last executing test programs: 48.561394834s ago: executing program 1 (id=303): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ff5000/0x3000)=nil, 0x930, 0x100000f, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f0f000/0x2000)=nil, 0x2000) munmap(&(0x7f0000f2a000/0x2000)=nil, 0x2000) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f00004ff000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000f1a000/0x4000)=nil, 0x930, 0x0, 0x9032, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000e8b000/0x4000)=nil, 0x4000) munmap(&(0x7f000057e000/0x4000)=nil, 0x4000) munmap(&(0x7f00006b3000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f000064b000/0x4000)=nil, r1, 0x100000d, 0x9032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000667000/0x2000)=nil, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000100)={0x5, 0x18}) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000280)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000240)=0x7fffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) 45.138320718s ago: executing program 0 (id=304): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$arm64(r2, r3, &(0x7f0000e8a000/0x18000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000000000004000000000000000000000ef000000003a08000000000000010000000000000002c0f70000000000030000000000000004020000000000001400000000000000200000000000000084"], 0x60}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x401c5820, 0x20000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37.180564112s ago: executing program 0 (id=305): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x1000000) r0 = openat$kvm(0x0, &(0x7f0000000140), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000b, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000100), 0x82001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r4, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x3e77f1, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)=@arm64_sys={0x603000000013c4f1, 0x0}) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_GET_DEVICE_ATTR(r8, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x8, 0x4, &(0x7f0000000040)=0x1}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000180)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000100)=0x2}) ioctl$KVM_CREATE_VM(r5, 0x401c5820, 0x20000006) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_SET_GUEST_DEBUG_arm64(r2, 0x4208ae9b, &(0x7f00000002c0)={0x3, 0x0, {[0x1000, 0xd5a3, 0x6, 0x5c09, 0x9, 0x7, 0x0, 0x2, 0x9, 0x9750, 0x8ee1, 0x34b, 0x5, 0xba7, 0x6, 0x686f], [0x5, 0x7, 0x10, 0x5, 0xffffffff, 0x9, 0x7, 0x0, 0xb, 0x9, 0x7, 0x48, 0xc4, 0x5, 0x6, 0xf], [0x8, 0x10000, 0x5, 0x100, 0x4, 0x4, 0x7, 0x6, 0xf, 0x1, 0x7, 0x2, 0xffffffff, 0xfffffffffffffff5, 0x5, 0x5], [0x10001, 0xfe65, 0x80000001, 0x6, 0xfffffffffffffff8, 0x23, 0x5, 0x2, 0x7, 0x7, 0xf, 0x12, 0x3, 0xed6, 0xffffffff, 0x401]}}) syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) 33.034673305s ago: executing program 1 (id=306): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000008c0)={0x1000, 0x1000}) r2 = eventfd2(0x0, 0x80000) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r4, 0x2, 0x100) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r2, 0x3}) close(r1) 28.564827488s ago: executing program 0 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@its_setup={0x82, 0x28, {0x1, 0x4, 0x1}}, @its_send_cmd={0xaa, 0x28, {0xf, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}}], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000200)=0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x3}) 27.60210722s ago: executing program 1 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0x0, 0x0, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)=0x5) openat$kvm(0xffffff9c, 0x0, 0xa00f2, 0x408) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={0xffffffffffffffff, 0xc8}) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0x80087601, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x541b, 0x0) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@memwrite={0x6e, 0x30, @vgic_gicd={0x8000000, 0x50, 0x6243, 0x5}}], 0x30}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r10, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@its_setup={0x7, 0x28, {0x2, 0x2, 0x1}}], 0x28}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r4, 0x3, 0x2c0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f0000000300)=@attr_arm64={0x0, 0x4, 0x1, 0x0}) (async, rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r13, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x4, 0x2, 0x0}) 20.913032294s ago: executing program 0 (id=309): munmap(&(0x7f0000c8f000/0x4000)=nil, 0x4000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x2, 0x0, 0x20e4586c}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013c111, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.028188623s ago: executing program 1 (id=310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, r2, 0x3}) (async) r3 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x8000000000000000, 0xeeef0000, 0x0, r3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x203, 0x0, 0x2, r2, 0xf}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x8040aeb6, 0x0) (rerun: 32) 14.370441075s ago: executing program 0 (id=311): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_vgic_v3_setup(r2, 0x2, 0x40) (async) r3 = syz_kvm_vgic_v3_setup(r2, 0x2, 0x40) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000100)=@attr_arm64={0x0, 0x7, 0x0, &(0x7f00000000c0)=0x4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) (async) r5 = syz_kvm_vgic_v3_setup(r4, 0x1, 0x40) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f0000000140)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000001c0)=@arm64_core={0x603000000010001e, &(0x7f0000000180)=0x2}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5660b638, 0x0}) 8.820885762s ago: executing program 1 (id=312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0xe, 0x16831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) eventfd2(0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000004000/0x2000)=nil, 0x930, 0x2800002, 0x11, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f00000001c0)="fb4149dd033be3ac2cc4a22332a77b23b08986814d7bb14c94a6ab8031d1dfd92f00000000010000005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa7fc869d22627e7", 0x0, 0x48) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x4c4882, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x21a180, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x1, 0x104000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x3000}) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x600900, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000bde000/0x400000)=nil) r9 = syz_kvm_add_vcpu$arm64(r8, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r10 = openat$kvm(0x0, 0x0, 0x2002, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_setup_syzos_vm$arm64(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$arm64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x28) 6.642290809s ago: executing program 0 (id=313): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000007) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) (async) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)=@arm64_sve={0x60800000001504cb, 0x0}) syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) (async) r7 = syz_kvm_add_vcpu$arm64(r2, &(0x7f00000000c0)={0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@arm64={0x2, 0x3, 0x1, '\x00', 0x6}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@arm64={0x2, 0x3, 0x1, '\x00', 0x6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 1 (id=314): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000e31000/0x2000)=nil, 0x930, 0xa, 0x2012, r2, 0x40000) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000040)="68d3d4a6759ba655d47872b6bf881ba5dbca1c84a0779749", 0x0, 0xffffffffffffff65) kernel console output (not intermixed with test programs): [ 378.465245][ T3145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.736736][ T3145] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:27710' (ED25519) to the list of known hosts. [ 596.423133][ T25] audit: type=1400 audit(595.600:61): avc: denied { name_bind } for pid=3304 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 598.095242][ T25] audit: type=1400 audit(597.280:62): avc: denied { execute } for pid=3305 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 598.120055][ T25] audit: type=1400 audit(597.290:63): avc: denied { execute_no_trans } for pid=3305 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 617.654702][ T25] audit: type=1400 audit(616.830:64): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 617.686243][ T25] audit: type=1400 audit(616.870:65): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 617.768574][ T3305] cgroup: Unknown subsys name 'net' [ 617.823704][ T25] audit: type=1400 audit(617.000:66): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 618.187473][ T3305] cgroup: Unknown subsys name 'cpuset' [ 618.289621][ T3305] cgroup: Unknown subsys name 'rlimit' [ 619.208320][ T25] audit: type=1400 audit(618.390:67): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 619.227507][ T25] audit: type=1400 audit(618.410:68): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 619.257787][ T25] audit: type=1400 audit(618.440:69): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 620.840872][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 620.859433][ T25] audit: type=1400 audit(620.040:70): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 620.893911][ T25] audit: type=1400 audit(620.060:71): avc: denied { write } for pid=3307 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 621.076272][ T25] audit: type=1400 audit(620.260:72): avc: denied { read } for pid=3305 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.097109][ T25] audit: type=1400 audit(620.270:73): avc: denied { open } for pid=3305 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 621.147131][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 671.506956][ T25] audit: type=1400 audit(670.680:74): avc: denied { execmem } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 676.177318][ T25] audit: type=1400 audit(675.340:75): avc: denied { read } for pid=3310 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 676.205479][ T25] audit: type=1400 audit(675.390:76): avc: denied { open } for pid=3310 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 676.268069][ T25] audit: type=1400 audit(675.450:77): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 676.544431][ T25] audit: type=1400 audit(675.730:78): avc: denied { module_request } for pid=3311 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 676.588021][ T25] audit: type=1400 audit(675.770:79): avc: denied { module_request } for pid=3310 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 677.676002][ T25] audit: type=1400 audit(676.850:80): avc: denied { sys_module } for pid=3311 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 677.687098][ T25] audit: type=1400 audit(676.870:81): avc: denied { sys_module } for pid=3310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 704.420088][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.609252][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.976572][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.283421][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.450475][ T3311] hsr_slave_0: entered promiscuous mode [ 719.485219][ T3311] hsr_slave_1: entered promiscuous mode [ 720.827630][ T3310] hsr_slave_0: entered promiscuous mode [ 720.860022][ T3310] hsr_slave_1: entered promiscuous mode [ 720.896698][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 720.907146][ T3310] Cannot create hsr debugfs directory [ 726.034075][ T25] audit: type=1400 audit(725.210:82): avc: denied { create } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.093393][ T25] audit: type=1400 audit(725.270:83): avc: denied { write } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.136617][ T25] audit: type=1400 audit(725.310:84): avc: denied { read } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.277609][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.677918][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 726.930093][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.109440][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 728.780537][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 728.919820][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.106688][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.267302][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 741.969607][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.926485][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.182179][ T3311] veth0_vlan: entered promiscuous mode [ 800.590522][ T3311] veth1_vlan: entered promiscuous mode [ 802.709146][ T3310] veth0_vlan: entered promiscuous mode [ 802.784773][ T3311] veth0_macvtap: entered promiscuous mode [ 803.206030][ T3311] veth1_macvtap: entered promiscuous mode [ 803.718305][ T3310] veth1_vlan: entered promiscuous mode [ 805.525161][ T3350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.537117][ T3350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.574847][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.582545][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.170603][ T3310] veth0_macvtap: entered promiscuous mode [ 806.794959][ T3310] veth1_macvtap: entered promiscuous mode [ 807.965142][ T25] audit: type=1400 audit(807.080:85): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 808.057076][ T25] audit: type=1400 audit(807.240:86): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/syzkaller.2lEi4S/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 808.347179][ T25] audit: type=1400 audit(807.510:87): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 808.793261][ T25] audit: type=1400 audit(807.960:88): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/syzkaller.2lEi4S/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 808.987842][ T25] audit: type=1400 audit(808.110:89): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/syzkaller.2lEi4S/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 809.222143][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.225974][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.267742][ T21] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.268940][ T21] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.495445][ T25] audit: type=1400 audit(808.680:90): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 809.688611][ T25] audit: type=1400 audit(808.870:91): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 809.807048][ T25] audit: type=1400 audit(808.980:92): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=3785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 810.235515][ T25] audit: type=1400 audit(809.390:93): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 810.463523][ T25] audit: type=1400 audit(809.600:94): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 811.786822][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 823.005775][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 823.010433][ T25] audit: type=1400 audit(822.120:99): avc: denied { read } for pid=3464 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 823.078718][ T25] audit: type=1400 audit(822.230:100): avc: denied { open } for pid=3464 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 823.834395][ T25] audit: type=1400 audit(823.010:101): avc: denied { ioctl } for pid=3464 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 835.872257][ T25] audit: type=1400 audit(835.020:102): avc: denied { write } for pid=3472 comm="syz.1.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 840.326178][ T25] audit: type=1400 audit(839.510:103): avc: denied { append } for pid=3473 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 847.476901][ T25] audit: type=1400 audit(846.660:104): avc: denied { ioctl } for pid=3481 comm="syz.1.5" path="net:[4026532625]" dev="nsfs" ino=4026532625 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 854.379513][ T25] audit: type=1400 audit(853.530:105): avc: denied { execute } for pid=3486 comm="syz.1.7" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=4265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1275.822490][ T25] audit: type=1400 audit(1274.990:106): avc: denied { setattr } for pid=3716 comm="syz.0.81" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1942.629030][ T4102] kvm [4102]: Failed to find VMA for hva 0x21016000 [ 2080.495823][ T4190] kvm [4190]: Failed to find VMA for hva 0x20df7000 [ 2248.308098][ T4303] kvm [4303]: Failed to find VMA for hva 0x21016000 [ 2508.792766][ T4473] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x29f0000000000000 pfn:0x5f3ed [ 2508.805102][ T4473] flags: 0x1ffec4000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0xb1) [ 2508.853229][ T4473] raw: 01ffec4000000000 ffffc1ffc07cf3c8 ffffc1ffc0805788 0000000000000000 [ 2508.874488][ T4473] raw: 29f0000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 2508.884071][ T4473] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 2508.913659][ T4473] ------------[ cut here ]------------ [ 2508.913915][ T4473] kernel BUG at ./include/linux/mm.h:1036! [ 2508.915666][ T4473] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 2508.920518][ T4473] Modules linked in: [ 2508.922636][ T4473] CPU: 0 UID: 0 PID: 4473 Comm: syz.0.313 Not tainted syzkaller #0 PREEMPT [ 2508.924230][ T4473] Hardware name: linux,dummy-virt (DT) [ 2508.925504][ T4473] pstate: 60402009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 2508.926793][ T4473] pc : kvm_s2_put_page+0x374/0x3a0 [ 2508.929004][ T4473] lr : kvm_s2_put_page+0x374/0x3a0 [ 2508.929905][ T4473] sp : ffff80008fe27570 [ 2508.930641][ T4473] x29: ffff80008fe27570 x28: dcf000002015e000 x27: dcf000002015e000 [ 2508.932264][ T4473] x26: 00000000000000ff x25: ffff80008734e000 x24: ffffc1ffc0000000 [ 2508.933626][ T4473] x23: ffffc1ffc07cfb48 x22: 0000000000000000 x21: ffffc1ffc07cfb74 [ 2508.934976][ T4473] x20: 0000000000000000 x19: ffffc1ffc07cfb40 x18: 00000000f2174d52 [ 2508.936322][ T4473] x17: 0000000004e6b62f x16: 00000000f1a7123b x15: 0000000045cff01b [ 2508.937680][ T4473] x14: ffffffffffffffff x13: fff000001884bb08 x12: 0000000000000001 [ 2508.939023][ T4473] x11: 0000000000000000 x10: 0000000000ff0100 x9 : c5d28f39a1bbc300 [ 2508.940458][ T4473] x8 : c5d28f39a1bbc300 x7 : ffff80008039fbc8 x6 : 0000000000000000 [ 2508.941784][ T4473] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008074aff8 [ 2508.943109][ T4473] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003e [ 2508.944591][ T4473] Call trace: [ 2508.945443][ T4473] kvm_s2_put_page+0x374/0x3a0 (P) [ 2508.946714][ T4473] stage2_free_walker+0x1b0/0x264 [ 2508.947698][ T4473] __kvm_pgtable_walk+0x7d8/0xa68 [ 2508.948639][ T4473] kvm_pgtable_walk+0x294/0x468 [ 2508.949527][ T4473] kvm_pgtable_stage2_destroy_range+0x60/0xb4 [ 2508.950587][ T4473] kvm_free_stage2_pgd+0x198/0x28c [ 2508.951532][ T4473] kvm_uninit_stage2_mmu+0x20/0x38 [ 2508.952448][ T4473] kvm_arch_flush_shadow_all+0x1a8/0x1e0 [ 2508.953437][ T4473] kvm_mmu_notifier_release+0x48/0xa8 [ 2508.954398][ T4473] mmu_notifier_unregister+0x128/0x42c [ 2508.955397][ T4473] kvm_put_kvm+0x6a0/0xfa8 [ 2508.956193][ T4473] kvm_vcpu_release+0x70/0x9c [ 2508.957057][ T4473] __fput+0x4ac/0x980 [ 2508.957821][ T4473] ____fput+0x20/0x58 [ 2508.958588][ T4473] task_work_run+0x1bc/0x254 [ 2508.959424][ T4473] get_signal+0x13ec/0x1554 [ 2508.960387][ T4473] do_signal+0x23c/0x4dd0 [ 2508.961356][ T4473] do_notify_resume+0xb0/0x270 [ 2508.962318][ T4473] el0_svc+0xb8/0x164 [ 2508.963250][ T4473] el0t_64_sync_handler+0x84/0x12c [ 2508.964148][ T4473] el0t_64_sync+0x198/0x19c [ 2508.965623][ T4473] Code: d0037581 91251821 aa1303e0 97f9c9f2 (d4210000) [ 2508.967443][ T4473] ---[ end trace 0000000000000000 ]--- [ 2508.968975][ T4473] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 2508.970946][ T4473] Kernel Offset: disabled [ 2508.971637][ T4473] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 2508.972722][ T4473] Memory Limit: none [ 2508.974413][ T4473] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:28:55 Registers: info registers vcpu 0 CPU#0 PC=ffff800080020220 X00=0000000000000012 X01=0000000100000003 X02=0000000000000001 X03=ffff80008074ae00 X04=0000000000000000 X05=0000000000000000 X06=ffff80008048ab34 X07=ffff800080015834 X08=c5d28f39a1bbc300 X09=c5d28f39a1bbc300 X10=0000000000ff0100 X11=0000000000000003 X12=0000000000000004 X13=fff000001884bb08 X14=0000000000000000 X15=ffff800087f83a20 X16=0000000000000000 X17=0000000004e6b62f X18=00000000f2174d52 X19=efff800000000000 X20=ffff8000801b05a0 X21=ffff80008fe27420 X22=0000000000000000 X23=0000000000008001 X24=00000000000000ff X25=ffff80008734e000 X26=00000000000000ff X27=dcf000002015e000 X28=a0f000001884bb00 X29=ffff80008fe272a0 X30=ffff800080020220 SP=ffff80008fe27270 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=2525252525252525:2525252525252525 Z01=65642f000a732520:7325207334362e25 Z02=635f6665725f6567:617028454741505f Z03=000000ff0000ff00:00ff0000000000ff Z04=0000000000000000:000f00f00f00000f Z05=41505f4e4f5f4755:425f4d56203a6573 Z06=3030203030303030:3030303030303030 Z07=3020303030303030:3030303030303030 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffc35a12a0:0000ffffc35a12a0 Z17=ffffff80ffffffd0:0000ffffc35a1270 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000