last executing test programs: 1m21.569675603s ago: executing program 0 (id=1278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$arm64(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) (async, rerun: 64) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x1800006, 0x13, r2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xffffffffffffffbe) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2000002, 0x4f832, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x29031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x4003831, 0xffffffffffffffff, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000340)=@attr_irq_timer={0x0, 0x1, 0x1, &(0x7f0000000240)=0x17}) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r7, 0x5000003, 0x80031, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="fb0149dd033be3ac2cc4a29ea6abf4e7454e37c4b85400005a9610fbff67521ce16f8f1f449a7a835673312b54ebb2aa76c869d22627e700", 0x0, 0x29) (async, rerun: 32) r8 = syz_kvm_add_vcpu$arm64(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="46004da7debb6cd66adf00000000000001000000a40100003200000000000000400000000000000000000031000000000f0000000000000023230000000000000200000000000000850c00000000000008000000000000000000000000000000180000000000000002000000000000006846e83f3d1810eb19f521bac19d0743f42dfa6767"], 0x70}, &(0x7f0000000200)=[@featur2={0x1, 0x20}], 0x1) (rerun: 32) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x90b4f6044a8dfbe7, 0x10, r8, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x22a241, 0x0) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000000)={0x5, 0x8}) syz_kvm_vgic_v3_setup(r1, 0x5, 0x1e0) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000300)=@attr_pmu_irq={0x0, 0x0, 0x0, &(0x7f00000002c0)=0x64}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_set_pmu={0x0, 0x0, 0x3, &(0x7f0000000040)=0x2}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m7.728885751s ago: executing program 0 (id=1281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000000000, 0xa00, &(0x7f0000fff000/0x1000)=nil}) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 53.313483371s ago: executing program 0 (id=1283): r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x8927, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r7, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1c}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x6030000000140000, &(0x7f00000001c0)=0x10002}) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 38.450600245s ago: executing program 0 (id=1285): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_vgic_v3_setup(r1, 0x1, 0x100) (async) r2 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$arm64(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$arm64(r5, &(0x7f0000000080)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="820000000000000000080100000001000000000000000eb0000000000000000000000000000000000000e150316d849703861533b2871f6032d783f979f44821ecaba3d7ccdae9fedf7adc21e1fd832b35d3ed5ded0361f0c4e672a9e1caa546d78159e98bf0ccfd619aa839b9b1d7e77476601de828ef5f3ccebd0b71e7"], 0x28}, 0x0, 0x0) (async) syz_kvm_vgic_v3_setup(r4, 0x4, 0x100) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x8}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) r7 = syz_kvm_setup_syzos_vm$arm64(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r8 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_ARM_VCPU_INIT(r10, 0x4020aeae, &(0x7f0000000200)={0x5, 0x8}) ioctl$KVM_SET_ONE_REG(r10, 0x4010aeac, &(0x7f00000000c0)=@arm64_sys={0x603000000013dce0, &(0x7f0000000000)=0x3ff}) (async) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f00000000c0)=@attr_pmu_init) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_kvm_setup_syzos_vm$arm64(r9, &(0x7f0000c00000/0x400000)=nil) r12 = syz_kvm_add_vcpu$arm64(r11, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000002000000000000000f2c4130000003060008000000000000014000000000000002000000000000000e0dc1300000030d11b"], 0x60}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r12, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = syz_kvm_add_vcpu$arm64(r7, &(0x7f0000000180)={0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002000000000000000f1c4130000003060008000000000000014000000000000002000000000000000f2c4130000003060008000000000000014000000000000002000000000000000e0dc130000003060c7"], 0x140}, &(0x7f0000000300)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r13, 0x4018aee1, &(0x7f0000000340)=@attr_pmu_init) (async) ioctl$KVM_RUN(r13, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x53033, 0xffffffffffffffff, 0x0) 34.492005294s ago: executing program 1 (id=1286): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$arm64(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$arm64(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@mrs={0xbe, 0x18, {0x603000000013df40}}], 0x18}, &(0x7f0000000100)=[@featur1={0x1, 0x8}], 0x1) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000140)=@attr_pmu_init) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async, rerun: 32) r5 = eventfd2(0x1, 0x1) (rerun: 32) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x20200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) eventfd2(0x10001, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f00000000c0)={r5, 0x4, 0x0, r5}) (async) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000300000002"]) (async, rerun: 32) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000040)={r5, 0x3, 0x2, r5}) (rerun: 32) r8 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$arm64(r8, 0xffffffffffffffff) 26.522362798s ago: executing program 1 (id=1287): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)=@arm64_core={0x6030000000100042, &(0x7f0000000000)=0xffffffffffffffff}) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x8, 0x5c1fd1b6565d2f2, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b6565d2f1, 0xffffffffffffffff, 0x0) 23.307100955s ago: executing program 0 (id=1288): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_ARM_VCPU_INIT(r5, 0x4020aeae, &(0x7f0000000080)={0x5, 0x3}) (async) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000140)=@arm64_core={0x6030000000100042, &(0x7f0000000100)=0x1b}) (async) ioctl$KVM_ARM_VCPU_INIT(0xffffffffffffffff, 0x4020aeae, &(0x7f0000000080)={0x5}) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000140)=@arm64_extra={0x603000000013df19, &(0x7f0000000100)=0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@arm64_bitmap={0x6030000000160000, &(0x7f00000001c0)=0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x329000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xd9}) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x1}) (rerun: 64) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x40186366, 0x0) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ARM_USER_IRQ(r7, 0x4068aea3, 0xfffffffffffffffe) 19.172745404s ago: executing program 1 (id=1289): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$arm64(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$arm64(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@hvc={0x32, 0x40, {0xc4000053, [0xbd, 0x7, 0x5c29, 0x7, 0x2]}}], 0x40}, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe) ioctl$KVM_ARM_VCPU_INIT(r2, 0x4020aeae, &(0x7f0000000340)={0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000007, 0x23ac5f9b426eccb2, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.152482973s ago: executing program 1 (id=1290): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x2000002, 0x4f832, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x29031, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) (async, rerun: 64) munmap(&(0x7f0000532000/0x3000)=nil, 0x3000) (async, rerun: 64) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async, rerun: 64) munmap(&(0x7f000000f000/0x2000)=nil, 0x2000) (rerun: 64) munmap(&(0x7f0000ad4000/0x1000)=nil, 0x1000) (async, rerun: 64) munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) (async, rerun: 64) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 9.082286693s ago: executing program 0 (id=1291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020940d, &(0x7f00000000c0)={0x4, 0x0, 0x1, 0xffffffffffffffff, 0x5}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xef000000, 0x1000, 0x1}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$arm64(r5, r4, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140)=[{0x0, &(0x7f0000000180)=[@smc={0x1e, 0x40, {0xef000000, [0x0, 0x1, 0x2, 0x3, 0x2]}}], 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.980711192s ago: executing program 1 (id=1292): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)=@attr_arm64={0x0, 0x0, 0x4, &(0x7f0000000180)=0x8080000}) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x6, 0x9, &(0x7f0000000140)=0x2}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f00000001c0)="fb52226012ab8b78286bf6cd81002000d3d9639c0810000000000005ff0f26ea4849dcfd69bf47d9000000000000000000000000000000000000000000000000cd9100", 0x0, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0x80111500, 0x20000000) r6 = openat$kvm(0x0, &(0x7f0000000240), 0xca680, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xb1, 0x0, 0x5}) (async) ioctl$KVM_CAP_ARM_EAGER_SPLIT_CHUNK_SIZE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xb1, 0x0, 0x5}) syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) (async) r8 = syz_kvm_setup_syzos_vm$arm64(r7, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="820000000000000028000000000000000100000000000000040000000000000002000000000000008200000000000000280000000000000004"], 0x50}, 0x0, 0x0) (async) r9 = syz_kvm_add_vcpu$arm64(r8, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="820000000000000028000000000000000100000000000000040000000000000002000000000000008200000000000000280000000000000004"], 0x50}, 0x0, 0x0) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) (async) syz_kvm_vgic_v3_setup(r7, 0x1, 0x100) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x5000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x5000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x0, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x0, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r11, 0xc018aec0, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000180)={0x8, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xff, 0x10000, &(0x7f0000000280)=0xfffffffffffffffd}) (async) ioctl$KVM_SET_DEVICE_ATTR(r12, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0xff, 0x10000, &(0x7f0000000280)=0xfffffffffffffffd}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r5, 0x5761, 0x10000000000000) r13 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r14, &(0x7f00000001c0), 0xff3c) (async) write$eventfd(r14, &(0x7f00000001c0), 0xff3c) 0s ago: executing program 1 (id=1293): munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r6, 0x100000a, 0x12, r7, 0x100000) ioctl$KVM_SET_DEVICE_ATTR_vm(r4, 0x8020aeaf, &(0x7f00000000c0)=@attr_other={0x0, 0x4, 0x3, 0x0}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1d}) (async) ioctl$KVM_ARM_VCPU_INIT(r9, 0x4020aeae, &(0x7f0000000080)={0x5, 0x1d}) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000180)=@arm64_sve={0x60800000001d04da, 0x0}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000200)=@arm64={0x4, 0x0, 0x0, '\x00', 0x101}) (async) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000200)=@arm64={0x4, 0x0, 0x0, '\x00', 0x101}) kernel console output (not intermixed with test programs): [ 387.144029][ T3131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.069094][ T3131] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:46420' (ED25519) to the list of known hosts. [ 600.804727][ T25] audit: type=1400 audit(599.910:60): avc: denied { name_bind } for pid=3287 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 602.898844][ T25] audit: type=1400 audit(602.010:61): avc: denied { execute } for pid=3288 comm="sh" name="syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 602.942725][ T25] audit: type=1400 audit(602.050:62): avc: denied { execute_no_trans } for pid=3288 comm="sh" path="/syz-executor" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 624.738940][ T25] audit: type=1400 audit(623.850:63): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 624.774786][ T25] audit: type=1400 audit(623.880:64): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 624.861436][ T3288] cgroup: Unknown subsys name 'net' [ 624.912407][ T25] audit: type=1400 audit(624.020:65): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 625.307599][ T3288] cgroup: Unknown subsys name 'cpuset' [ 625.408985][ T3288] cgroup: Unknown subsys name 'rlimit' [ 626.324077][ T25] audit: type=1400 audit(625.430:66): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.345113][ T25] audit: type=1400 audit(625.450:67): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 626.375797][ T25] audit: type=1400 audit(625.480:68): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 627.577932][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 627.598550][ T25] audit: type=1400 audit(626.710:69): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 627.627401][ T25] audit: type=1400 audit(626.740:70): avc: denied { write } for pid=3291 comm="mkswap" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 627.809717][ T25] audit: type=1400 audit(626.920:71): avc: denied { read } for pid=3288 comm="syz-executor" name="swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 627.833916][ T25] audit: type=1400 audit(626.930:72): avc: denied { open } for pid=3288 comm="syz-executor" path="/swap-file" dev="vda" ino=1872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 627.868680][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 676.335728][ T25] audit: type=1400 audit(675.450:73): avc: denied { execmem } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 680.016713][ T25] audit: type=1400 audit(679.130:74): avc: denied { read } for pid=3294 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 680.036893][ T25] audit: type=1400 audit(679.150:75): avc: denied { open } for pid=3294 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 680.128722][ T25] audit: type=1400 audit(679.220:76): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 680.396930][ T25] audit: type=1400 audit(679.510:77): avc: denied { module_request } for pid=3294 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 681.569204][ T25] audit: type=1400 audit(680.670:78): avc: denied { sys_module } for pid=3295 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 710.549336][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.983131][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.924818][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.186752][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.622879][ T3295] hsr_slave_0: entered promiscuous mode [ 726.675424][ T3295] hsr_slave_1: entered promiscuous mode [ 728.527106][ T3294] hsr_slave_0: entered promiscuous mode [ 728.594127][ T3294] hsr_slave_1: entered promiscuous mode [ 728.652529][ T3294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.664873][ T3294] Cannot create hsr debugfs directory [ 734.431677][ T25] audit: type=1400 audit(733.540:79): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.513369][ T25] audit: type=1400 audit(733.560:80): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.581863][ T25] audit: type=1400 audit(733.620:81): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 734.694018][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 735.116975][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 735.414602][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 735.643386][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 737.156353][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 737.336820][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 737.489526][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 737.656576][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.469875][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.847338][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.698910][ T3295] veth0_vlan: entered promiscuous mode [ 810.197439][ T3295] veth1_vlan: entered promiscuous mode [ 812.189075][ T3295] veth0_macvtap: entered promiscuous mode [ 812.635715][ T3294] veth0_vlan: entered promiscuous mode [ 812.725589][ T3295] veth1_macvtap: entered promiscuous mode [ 813.465638][ T3294] veth1_vlan: entered promiscuous mode [ 814.945161][ T3295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.965311][ T3295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.974591][ T3295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.985920][ T3295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.365161][ T3294] veth0_macvtap: entered promiscuous mode [ 817.075180][ T3294] veth1_macvtap: entered promiscuous mode [ 817.963875][ T25] audit: type=1400 audit(817.060:82): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 818.218636][ T25] audit: type=1400 audit(817.330:83): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzkaller.aFlhX9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 818.468320][ T25] audit: type=1400 audit(817.580:84): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 818.964159][ T25] audit: type=1400 audit(818.070:85): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzkaller.aFlhX9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 819.207511][ T25] audit: type=1400 audit(818.320:86): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzkaller.aFlhX9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 820.058484][ T3294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.071826][ T3294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.087964][ T3294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.132041][ T3294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.258636][ T25] audit: type=1400 audit(819.320:87): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 820.723868][ T25] audit: type=1400 audit(819.830:88): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 820.873896][ T25] audit: type=1400 audit(819.970:89): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="gadgetfs" ino=3265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 821.397419][ T25] audit: type=1400 audit(820.510:90): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 821.543314][ T25] audit: type=1400 audit(820.650:91): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 823.543001][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 825.053597][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 825.055258][ T25] audit: type=1400 audit(824.130:93): avc: denied { read write } for pid=3295 comm="syz-executor" name="loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.113685][ T25] audit: type=1400 audit(824.210:94): avc: denied { open } for pid=3295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 825.218639][ T25] audit: type=1400 audit(824.280:95): avc: denied { ioctl } for pid=3295 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=638 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.941521][ T25] audit: type=1400 audit(827.990:96): avc: denied { read } for pid=3453 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.012024][ T25] audit: type=1400 audit(828.110:97): avc: denied { open } for pid=3453 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.856131][ T25] audit: type=1400 audit(828.960:98): avc: denied { ioctl } for pid=3453 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 834.354160][ T25] audit: type=1400 audit(833.450:99): avc: denied { append } for pid=3453 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 844.176262][ T25] audit: type=1400 audit(843.270:100): avc: denied { execute } for pid=3460 comm="syz.1.3" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=3544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 844.567051][ T25] audit: type=1400 audit(843.680:101): avc: denied { write } for pid=3463 comm="syz.0.4" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 921.897198][ T3515] kvm [3515]: Failed to find VMA for hva 0x20c01000 [ 1108.551448][ T25] audit: type=1400 audit(1107.650:102): avc: denied { execute } for pid=3639 comm="syz.1.55" path="/sys/kernel/debug/kcov" dev="debugfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 1194.203647][ T3694] kvm [3694]: Failed to find VMA for hva 0x20d8d000 [ 1526.563921][ T3927] kvm [3927]: Failed to find VMA for hva 0x20c01000 [ 1622.623762][ T25] audit: type=1400 audit(1621.710:103): avc: denied { setattr } for pid=3991 comm="syz.0.154" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1869.076204][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 1869.076204][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.116732][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.116732][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.165429][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.165429][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.195078][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.195078][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.243989][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.243989][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.277976][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.277976][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.297001][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.297001][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.326973][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.326973][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.358434][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.358434][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1869.397314][ T4174] kvm [4172]: Unsupported guest CP15 access at: 00000100 [000001db] [ 1869.397314][ T4174] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 1872.467089][ T4175] kvm [4175]: Failed to find VMA for hva 0x20c01000 [ 1883.429199][ T25] audit: type=1400 audit(1882.540:104): avc: denied { ioctl } for pid=4182 comm="syz.1.206" path="net:[4026531840]" dev="nsfs" ino=4026531840 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2070.756207][ T4307] KVM: debugfs: duplicate directory 4307-5 [ 2478.075902][ T4527] kvm [4527]: Failed to find VMA for hva 0x208a1000 [ 2492.973142][ T4538] print_sys_reg_msg: 238 callbacks suppressed [ 2492.996481][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 2492.996481][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.013066][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.013066][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.036308][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.036308][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.055697][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.055697][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.108939][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.108939][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.137751][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.137751][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.156493][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.156493][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.177662][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.177662][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.204067][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.204067][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2493.254086][ T4538] kvm [4537]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2493.254086][ T4538] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.176567][ T4603] print_sys_reg_msg: 820 callbacks suppressed [ 2619.221080][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 2619.221080][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.234700][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.234700][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.258522][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.258522][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.277961][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.277961][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.304946][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.304946][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.349544][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.349544][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.375852][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.375852][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.394894][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.394894][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.419780][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.419780][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 2619.465414][ T4603] kvm [4602]: Unsupported guest CP15 access at: 00000100 [000001db] [ 2619.465414][ T4603] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 3138.395900][ T4868] kvm [4868]: Failed to find VMA for hva 0x20c01000 [ 3307.804995][ T4948] kvm [4948]: Failed to find VMA for hva 0x208a1000 [ 3413.413996][ T4994] kvm [4994]: Failed to find VMA for hva 0x20d8d000 [ 3611.424943][ T5086] kvm [5086]: Failed to find VMA for hva 0x21016000 [ 4000.683327][ T5279] kvm [5279]: Failed to find VMA for hva 0x2101a000 [ 4008.498205][ T5282] kvm [5282]: Failed to find VMA for hva 0x21016000 [ 4008.583481][ T5282] kvm [5282]: Failed to find VMA for hva 0x21016000 [ 4134.474528][ T5331] KVM: debugfs: duplicate directory 5331-5 [ 4167.204784][ T5352] kvm [5352]: Failed to find VMA for hva 0x20d8a000 [ 4175.625161][ T5354] kvm [5354]: Failed to find VMA for hva 0x20c01000 [ 4355.479243][ T25] audit: type=1400 audit(4354.590:105): avc: denied { map } for pid=5440 comm="syz.1.701" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 4641.787237][ T5561] kvm [5561]: Failed to find VMA for hva 0x20d8d000 [ 4787.535836][ T5633] kvm [5633]: Failed to find VMA for hva 0x21016000 [ 5012.506453][ T5746] kvm [5746]: Failed to find VMA for hva 0x20c01000 [ 5065.776395][ T5768] kvm [5768]: Failed to find VMA for hva 0x21016000 [ 5065.822462][ T5768] kvm [5768]: Failed to find VMA for hva 0x21016000 [ 5073.288408][ T5771] kvm [5771]: Failed to find VMA for hva 0x208a1000 [ 5080.085307][ T5774] kvm [5774]: Failed to find VMA for hva 0x20d8d000 [ 5227.712565][ T5841] irq bypass consumer (token 00000000b59bfa24) registration fails: -16 [ 5434.743562][ T25] audit: type=1400 audit(5433.850:106): avc: denied { map } for pid=5932 comm="syz.1.916" path="pipe:[2416]" dev="pipefs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 5750.766368][ T3339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5752.055543][ T3339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5753.557642][ T3339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5754.574229][ T3339] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5773.023644][ T3339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5773.344838][ T3339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5773.496273][ T3339] bond0 (unregistering): Released all slaves [ 5776.294487][ T3339] hsr_slave_0: left promiscuous mode [ 5776.602165][ T3339] hsr_slave_1: left promiscuous mode [ 5777.458193][ T3339] veth1_macvtap: left promiscuous mode [ 5777.502744][ T3339] veth0_macvtap: left promiscuous mode [ 5777.509769][ T3339] veth1_vlan: left promiscuous mode [ 5777.533257][ T3339] veth0_vlan: left promiscuous mode [ 5839.945381][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5840.178450][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5863.889205][ T6084] hsr_slave_0: entered promiscuous mode [ 5864.007748][ T6084] hsr_slave_1: entered promiscuous mode [ 5886.165072][ T6084] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 5886.502396][ T6084] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 5886.746864][ T6084] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 5887.026188][ T6084] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 5911.325003][ T6084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5991.201016][ T6084] veth0_vlan: entered promiscuous mode [ 5991.698961][ T6084] veth1_vlan: entered promiscuous mode [ 5993.899719][ T6084] veth0_macvtap: entered promiscuous mode [ 5994.285666][ T6084] veth1_macvtap: entered promiscuous mode [ 5996.615635][ T6084] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5996.632001][ T6084] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5996.662891][ T6084] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5996.672971][ T6084] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6037.629400][ T6271] kvm [6271]: Failed to find VMA for hva 0x20d8d000 [ 6167.534576][ T6331] kvm [6331]: Failed to find VMA for hva 0x20c01000 [ 6379.798246][ T6432] kvm [6431]: Unsupported guest access at: eeef0000 [ 6379.798246][ T6432] { Op0( 2), Op1( 7), CRn(15), CRm(13), Op2( 1), func_write }, [ 6581.915327][ T6548] print_sys_reg_msg: 81 callbacks suppressed [ 6581.933134][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001d3] [ 6581.933134][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6581.963362][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6581.963362][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.034913][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.034913][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.074680][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.074680][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.093700][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.093700][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.115323][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.115323][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.146414][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.146414][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.175908][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.175908][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.225081][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.225081][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6582.266002][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6582.266002][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.008071][ T6548] print_sys_reg_msg: 878 callbacks suppressed [ 6587.065208][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.065208][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.119540][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.119540][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.214591][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.214591][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.248364][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.248364][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.288059][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.288059][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.327863][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.327863][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 6587.387330][ T6548] kvm [6547]: Unsupported guest CP15 access at: 00000100 [000001db] [ 6587.387330][ T6548] { Op0( 0), Op1( 7), CRn(15), CRm(13), Op2( 7), func_read }, [ 7076.877404][ T6789] kvm [6789]: Failed to find VMA for hva 0x208a1000 [ 7339.729199][ T6913] kvm [6913]: Failed to find VMA for hva 0x20d8b000 [ 7543.416363][ T7017] ------------[ cut here ]------------ [ 7543.417240][ T7017] WARNING: CPU: 0 PID: 7017 at arch/arm64/kvm/inject_fault.c:71 pend_serror_exception+0x19c/0x5ac [ 7543.421476][ T7017] Modules linked in: [ 7543.424472][ T7017] CPU: 0 UID: 0 PID: 7017 Comm: syz.1.1293 Not tainted 6.16.0-rc3-syzkaller-g15724a984643 #0 PREEMPT [ 7543.426499][ T7017] Hardware name: linux,dummy-virt (DT) [ 7543.428070][ T7017] pstate: 81402009 (Nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 7543.429727][ T7017] pc : pend_serror_exception+0x19c/0x5ac [ 7543.430979][ T7017] lr : pend_serror_exception+0x19c/0x5ac [ 7543.432202][ T7017] sp : ffff80008e907930 [ 7543.433235][ T7017] x29: ffff80008e907930 x28: 10f0000016899da8 x27: 0000000000000001 [ 7543.435356][ T7017] x26: 0000000000000000 x25: 0000000000000001 x24: 0000000000000010 [ 7543.437343][ T7017] x23: 10f000001689a028 x22: 0000000000000010 x21: 10f000001689ac01 [ 7543.439286][ T7017] x20: 0000000000000007 x19: efff800000000000 x18: 0000000000000000 [ 7543.441089][ T7017] x17: 000000000000002c x16: ffff800080011d9c x15: 0000000020000200 [ 7543.443030][ T7017] x14: ffffffffffffffff x13: 0000000000000028 x12: 0000000000000064 [ 7543.444740][ T7017] x11: 64f000001d541564 x10: 0000000000ff0100 x9 : 0000000000000000 [ 7543.446690][ T7017] x8 : 64f000001d540000 x7 : ffff800080b08704 x6 : ffff80008e907a88 [ 7543.448530][ T7017] x5 : ffff80008e907a88 x4 : 0000000000000001 x3 : ffff8000801a2e80 [ 7543.450284][ T7017] x2 : 0000000000000000 x1 : 0000000000000002 x0 : 0000000000000000 [ 7543.452398][ T7017] Call trace: [ 7543.453527][ T7017] pend_serror_exception+0x19c/0x5ac (P) [ 7543.455075][ T7017] kvm_inject_serror_esr+0x274/0xe40 [ 7543.456294][ T7017] __kvm_arm_vcpu_set_events+0x1d4/0x238 [ 7543.457388][ T7017] kvm_arch_vcpu_ioctl+0xed8/0x16b0 [ 7543.458522][ T7017] kvm_vcpu_ioctl+0x5c4/0xc2c [ 7543.459690][ T7017] __arm64_sys_ioctl+0x18c/0x244 [ 7543.460935][ T7017] invoke_syscall+0x90/0x2b4 [ 7543.462116][ T7017] el0_svc_common+0x180/0x2f4 [ 7543.463120][ T7017] do_el0_svc+0x58/0x74 [ 7543.464250][ T7017] el0_svc+0x58/0x160 [ 7543.465315][ T7017] el0t_64_sync_handler+0x78/0x108 [ 7543.466517][ T7017] el0t_64_sync+0x198/0x19c [ 7543.467939][ T7017] irq event stamp: 4516 [ 7543.468791][ T7017] hardirqs last enabled at (4515): [] _raw_read_unlock_irqrestore+0x44/0xbc [ 7543.470402][ T7017] hardirqs last disabled at (4516): [] el1_dbg+0x24/0x80 [ 7543.471900][ T7017] softirqs last enabled at (4506): [] handle_softirqs+0xb8c/0xd08 [ 7543.473459][ T7017] softirqs last disabled at (4499): [] __do_softirq+0x14/0x20 [ 7543.475169][ T7017] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 7559.508734][ T6970] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7560.479796][ T6970] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7561.133522][ T6970] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7561.768795][ T6970] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 VM DIAGNOSIS: 04:23:52 Registers: info registers vcpu 0 CPU#0 PC=ffff8000804516b8 X00=0000000000000000 X01=ffff8000872b1fa2 X02=ffff8000804580e0 X03=0000000000000000 X04=ffff80008e907070 X05=0000000000000020 X06=0000000000000000 X07=ffff80008652e834 X08=00000000000003c0 X09=0000000000000000 X10=0000000000000064 X11=0000000000000144 X12=0000000000000044 X13=0000000000000002 X14=00000000000000c8 X15=ffff800087f39a30 X16=ffff800080011d9c X17=000000000000002c X18=0000000000000000 X19=0000000000000000 X20=0000000000000000 X21=ffff80008652e834 X22=ffff8000877e66a8 X23=0000000000000000 X24=0000000000000001 X25=0000000000000000 X26=ffff800087666580 X27=00000000000003c0 X28=0000000000000000 X29=ffff80008e907230 X30=ffff800080451698 SP=ffff80008e9071e0 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000000000000000:0000000000000000 Z01=0000000000000000:0000000000000000 Z02=0000aaaaaf180bbc:0000aaaaaf180810 Z03=0000fffffd7f0320:0000fffffd7f0088 Z04=0000000000000000:0000000000000000 Z05=0000fffffd7effe0:0000000000000000 Z06=0000000000000000:0000000000000000 Z07=0000000000000000:0000000000000000 Z08=0000000000000000:000001f40000000a Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000fffffd7f03f0:0000fffffd7f03f0 Z17=ffffff80ffffffd0:0000fffffd7f03c0 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000