x1) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000540)={0x7, 0x2, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000005c0)=@attr_riscv64=@attr_addr={0x0, 0x1, @aplic, &(0x7f0000000580)=0xc1b}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000640)=@attr_other={0x0, 0x4, 0xb, &(0x7f0000000600)=0x8000000000000001}) munmap(&(0x7f0000c60000/0x1000)=nil, 0x1000) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f00000006c0)=@arm64_bitmap={0x6030000000160000, &(0x7f0000000680)=0x27}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000740)=@arm64_bitmap={0x6030000000160001, &(0x7f0000000700)=0x8}) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000007c0)=@riscv64_core={0x803000000020001a, &(0x7f0000000780)=0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000800)={0x2, 0x7, 0x100000, 0x1000, &(0x7f0000c5d000/0x1000)=nil, 0x7, r3}) ioctl$KVM_CAP_ARM_USER_IRQ(r3, 0x4068aea3, &(0x7f00000008c0)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000980)=@arm64_core={0x6030000000100046, &(0x7f0000000940)}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000a00)=@attr_arm64={0x0, 0x2, 0x2, &(0x7f00000009c0)=0x42358300}) ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000a40)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000ac0)={0xffffffffffffffff, 0x3, 0x0, r3}) syz_kvm_setup_cpu$arm64(r3, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000fc0)=[{0x0, &(0x7f0000000b00)=[@its_send_cmd={0xaa, 0x28, {0x1, 0x1, 0x1, 0x4, 0x6, 0x57, 0x1}}, @code={0xa, 0x84, {"008a85d200a0b0f2c10180d2e20080d2030080d2e40180d2020000d40038202e0048200e5f3003d540a484d200c0b0f2210080d2c20180d2830180d2a40180d2020000d40004000f00fc002f00a49f0d000008d580c298d20080b0f2c10080d2620080d2230180d2c40080d2020000d4"}}, @smc={0x1e, 0x40, {0x8f153ee39f6cd36d, [0x4, 0x6, 0x200, 0x9, 0x8]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x28d}}, @svc={0x122, 0x40, {0x8400000e, [0x7, 0x4, 0x0, 0x1000, 0x4]}}, @smc={0x1e, 0x40, {0x80000000, [0x0, 0xfffffffffffffff5, 0x6, 0x3, 0x8]}}, @mrs={0xbe, 0x18, {0x603000000013dce1}}, @msr={0x14, 0x20, {0x603000000013c522, 0x2}}, @code={0xa, 0x84, {"0048c01a000028d500df9ed200c0b8f2a10080d2a20180d2c30180d2e40180d2020000d4007008d5800e93d200c0b8f2810080d2e20080d2c30180d2640080d2020000d40040641e007008d5009790d20000b0f2810180d2c20080d2630080d2c40180d2020000d4000028d500b4207e"}}, @memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x280}}, @code={0xa, 0x54, {"000008d5010000d4007008d5007008d5000028d5008008d5007008d5c04095d200c0b0f2610180d2820080d2a30180d2040180d2020000d40000781e00004039"}}, @irq_setup={0x46, 0x18, {0x3, 0x16}}, @uexit={0x0, 0x18, 0x7}, @smc={0x1e, 0x40, {0xc5000020, [0xffffffffffffaca8, 0xb, 0x5, 0x7fffffff, 0x9]}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x1, 0x7, 0x3, 0x8, 0x1}}, @hvc={0x32, 0x40, {0x600c00c, [0x6, 0xfffffffffffffe00, 0x9, 0x80000001]}}, @code={0xa, 0xb4, {"007008d5e03497d20060b0f2210180d2620180d2630080d2040180d2020000d400d8a10e009a99d200a0b0f2610180d2e20180d2030080d2840080d2020000d460e086d20040b8f2810080d2820080d2030080d2c40180d2020000d4e0e784d200c0b8f2c10080d2c20080d2830180d2e40180d2020000d4c02391d200e0b0f2c10080d2e20180d2430080d2240180d2020000d400c0651e00d8a17e0098202e"}}, @eret={0xe6, 0x18, 0x1ff0000000000}, @mrs={0xbe, 0x18, {0x603000000013e304}}, @its_send_cmd={0xaa, 0x28, {0x3, 0x0, 0x2, 0xf, 0x2, 0x10000, 0x1}}], 0x4b8}], 0x1, 0x0, &(0x7f0000001000)=[@featur2={0x1, 0x10}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000001040)={0x2000, 0x2000}) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000010c0)=@attr_other={0x0, 0x48000000, 0xddf, &(0x7f0000001080)=0x7}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000001140)=@arm64_sve_vls={0x606000000015ffff, &(0x7f0000001100)=0xba3c}) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000001180)={0x7, 0x9}) syz_kvm_setup_syzos_vm$arm64(r3, &(0x7f0000c00000/0x400000)=nil) write$eventfd(r3, &(0x7f00000011c0)=0x2, 0x8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000001200)={0xeeee8000, 0x12000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0x20a000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001280)={0x0, 0x4, 0xe000, 0x2000, &(0x7f0000ddb000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 23.369176406s ago: executing program 0 (id=217): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)=@arm64_core={0x6030000000100008, &(0x7f0000000040)=0x8000000000000005}) r3 = openat$kvm(0x0, &(0x7f0000000280), 0x103080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xa) r6 = syz_kvm_vgic_v3_setup(r5, 0xfffffffffffffffd, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000000100)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0xca4, &(0x7f0000000180)=0xf8b7}) r7 = syz_kvm_vgic_v3_setup(r4, 0x3, 0x160) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x5000, 0x12000, 0x81}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r10, &(0x7f00000001c0)=0x4000000001, 0x56) ioctl$KVM_GET_DEVICE_ATTR(r7, 0x4018aee2, &(0x7f0000000040)=@attr_other={0x0, 0x400000, 0x6, &(0x7f0000000000)=0x4}) 19.14907349s ago: executing program 1 (id=218): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x1}) syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000a0a000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@msr={0x14, 0x20, {0x603000000013f667, 0x6}}, @hvc={0x32, 0x40, {0x86000001, [0x5cc7, 0x6, 0xfff, 0x1, 0x81]}}, @its_setup={0x82, 0x28, {0x4, 0x0, 0x148}}, @code={0xa, 0x6c, {"007008d5206398d20000b8f2210080d2220080d2a30180d2040080d2020000d400c8a00e007008d5000028d5002cc09a20fd88d200c0b8f2410080d2420080d2a30080d2240180d2020000d4000c407c007008d50038202e"}}, @irq_setup={0x46, 0x18, {0x3, 0x326}}, @mrs={0xbe, 0x18, {0x5bbd}}, @msr={0x14, 0x20, {0x603000000013e6c3, 0x4}}, @code={0xa, 0xb4, {"007008d5a0f388d20040b0f2610080d2420080d2c30080d2840080d2020000d4007008d500d4a00e007008d540ce85d200a0b0f2a10080d2620080d2830180d2840080d2020000d4000028d5a0c29fd20020b8f2e10080d2c20180d2430080d2840180d2020000d4c02a91d20080b8f2410080d2e20080d2e30080d2c40180d2020000d4a02793d200a0b0f2410180d2c20180d2a30080d2440080d2020000d4"}}, @hvc={0x32, 0x40, {0x80000000, [0x2, 0x1, 0x80000000, 0x5, 0x8]}}, @irq_setup={0x46, 0x18, {0x2, 0x1e9}}, @uexit={0x0, 0x18, 0x2}], 0x268}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.290466928s ago: executing program 0 (id=219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, 0x930, 0x1, 0x13, r2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_CAP_ARM_MTE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r4, 0x80086601, 0x10000000000000) 9.814283152s ago: executing program 1 (id=220): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r1, r2, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000080)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0x13}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28033, r2, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000c58000/0x1000)=nil, r5, 0x2000003, 0xaf832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x6, 0x8032, 0xffffffffffffffff, 0x0) r6 = syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000480)={0x0, &(0x7f0000000040)=[@its_setup={0x82, 0x28, {0x3, 0x2, 0x171}}, @smc={0x1e, 0x40, {0x84000012, [0x1, 0x8, 0x6, 0x8, 0x2]}}, @its_send_cmd={0xaa, 0x28, {0xd, 0x0, 0x1, 0xf, 0x1000, 0x80, 0x2}}, @uexit={0x0, 0x18, 0x7}, @eret={0xe6, 0x18, 0xf3}, @smc={0x1e, 0x40, {0xc4000014, [0x101, 0x57, 0xa, 0xb96b, 0x7]}}, @hvc={0x32, 0x40, {0x80003fff, [0x9, 0x10001, 0x2, 0x6, 0x5c6]}}, @memwrite={0x6e, 0x30, @vgic_gits={0x8080000, 0xffe0, 0x7, 0x8}}, @its_setup={0x82, 0x28, {0x2, 0x1, 0x2fb}}, @its_setup={0x82, 0x28, {0x3, 0x4, 0x7}}, @its_setup={0x82, 0x28, {0x1, 0x4, 0x2d3}}, @mrs={0xbe, 0x18, {0x603000000013802d}}, @code={0xa, 0xe4, {"20e985d20080b0f2a10080d2220080d2830180d2240080d2020000d4a0038dd200e0b0f2a10080d2e20180d2830180d2a40080d2020000d4c05097d200a0b0f2a10080d2420180d2830180d2640080d2020000d4008008d5201a8ed200c0b0f2610180d2c20180d2c30080d2040180d2020000d4007008d5c00a9bd20000b0f2410080d2a20180d2830080d2840180d2020000d4e04096d20040b8f2610180d2c20080d2a30080d2440180d2020000d4e0ce8cd20080b8f2010180d2c20180d2030180d2c40180d2020000d4008008d5"}}, @smc={0x1e, 0x40, {0xc4000053, [0x4, 0x401, 0x1, 0x8000, 0xfffffffffffffffe]}}, @msr={0x14, 0x20, {0x603000000013801d, 0x2}}, @hvc={0x32, 0x40, {0xc400000e, [0x1, 0x1000, 0x2, 0x6, 0x5]}}, @its_setup={0x82, 0x28, {0x4, 0x2, 0x9f}}, @code={0xa, 0x84, {"40a095d200c0b8f2e10080d2a20080d2e30180d2640180d2020000d4000040ba007008d500a4600d005c200ea02980d200c0b0f2210180d2220080d2230080d2040080d2020000d400739ad20060b8f2810080d2820080d2030080d2c40180d2020000d4000028d50060002f000028d5"}}], 0x430}, &(0x7f00000004c0)=[@featur2={0x1, 0x4}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) 6.942114158s ago: executing program 0 (id=221): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x800004, 0xa0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x3, 0x3, 0x10000000004}}, @its_send_cmd={0xaa, 0x28, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_vgic_v3_setup(r5, 0x3, 0x160) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000240)={r5, 0x0, 0x3, r5}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) 0s ago: executing program 1 (id=222): r0 = openat$kvm(0x0, 0x0, 0x8280, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$arm64(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r3, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=[@featur2={0x1, 0x491cab28f0f6d128}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000080)="4200eee491ca24e00d0003000098bea5038b6db300cd411a0000000000000001a8092240f0ee5c0030521e10000000830000000000000000010000000000000000000000591f9b21", 0x0, 0xffffffffffffff1f) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x1a17f2, 0x1f01) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)=@attr_pmu_irq={0x0, 0x0, 0x1000000, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x1, 0x1, 0x0, @sint={0x7, 0x5}}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r6, 0x0, 0x0, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r8, r9, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@svc={0x122, 0x40, {0x84000001, [0xa6, 0x3, 0x200, 0x50e8, 0x400]}}, @hvc={0x32, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x7, 0x4]}}], 0x80}], 0x1, 0x0, 0x0, 0x0) r10 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x2b) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x5) r13 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r10, 0xae04) mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, r13, 0x2, 0x12, r12, 0x0) mmap$KVM_VCPU(&(0x7f0000010000/0x4000)=nil, r13, 0x100000a, 0x12, r12, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 383.200548][ T24] audit: type=1400 audit(382.420:74): avc: denied { read } for pid=3209 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 390.808223][ T24] audit: type=1400 audit(390.020:75): avc: denied { write } for pid=3265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.838861][ T24] audit: type=1400 audit(395.050:76): avc: denied { write } for pid=3268 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.293328][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.842613][ T24] audit: type=1400 audit(406.070:77): avc: denied { write } for pid=3272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.776492][ T24] audit: type=1400 audit(410.000:78): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.623579][ T24] audit: type=1400 audit(421.850:79): avc: denied { write } for pid=3280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.418442][ T24] audit: type=1400 audit(425.640:80): avc: denied { write } for pid=3283 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.459424][ T24] audit: type=1400 audit(435.650:81): avc: denied { write } for pid=3288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.149552][ T24] audit: type=1400 audit(439.370:82): avc: denied { write } for pid=3291 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.595136][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices [ 452.978515][ T24] audit: type=1400 audit(452.140:83): avc: denied { write } for pid=3297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 458.058468][ T24] audit: type=1400 audit(457.270:84): avc: denied { write } for pid=3300 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.760294][ T24] audit: type=1400 audit(465.970:85): avc: denied { write } for pid=3303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.481043][ T24] audit: type=1400 audit(469.700:86): avc: denied { write } for pid=3306 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.539106][ T24] audit: type=1400 audit(481.760:87): avc: denied { write } for pid=3312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.424347][ T24] audit: type=1400 audit(485.650:88): avc: denied { write } for pid=3315 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.561661][ T24] audit: type=1400 audit(490.790:89): avc: denied { write } for pid=3317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.391070][ T24] audit: type=1400 audit(494.620:90): avc: denied { write } for pid=3320 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.778946][ T24] audit: type=1400 audit(504.000:91): avc: denied { write } for pid=3324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.440567][ T24] audit: type=1400 audit(507.660:92): avc: denied { write } for pid=3327 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.135622][ T24] audit: type=1400 audit(528.360:93): avc: denied { write } for pid=3335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 533.029474][ T24] audit: type=1400 audit(532.240:94): avc: denied { write } for pid=3338 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.079682][ T24] audit: type=1400 audit(552.260:95): avc: denied { write } for pid=3347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.770462][ T24] audit: type=1400 audit(555.990:96): avc: denied { write } for pid=3350 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.281250][ T24] audit: type=1400 audit(565.480:97): avc: denied { write } for pid=3353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.028281][ T24] audit: type=1400 audit(569.250:98): avc: denied { write } for pid=3356 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:44906' (ED25519) to the list of known hosts. [ 596.149629][ T24] audit: type=1400 audit(595.370:99): avc: denied { name_bind } for pid=3361 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 598.141850][ T24] audit: type=1400 audit(597.360:100): avc: denied { execute } for pid=3362 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 598.188454][ T24] audit: type=1400 audit(597.380:101): avc: denied { execute_no_trans } for pid=3362 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 625.566786][ T24] audit: type=1400 audit(624.790:102): avc: denied { mounton } for pid=3362 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 625.604058][ T24] audit: type=1400 audit(624.830:103): avc: denied { mount } for pid=3362 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 625.692543][ T3362] cgroup: Unknown subsys name 'net' [ 625.753416][ T24] audit: type=1400 audit(624.970:104): avc: denied { unmount } for pid=3362 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 626.144903][ T3362] cgroup: Unknown subsys name 'cpuset' [ 626.265642][ T3362] cgroup: Unknown subsys name 'rlimit' [ 627.102035][ T24] audit: type=1400 audit(626.320:105): avc: denied { setattr } for pid=3362 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.121733][ T24] audit: type=1400 audit(626.340:106): avc: denied { mounton } for pid=3362 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 627.143349][ T24] audit: type=1400 audit(626.370:107): avc: denied { mount } for pid=3362 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 628.134594][ T3366] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 628.154612][ T24] audit: type=1400 audit(627.380:108): avc: denied { relabelto } for pid=3366 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 628.174655][ T24] audit: type=1400 audit(627.400:109): avc: denied { write } for pid=3366 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 628.366008][ T24] audit: type=1400 audit(627.590:110): avc: denied { read } for pid=3362 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 628.383880][ T24] audit: type=1400 audit(627.610:111): avc: denied { open } for pid=3362 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 628.434572][ T3362] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 687.452151][ T24] audit: type=1400 audit(686.680:112): avc: denied { execmem } for pid=3367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 690.995379][ T24] audit: type=1400 audit(690.220:113): avc: denied { read } for pid=3369 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 691.013114][ T24] audit: type=1400 audit(690.240:114): avc: denied { read } for pid=3370 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 691.036457][ T24] audit: type=1400 audit(690.260:115): avc: denied { open } for pid=3369 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 691.112784][ T24] audit: type=1400 audit(690.320:116): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 691.359965][ T24] audit: type=1400 audit(690.550:117): avc: denied { module_request } for pid=3370 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 691.370760][ T24] audit: type=1400 audit(690.560:118): avc: denied { module_request } for pid=3369 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 692.322953][ T24] audit: type=1400 audit(691.550:119): avc: denied { sys_module } for pid=3369 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 717.015575][ T3369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.275777][ T3369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.026774][ T3370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.189447][ T3370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.121584][ T3369] hsr_slave_0: entered promiscuous mode [ 729.158768][ T3369] hsr_slave_1: entered promiscuous mode [ 730.274134][ T3370] hsr_slave_0: entered promiscuous mode [ 730.306811][ T3370] hsr_slave_1: entered promiscuous mode [ 730.339147][ T3370] debugfs: 'hsr0' already exists in 'hsr' [ 730.343230][ T3370] Cannot create hsr debugfs directory [ 735.899150][ T24] audit: type=1400 audit(735.120:120): avc: denied { create } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 735.929221][ T24] audit: type=1400 audit(735.150:121): avc: denied { write } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 736.029812][ T24] audit: type=1400 audit(735.230:122): avc: denied { read } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 736.161580][ T3369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 736.483485][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.611078][ T3369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.841006][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.895523][ T3369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 737.060327][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.218414][ T3369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 737.312022][ T3369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.796076][ T3370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.933811][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.976406][ T3370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 739.120441][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.154853][ T3370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 739.331985][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.455213][ T3370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 739.623006][ T3370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.920801][ T3369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.265341][ T3370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.688851][ T24] audit: type=1400 audit(788.890:123): avc: denied { write } for pid=3495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.822045][ T24] audit: type=1400 audit(794.030:124): avc: denied { write } for pid=3504 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 808.610529][ T3369] veth0_vlan: entered promiscuous mode [ 809.132218][ T3369] veth1_vlan: entered promiscuous mode [ 810.762462][ T3370] veth0_vlan: entered promiscuous mode [ 811.470260][ T3370] veth1_vlan: entered promiscuous mode [ 811.599457][ T3369] veth0_macvtap: entered promiscuous mode [ 812.230282][ T3369] veth1_macvtap: entered promiscuous mode [ 814.280039][ T3370] veth0_macvtap: entered promiscuous mode [ 814.354419][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.435208][ T3421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.441437][ T3421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.505786][ T3421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.900107][ T3370] veth1_macvtap: entered promiscuous mode [ 816.967057][ T24] audit: type=1400 audit(816.190:125): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 817.320746][ T24] audit: type=1400 audit(816.520:126): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzkaller.zpYty5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 817.476279][ T24] audit: type=1400 audit(816.700:127): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 817.755633][ T24] audit: type=1400 audit(816.980:128): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzkaller.zpYty5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 817.860547][ T24] audit: type=1400 audit(817.070:129): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/syzkaller.zpYty5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 818.316899][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.319373][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.321468][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.322261][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.899843][ T24] audit: type=1400 audit(818.060:130): avc: denied { unmount } for pid=3369 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 819.289418][ T24] audit: type=1400 audit(818.490:131): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 819.433577][ T24] audit: type=1400 audit(818.660:132): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="gadgetfs" ino=3759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 820.024717][ T24] audit: type=1400 audit(819.250:133): avc: denied { mount } for pid=3369 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 820.200241][ T24] audit: type=1400 audit(819.420:134): avc: denied { mounton } for pid=3369 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 822.226510][ T3369] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 823.699031][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 823.704204][ T24] audit: type=1400 audit(822.910:137): avc: denied { read write } for pid=3369 comm="syz-executor" name="loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.739293][ T24] audit: type=1400 audit(822.960:138): avc: denied { open } for pid=3369 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 823.791228][ T24] audit: type=1400 audit(823.000:139): avc: denied { ioctl } for pid=3369 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.146804][ T24] audit: type=1400 audit(835.370:140): avc: denied { read } for pid=3526 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 836.240758][ T24] audit: type=1400 audit(835.460:141): avc: denied { open } for pid=3526 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 836.766876][ T24] audit: type=1400 audit(835.990:142): avc: denied { ioctl } for pid=3526 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 846.803963][ T24] audit: type=1400 audit(845.960:143): avc: denied { append } for pid=3538 comm="syz.1.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 849.491849][ T24] audit: type=1400 audit(848.710:144): avc: denied { create } for pid=3538 comm="syz.1.4" anonclass=[kvm-gmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 849.639398][ T24] audit: type=1400 audit(848.860:145): avc: denied { map } for pid=3538 comm="syz.1.4" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 849.723078][ T24] audit: type=1400 audit(848.940:146): avc: denied { read } for pid=3538 comm="syz.1.4" path=2F5B6B766D2D676D656D5D202864656C6574656429 dev="guest_memfd" ino=3986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 857.561432][ T24] audit: type=1400 audit(856.780:147): avc: denied { write } for pid=3546 comm="syz.1.6" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 873.289511][ T24] audit: type=1400 audit(872.510:148): avc: denied { ioctl } for pid=3555 comm="syz.1.9" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 905.380059][ T24] audit: type=1400 audit(904.600:149): avc: denied { execute } for pid=3564 comm="syz.1.13" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 935.230655][ T24] audit: type=1400 audit(934.440:150): avc: denied { map } for pid=3578 comm="syz.1.18" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1042.692149][ T3635] kvm [3635]: Failed to find VMA for hva 0x20de8000 [ 1049.845565][ T24] audit: type=1400 audit(1049.020:151): avc: denied { setattr } for pid=3641 comm="syz.0.38" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1112.237084][ T3683] kvm [3683]: Failed to find VMA for hva 0x20abb000 [ 1223.916985][ T3754] kvm [3754]: Failed to find VMA for hva 0x20d8d000 [ 1223.922270][ T3755] kvm [3755]: Failed to find VMA for hva 0x20d8d000 [ 1233.071947][ T3763] kvm [3763]: Failed to find VMA for hva 0x20c79000 [ 1275.488579][ T24] audit: type=1400 audit(1274.680:152): avc: denied { read open } for pid=3785 comm="syz.1.78" path="net:[4026532628]" dev="nsfs" ino=4026532628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1275.713194][ T24] audit: type=1400 audit(1274.860:153): avc: denied { ioctl } for pid=3785 comm="syz.1.78" path="net:[4026532628]" dev="nsfs" ino=4026532628 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1286.089029][ T24] audit: type=1400 audit(1285.290:154): avc: denied { mmap_zero } for pid=3791 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1349.788897][ T24] audit: type=1400 audit(1348.960:155): avc: denied { write } for pid=3825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1357.434100][ T24] audit: type=1400 audit(1356.650:156): avc: denied { write } for pid=3832 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.999806][ T24] audit: type=1400 audit(1395.220:157): avc: denied { map } for pid=3862 comm="syz.0.101" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1396.049831][ T24] audit: type=1400 audit(1395.270:158): avc: denied { execute } for pid=3862 comm="syz.0.101" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1573.519398][ T24] audit: type=1400 audit(1572.740:159): avc: denied { write } for pid=3978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1581.288401][ T24] audit: type=1400 audit(1580.510:160): avc: denied { write } for pid=3989 comm="rm" name="hook-state" dev="tmpfs" ino=69 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1631.973280][ T4025] kvm [4025]: Failed to find VMA for hva 0x20e8a000 [ 1891.513258][ T4201] kvm [4201]: Failed to find VMA for hva 0x2053c000 [ 1921.933968][ T4215] kvm [4215]: Failed to find VMA for hva 0x20e8b000 [ 1922.916782][ T4215] kvm [4215]: Failed to find VMA for hva 0x20e8b000 [ 1932.099845][ T4221] KVM: debugfs: duplicate directory 4221-5 [ 1957.545720][ T4235] Unable to handle kernel paging request at virtual address ffef800000000001 [ 1957.624013][ T4235] KASAN: null-ptr-deref in range [0x0000000000000010-0x000000000000001f] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1957.678987][ T4235] Mem abort info: [ 1957.711919][ T4235] ESR = 0x0000000096000004 [ 1957.716594][ T4235] EC = 0x25: DABT (current EL), IL = 32 bits [ 1957.739650][ T24] audit: type=1400 audit(1956.890:161): avc: denied { read } for pid=3168 comm="syslogd" name="log" dev="vda" ino=1857 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1957.745897][ T4235] SET = 0, FnV = 0 [ 1957.782210][ T24] audit: type=1400 audit(1956.990:162): avc: denied { search } for pid=3168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1957.852961][ T24] audit: type=1400 audit(1957.080:163): avc: denied { write search } for pid=3168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1957.864344][ T4235] EA = 0, S1PTW = 0 [ 1957.883177][ T4235] FSC = 0x04: level 0 translation fault [ 1957.886386][ T24] audit: type=1400 audit(1957.110:164): avc: denied { add_name } for pid=3168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1957.919177][ T4235] Data abort info: [ 1957.932614][ T24] audit: type=1400 audit(1957.160:165): avc: denied { create } for pid=3168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1957.941878][ T4235] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 1957.963994][ T4235] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1957.989807][ T24] audit: type=1400 audit(1957.210:166): avc: denied { append open } for pid=3168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1958.020600][ T4235] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1958.090792][ T4235] [ffef800000000001] address between user and kernel address ranges [ 1958.101031][ T4235] Internal error: Oops: 0000000096000004 [#1] SMP [ 1958.104469][ T4235] Modules linked in: [ 1958.106538][ T4235] CPU: 0 UID: 0 PID: 4235 Comm: syz.0.221 Not tainted syzkaller #0 PREEMPT [ 1958.108311][ T4235] Hardware name: linux,dummy-virt (DT) [ 1958.109739][ T4235] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1958.111093][ T4235] pc : vgic_its_save_tables_v0+0x3b4/0xe98 [ 1958.113545][ T4235] lr : vgic_its_save_tables_v0+0x30c/0xe98 [ 1958.114732][ T4235] sp : ffff8000a3c87be0 [ 1958.115533][ T4235] x29: ffff8000a3c87c60 x28: b9070000c0000600 x27: d3f000001f8f3e50 [ 1958.117346][ T4235] x26: 80f000001f715c38 x25: 0000000000000000 x24: 80f000001f715ce8 [ 1958.118918][ T4235] x23: ffff800086b07ba0 x22: e6f000001f8f37c0 x21: e1f000001f8f3e80 [ 1958.120443][ T4235] x20: 45f000001bb83000 x19: efff800000000000 x18: 0000000000000000 [ 1958.121915][ T4235] x17: 00000000000000c9 x16: ffff80008001159c x15: 0000000000000100 [ 1958.123456][ T4235] x14: 0000000000000100 x13: fff000000dc054c8 x12: 0ff0000000000001 [ 1958.125103][ T4235] x11: 0000000000000010 x10: 0000000000002000 x9 : 0000000000000000 [ 1958.126759][ T4235] x8 : 0001000000000000 x7 : ffff800080265068 x6 : 0000000000000000 [ 1958.128172][ T4235] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080170be8 [ 1958.129732][ T4235] x2 : d7f000001f8f3680 x1 : 0000000000000000 x0 : 0000000000000000 [ 1958.131530][ T4235] Call trace: [ 1958.132520][ T4235] vgic_its_save_tables_v0+0x3b4/0xe98 (P) [ 1958.134133][ T4235] vgic_its_set_attr+0x65c/0x85c [ 1958.135145][ T4235] kvm_device_ioctl+0x354/0x418 [ 1958.136164][ T4235] __arm64_sys_ioctl+0x18c/0x244 [ 1958.137258][ T4235] invoke_syscall+0x94/0x1ec [ 1958.138311][ T4235] el0_svc_common+0x120/0x2f4 [ 1958.139365][ T4235] do_el0_svc+0x58/0x74 [ 1958.140367][ T4235] el0_svc+0x64/0x240 [ 1958.141184][ T4235] el0t_64_sync_handler+0x84/0x12c [ 1958.142233][ T4235] el0t_64_sync+0x198/0x19c [ 1958.143849][ T4235] Code: 9100412b b2481d69 d344fd2c d378fd69 (386c6a6c) [ 1958.146059][ T4235] ---[ end trace 0000000000000000 ]--- [ 1958.147988][ T4235] Kernel panic - not syncing: Oops: Fatal exception [ 1958.150055][ T4235] Kernel Offset: disabled [ 1958.150940][ T4235] CPU features: 0x00000000,0034600b,f7c647a1,057ffe1f [ 1958.152203][ T4235] Memory Limit: none [ 1958.154021][ T4235] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:06:58 Registers: info registers vcpu 0 CPU#0 PC=ffff8000800e9f2c X00=ffff80008ca77648 X01=ffff80008ca77770 X02=ffff80008ca77770 X03=0000000000000010 X04=0000000000000003 X05=0000000000000001 X06=0000000000000000 X07=ffff800080daace4 X08=b0ac51df8e28c400 X09=0000000000000000 X10=0000000000000062 X11=00000000000000a9 X12=ffff800080010528 X13=000000007398de87 X14=00000000ffff8000 X15=ffff80008ca77640 X16=ffff800080010528 X17=0000000000000062 X18=fff0000074ce7b08 X19=ffff80008ca777d0 X20=ffff80008ca77758 X21=e3f000000de854c8 X22=ffff8000879255bc X23=89f000000dd69600 X24=0000000000000001 X25=0000000000000000 X26=ffff800087cbf2f0 X27=00000000000000c0 X28=0000000000000001 X29=ffff80008ca776c0 X30=ffff800080494814 SP=ffff80008ca77790 PSTATE=204020c9 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2525252525252525:2525252525252525 Z01=0000000000000075:25203a6b63617473 Z02=0000000000000008:0000000000000000 Z03=ffffffffffffff00:ff00000000000000 Z04=0000000000000000:fffffff0f0000000 Z05=0000000000000008:0000000000000002 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=bb448243222c92da:e3914ed4e87380b0 Z23=43788d6f07084f17:4508b00c6052a10f Z24=b20fae707afde253:388e9c6c4fa85ca0 Z25=8e9f894b2581e79e:20c883c9819d5c97 Z26=57c93d417f4d0394:89cd11f6992873d1 Z27=6b69be1163cb6500:a4ac85c293540e63 Z28=6edc4d3a2914b135:d8e9c869e2695c88 Z29=0000000000000000:0009000700030001 Z30=ffffff80ffffffd8:0000ffff981f6ac0 Z31=0000ffff981f6af0:0000ffff981f6af0