last executing test programs: 6.372542685s ago: executing program 1 (id=11): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0x80000022}]}) 5.544674431s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mycgroup\x00', 0x777) mount(0x0, &(0x7f0000000140)='./mycgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) 5.444044616s ago: executing program 1 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000c00000/0x1000)=nil}) ioctl(r1, 0x4038ae7a, &(0x7f0000000400)='$\x00'/56) ioctl(r1, 0x4048aec9, &(0x7f0000000100)="0100"/72) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="0100000000000000ffffffffffffffff00"/72) ioctl(r1, 0x400caed0, &(0x7f0000000300)="0100000000000000ffffffff") 5.22627155s ago: executing program 0 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000000000000000000000000000ffffffffffffff7f00"/72) ioctl(r2, 0xc048aeca, &(0x7f0000000200)='\a\x00'/72) 4.526917069s ago: executing program 1 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="48b8ffff00000092cf00488904255010000066b850008ed8", 0x18}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.526763685s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='vfio-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:01.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/iommu\x00', 0x2, 0x0) dup2(r3, 0x64) ioctl(r2, 0x3b76, &(0x7f0000000a00)="10000000000000006400000000000000") ioctl(r3, 0x3b81, &(0x7f0000000b00)='\f\x00'/12) ioctl(r2, 0x3b77, &(0x7f0000000c00)="10000000000000000100000000000000") r4 = eventfd2(0x0, 0x0) dup2(r4, 0x65) ioctl(r2, 0x3b6e, &(0x7f0000000d00)="180000002400000002000000000000000100000065000000") 4.338184204s ago: executing program 0 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f0000800000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x200000)=nil, 0x200000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x0, 0x8000000, 0x200000, &(0x7f0000800000/0x200000)=nil}) r3 = eventfd2(0x8000083, 0x0) read$eventfd(r3, &(0x7f0000c11200), 0x8) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@code={0xa, 0x1e, {"48b80000000800000000488b00"}}], 0x1e}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x3000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0xf4240) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fd, 0x1, 0x8000000, 0x200000, &(0x7f0000800000/0x200000)=nil}) 4.338012956s ago: executing program 4 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@cpuid={0x64, 0x18, {0x40000003, 0x1}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)={0x1, 0x0, [{0x40000000, 0x0, 0x0, 0x40000003, 0x566e6558, 0x65584d4d, 0x4d4d566e}]}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.762015478s ago: executing program 2 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00c00}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8b, &(0x7f0000002000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000003000)={0x1, 0x0, [{0x80b}]}) 3.084860248s ago: executing program 1 (id=23): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4002, 0x0, 0x80}}, @nested_vmresume={0x130, 0x18}], 0xb3}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0x8000000, 0x1000, &(0x7f000000a000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x1fd, 0x1, 0x8000000, 0x1000, &(0x7f000000a000/0x1000)=nil}) 3.008103462s ago: executing program 2 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="9a00000000b800", 0x7}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.877512482s ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mycgroup\x00', 0x777) mount(0x0, &(0x7f0000000140)='./mycgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) 2.874849254s ago: executing program 0 (id=26): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af71, &(0x7f0000000000)={0x0, r1}) 2.803332368s ago: executing program 4 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040ae94, &(0x7f0000000000)={0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x4048ae49, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4018ae52, &(0x7f0000000000)={0x0, 0x1000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040ae55, &(0x7f0000000000)={0x0, 0x1000}) 2.634939046s ago: executing program 3 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xa, 0x0, 0x2000000, 0x200000, &(0x7f0000e00000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0x2000000, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0xa, 0x1, 0x2000000, 0x200000, &(0x7f0000e00000/0x200000)=nil}) 2.463703228s ago: executing program 4 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.176099202s ago: executing program 0 (id=30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cg\x00', 0x1ed) mount(&(0x7f00000000c0)=@filename='./cgroup.cpu\x00', &(0x7f0000000100)='./cg\x00', 0x0, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./cg/test\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cg/test/memory.limit_in_bytes\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='10000000\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cg/test/tasks\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0\x00', 0x1) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1400000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 2.067861348s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000c00000/0x1000)=nil}) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aeab, &(0x7f0000000400)={0x26, 0x0, 0x24}) ioctl(r1, 0x4048aec9, &(0x7f0000000100)="0100"/72) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="0100000000000000ffffffffffffffff00"/72) ioctl(r1, 0x400caed0, &(0x7f0000000300)="0100000000000000ffffffff") 1.810868457s ago: executing program 3 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x25, {"4831ff48c7c6000004004881c60001000048893e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3d}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xf4240) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.767540924s ago: executing program 4 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='vfio-pci\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f00000003c0)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/vfio-dev/vfio0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/vfio-dev/vfio1\x00', 0x0, 0x0) 1.767267781s ago: executing program 1 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaeaa, 0x186a0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="b9024d564bb80100010031d20f30b9064d564bb80e00000031d20f30fb8b042500000100", 0x24}], 0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x15) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.34466602s ago: executing program 2 (id=35): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x18, {"b9000001000f33"}}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.034277677s ago: executing program 3 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x4}) 866.845159ms ago: executing program 4 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0x0}) 506.178595ms ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mycgroup\x00', 0x777) mount(&(0x7f0000000100)=@filename='cgroup2\x00', 0x0, &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) 470.999081ms ago: executing program 0 (id=39): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @code={0xa, 0x1d, {"48c704250040400000000000"}}], 0x4d}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 302.918848ms ago: executing program 4 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x40000073, 0x300001}}, @nested_create_vm={0x12d, 0x18}, @code={0xa, 0x27, {"48c7c000003000c740280100000048c7403000104000"}}, @nested_load_code={0x12e, 0x1b, {0x0, "0f01c1"}}, @nested_vmlaunch={0x12f, 0x18}], 0xaa}) ioctl$KVM_SET_CPUID2(r3, 0x40000090, &(0x7f0000000200)) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068ae53, &(0x7f0000000300)={0xa3, 0x0, &(0x7f0000000340)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 302.665326ms ago: executing program 3 (id=41): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x201a, 0x40}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x20000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x200e, 0x600000}}, @code={0xa, 0x34, {"48c7c00020500048c7c100020000488b18480fbaf3094889184883c00848ffc975eec3"}}, @nested_load_code={0x12e, 0x2d, {0x0, "48c7c00010050048890048c7c000200500488900f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x151}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 301.814765ms ago: executing program 1 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='vfio-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./dev/iommu\x00', 0x2, 0x0) dup2(r4, 0x64) ioctl(r3, 0x3b76, &(0x7f0000000a00)="18000000000000006400"/24) ioctl(r4, 0x3b81, &(0x7f0000000b00)='\f\x00'/12) ioctl(r3, 0x3b77, &(0x7f0000000c00)="10000000000000000100000000000000") r5 = eventfd2(0x0, 0x0) dup2(r5, 0x65) ioctl(r3, 0x3b6e, &(0x7f0000000d00)="180000002400000003000000000000000100000065000000") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000f00)={r5}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000001000)={r5, 0x0, 0x1}) 0s ago: executing program 2 (id=43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x22, 0x40000000, 0x0, 0x0}) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="0100000000000000ffffffffffffffff00"/72) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)="070000000000000001000000ffffffff0100"/72) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 78.269150][ T5259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.304221][ T5259] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. syzkaller login: [ 102.715920][ T10] cfg80211: failed to load regulatory.db [ 105.678601][ T5584] cgroup: Unknown subsys name 'net' [ 105.930530][ T5584] cgroup: Unknown subsys name 'cpuset' [ 105.992729][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 108.042742][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.768313][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.832377][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.834181][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.837218][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.850225][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.908574][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.908805][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.911822][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.950103][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.951845][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.955977][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.979405][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.990003][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.011031][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.011366][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.019052][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.019741][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.057866][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.072255][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.078265][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.078436][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.082837][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.083006][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.084958][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.094865][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.263386][ T5609] Bluetooth: hci1: command tx timeout [ 113.264264][ T5605] Bluetooth: hci4: command tx timeout [ 113.266211][ T4913] Bluetooth: hci2: command tx timeout [ 113.422121][ T5605] Bluetooth: hci0: command tx timeout [ 113.422359][ T4913] Bluetooth: hci3: command tx timeout [ 114.156178][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.156283][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.156444][ T5599] bridge_slave_0: entered allmulticast mode [ 114.159889][ T5599] bridge_slave_0: entered promiscuous mode [ 114.250407][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.250525][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.250742][ T5599] bridge_slave_1: entered allmulticast mode [ 114.258377][ T5599] bridge_slave_1: entered promiscuous mode [ 114.317314][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.317417][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.317548][ T5597] bridge_slave_0: entered allmulticast mode [ 114.319509][ T5597] bridge_slave_0: entered promiscuous mode [ 114.375490][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.375607][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.376017][ T5598] bridge_slave_0: entered allmulticast mode [ 114.378087][ T5598] bridge_slave_0: entered promiscuous mode [ 114.420692][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.420819][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.421044][ T5597] bridge_slave_1: entered allmulticast mode [ 114.435330][ T5597] bridge_slave_1: entered promiscuous mode [ 114.483431][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.483568][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.483746][ T5598] bridge_slave_1: entered allmulticast mode [ 114.485990][ T5598] bridge_slave_1: entered promiscuous mode [ 114.487977][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.488072][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.488220][ T5600] bridge_slave_0: entered allmulticast mode [ 114.490250][ T5600] bridge_slave_0: entered promiscuous mode [ 114.576619][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.599076][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.599193][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.599549][ T5600] bridge_slave_1: entered allmulticast mode [ 114.601445][ T5600] bridge_slave_1: entered promiscuous mode [ 114.644647][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.644797][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.644967][ T5601] bridge_slave_0: entered allmulticast mode [ 114.647719][ T5601] bridge_slave_0: entered promiscuous mode [ 114.659022][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.714569][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.715156][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.715274][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.715400][ T5601] bridge_slave_1: entered allmulticast mode [ 114.718183][ T5601] bridge_slave_1: entered promiscuous mode [ 114.769057][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.796560][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.840504][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.857080][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.904762][ T5599] team0: Port device team_slave_0 added [ 114.927876][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.968684][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.984308][ T5599] team0: Port device team_slave_1 added [ 115.020614][ T5597] team0: Port device team_slave_0 added [ 115.047737][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.049851][ T5598] team0: Port device team_slave_0 added [ 115.078492][ T5597] team0: Port device team_slave_1 added [ 115.116769][ T5598] team0: Port device team_slave_1 added [ 115.119479][ T5600] team0: Port device team_slave_0 added [ 115.146447][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.146469][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.146498][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.214175][ T5600] team0: Port device team_slave_1 added [ 115.237644][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.237663][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.237693][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.255392][ T5601] team0: Port device team_slave_0 added [ 115.322186][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.322205][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.322234][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.349724][ T4913] Bluetooth: hci2: command tx timeout [ 115.349824][ T4913] Bluetooth: hci4: command tx timeout [ 115.351990][ T5605] Bluetooth: hci1: command tx timeout [ 115.373234][ T5601] team0: Port device team_slave_1 added [ 115.376672][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.376688][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.376716][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.450970][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.450989][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.451018][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.502079][ T5605] Bluetooth: hci3: command tx timeout [ 115.502110][ T5605] Bluetooth: hci0: command tx timeout [ 115.525562][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.525576][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.525601][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.526710][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.526721][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.526741][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.076861][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.076876][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.076897][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.134341][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.134359][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.134382][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.213304][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.213323][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.213363][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.292830][ T5599] hsr_slave_0: entered promiscuous mode [ 116.294180][ T5599] hsr_slave_1: entered promiscuous mode [ 116.383902][ T5597] hsr_slave_0: entered promiscuous mode [ 116.385235][ T5597] hsr_slave_1: entered promiscuous mode [ 116.386828][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 116.386929][ T5597] Cannot create hsr debugfs directory [ 116.404341][ T5598] hsr_slave_0: entered promiscuous mode [ 116.424588][ T5598] hsr_slave_1: entered promiscuous mode [ 116.425393][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 116.425421][ T5598] Cannot create hsr debugfs directory [ 116.499182][ T5600] hsr_slave_0: entered promiscuous mode [ 116.500190][ T5600] hsr_slave_1: entered promiscuous mode [ 116.500888][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 116.500906][ T5600] Cannot create hsr debugfs directory [ 116.600993][ T5601] hsr_slave_0: entered promiscuous mode [ 116.604071][ T5601] hsr_slave_1: entered promiscuous mode [ 116.607848][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 116.607922][ T5601] Cannot create hsr debugfs directory [ 117.422231][ T4913] Bluetooth: hci1: command tx timeout [ 117.422266][ T4913] Bluetooth: hci4: command tx timeout [ 117.422289][ T4913] Bluetooth: hci2: command tx timeout [ 117.582880][ T5605] Bluetooth: hci0: command tx timeout [ 117.582913][ T5605] Bluetooth: hci3: command tx timeout [ 117.639570][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.704228][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.711940][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.749970][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.770862][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.806351][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.841055][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.877587][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.057775][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.091729][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.108831][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.136177][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.151190][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.175994][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.207707][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.225635][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.349504][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.400488][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.416158][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.456017][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.465668][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.516589][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.552767][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 118.596425][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.790460][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.838442][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.845653][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.876796][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.911116][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.927307][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.977793][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.018472][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.055945][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.234657][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.236726][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.289238][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.301783][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.349613][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.371135][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.406174][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.466163][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.502240][ T4913] Bluetooth: hci2: command tx timeout [ 119.502277][ T4913] Bluetooth: hci4: command tx timeout [ 119.502299][ T4913] Bluetooth: hci1: command tx timeout [ 119.507331][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.550011][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.550328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.623763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.623912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.662191][ T5605] Bluetooth: hci3: command tx timeout [ 119.662229][ T5605] Bluetooth: hci0: command tx timeout [ 119.715037][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.846350][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.884605][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.907219][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.907634][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.981129][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.981251][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.109293][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.197302][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.198011][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.269276][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.323919][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.324110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.475623][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.515183][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.544809][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.544903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.637106][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.637276][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.786752][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.951109][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.951419][ T3198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.046476][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.046720][ T3198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.381599][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.929459][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.968061][ T5599] veth0_vlan: entered promiscuous mode [ 122.134442][ T5599] veth1_vlan: entered promiscuous mode [ 122.277276][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.441297][ T5599] veth0_macvtap: entered promiscuous mode [ 122.589637][ T5599] veth1_macvtap: entered promiscuous mode [ 122.635572][ T5597] veth0_vlan: entered promiscuous mode [ 122.705649][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.779156][ T5597] veth1_vlan: entered promiscuous mode [ 122.833264][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.865608][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.881100][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.928342][ T5600] veth0_vlan: entered promiscuous mode [ 123.063322][ T5600] veth1_vlan: entered promiscuous mode [ 123.229873][ T5597] veth0_macvtap: entered promiscuous mode [ 123.323016][ T5597] veth1_macvtap: entered promiscuous mode [ 123.432441][ T5601] veth0_vlan: entered promiscuous mode [ 123.565149][ T5601] veth1_vlan: entered promiscuous mode [ 123.568933][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.655943][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.680184][ T5600] veth0_macvtap: entered promiscuous mode [ 123.706448][ T3198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.706477][ T3198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.790299][ T5600] veth1_macvtap: entered promiscuous mode [ 123.890031][ T5598] veth0_vlan: entered promiscuous mode [ 124.014514][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.014536][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.019225][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.090645][ T5598] veth1_vlan: entered promiscuous mode [ 124.141118][ T5601] veth0_macvtap: entered promiscuous mode [ 124.235315][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.351709][ T5601] veth1_macvtap: entered promiscuous mode [ 124.650827][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.650849][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.695699][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.841510][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.877438][ T5598] veth0_macvtap: entered promiscuous mode [ 124.937107][ T5792] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.169342][ T5598] veth1_macvtap: entered promiscuous mode [ 125.232980][ T3355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.233002][ T3355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.683635][ T3198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.683666][ T3198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.800565][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.191405][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.313296][ T3198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.313319][ T3198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.477261][ T1521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.477281][ T1521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.926300][ T1521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.926322][ T1521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.196684][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.927705][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.927729][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.126147][ T3198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.126186][ T3198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.693851][ T600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.734472][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.735035][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.735224][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.809592][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.818912][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.859380][ T106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.875924][ T600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.876440][ T600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.033635][ T600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.056232][ T106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.056497][ T106] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.056916][ T106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.057145][ T106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.057698][ T106] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.364451][ T106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.365096][ T106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.367050][ T106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.722368][ T106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.067066][ T5848] vfio-pci 0000:00:01.0: probe with driver vfio-pci failed with error -22 [ 135.017590][ T5926] ------------[ cut here ]------------ [ 135.017605][ T5926] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 135.017623][ T5926] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1513/0x1710, CPU#0: syz.2.43/5926 [ 135.017691][ T5926] Modules linked in: [ 135.017738][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.018560][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.018580][ T5926] RIP: 0010:__kvm_gpc_refresh+0x1513/0x1710 [ 135.018622][ T5926] Code: c6 05 58 b0 58 0e 01 48 c7 c7 2a d9 86 8d be 3c 04 00 00 48 c7 c2 e0 41 62 8b e8 68 3d 61 00 e9 7e ee ff ff e8 2e 67 85 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 135.018641][ T5926] RSP: 0018:ffffc9000590f360 EFLAGS: 00010283 [ 135.018660][ T5926] RAX: ffffffff81407432 RBX: ffff888000000000 RCX: 0000000000080000 [ 135.018677][ T5926] RDX: ffffc90006bc9000 RSI: 000000000000190d RDI: 000000000000190e [ 135.018692][ T5926] RBP: ffffc9000590f4f0 R08: 0000000000000000 R09: 0000000000000000 [ 135.018716][ T5926] R10: dffffc0000000000 R11: fffffbfff1f5f3e7 R12: 1ffff92000b21e80 [ 135.018732][ T5926] R13: ffff8880615ddd10 R14: ffff888000000000 R15: ffffffffffffff01 [ 135.018750][ T5926] FS: 00007f511b0e66c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 135.018770][ T5926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.018787][ T5926] CR2: 0000565485c93258 CR3: 000000005ea1c000 CR4: 00000000003526f0 [ 135.018806][ T5926] Call Trace: [ 135.018816][ T5926] [ 135.018842][ T5926] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 135.018889][ T5926] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.018919][ T5926] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.018945][ T5926] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.018972][ T5926] ? mutex_lock_nested+0x152/0x1d0 [ 135.019011][ T5926] ? kvm_gpc_refresh+0x34/0x110 [ 135.019053][ T5926] kvm_gpc_refresh+0xe4/0x110 [ 135.019092][ T5926] ? kvm_xen_set_evtchn+0x11e/0x220 [ 135.019122][ T5926] kvm_xen_set_evtchn+0x14f/0x220 [ 135.019153][ T5926] kvm_xen_inject_timer_irqs+0xfd/0x200 [ 135.019186][ T5926] vcpu_run+0x98f/0x7940 [ 135.019237][ T5926] ? vcpu_run+0x362a/0x7940 [ 135.019309][ T5926] ? __pfx_vcpu_run+0x10/0x10 [ 135.019333][ T5926] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 135.019363][ T5926] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 135.019409][ T5926] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 135.019453][ T5926] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 135.019483][ T5926] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 135.019513][ T5926] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.019563][ T5926] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.019593][ T5926] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.019624][ T5926] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.019654][ T5926] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 135.019679][ T5926] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.019725][ T5926] ? lock_acquire+0x106/0x350 [ 135.019753][ T5926] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.019786][ T5926] ? rt_write_unlock+0x19c/0x360 [ 135.019815][ T5926] ? rt_write_unlock+0x1a8/0x360 [ 135.019841][ T5926] kvm_vcpu_ioctl+0xa64/0xfe0 [ 135.019873][ T5926] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.019896][ T5926] ? hook_file_ioctl+0x1f3/0x600 [ 135.019935][ T5926] ? __asan_memset+0x22/0x50 [ 135.019975][ T5926] ? smack_file_ioctl+0x331/0x360 [ 135.020000][ T5926] ? __pfx_smack_file_ioctl+0x10/0x10 [ 135.020030][ T5926] ? __fget_files+0x2a/0x420 [ 135.020052][ T5926] ? __fget_files+0x3a8/0x420 [ 135.020073][ T5926] ? __fget_files+0x2a/0x420 [ 135.020099][ T5926] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.020119][ T5926] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.020145][ T5926] __se_sys_ioctl+0xff/0x170 [ 135.020178][ T5926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.020204][ T5926] do_syscall_64+0x174/0x580 [ 135.020236][ T5926] ? trace_irq_disable+0x3b/0x140 [ 135.020258][ T5926] ? clear_bhb_loop+0x40/0x90 [ 135.020286][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.020309][ T5926] RIP: 0033:0x7f511ce8e019 [ 135.020343][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.020363][ T5926] RSP: 002b:00007f511b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.020386][ T5926] RAX: ffffffffffffffda RBX: 00007f511d115fa0 RCX: 00007f511ce8e019 [ 135.020404][ T5926] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 135.020419][ T5926] RBP: 00007f511cf2500c R08: 0000000000000000 R09: 0000000000000000 [ 135.020433][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.020446][ T5926] R13: 00007f511d116038 R14: 00007f511d115fa0 R15: 00007ffecdfde898 [ 135.020477][ T5926] [ 135.020489][ T5926] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.020507][ T5926] CPU: 0 UID: 0 PID: 5926 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.020532][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 135.020545][ T5926] Call Trace: [ 135.020554][ T5926] [ 135.020563][ T5926] vpanic+0x56c/0xa60 [ 135.020589][ T5926] ? __pfx__printk+0x10/0x10 [ 135.020618][ T5926] ? __pfx_vpanic+0x10/0x10 [ 135.020638][ T5926] ? is_bpf_text_address+0x292/0x2b0 [ 135.020666][ T5926] ? is_bpf_text_address+0x26/0x2b0 [ 135.020700][ T5926] panic+0xc5/0xd0 [ 135.020758][ T5926] ? __pfx_panic+0x10/0x10 [ 135.020799][ T5926] __warn+0x315/0x4c0 [ 135.020820][ T5926] ? __kvm_gpc_refresh+0x1513/0x1710 [ 135.020859][ T5926] ? __kvm_gpc_refresh+0x1513/0x1710 [ 135.020891][ T5926] __report_bug+0x276/0x570 [ 135.020924][ T5926] ? __kvm_gpc_refresh+0x1513/0x1710 [ 135.020960][ T5926] ? __pfx___report_bug+0x10/0x10 [ 135.020988][ T5926] ? check_path+0x21/0x40 [ 135.021014][ T5926] ? check_noncircular+0xda/0x150 [ 135.021045][ T5926] ? __bfs+0x153/0x290 [ 135.021067][ T5926] ? __pfx_hlock_conflict+0x10/0x10 [ 135.021101][ T5926] ? __kvm_gpc_refresh+0x1513/0x1710 [ 135.021138][ T5926] report_bug+0x16a/0x220 [ 135.021168][ T5926] ? __kvm_gpc_refresh+0x1513/0x1710 [ 135.021204][ T5926] ? __kvm_gpc_refresh+0x1515/0x1710 [ 135.021239][ T5926] handle_bug+0x9c/0x200 [ 135.021272][ T5926] exc_invalid_op+0x1a/0x50 [ 135.021307][ T5926] asm_exc_invalid_op+0x1a/0x20 [ 135.021330][ T5926] RIP: 0010:__kvm_gpc_refresh+0x1513/0x1710 [ 135.021367][ T5926] Code: c6 05 58 b0 58 0e 01 48 c7 c7 2a d9 86 8d be 3c 04 00 00 48 c7 c2 e0 41 62 8b e8 68 3d 61 00 e9 7e ee ff ff e8 2e 67 85 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 135.021386][ T5926] RSP: 0018:ffffc9000590f360 EFLAGS: 00010283 [ 135.021407][ T5926] RAX: ffffffff81407432 RBX: ffff888000000000 RCX: 0000000000080000 [ 135.021424][ T5926] RDX: ffffc90006bc9000 RSI: 000000000000190d RDI: 000000000000190e [ 135.021439][ T5926] RBP: ffffc9000590f4f0 R08: 0000000000000000 R09: 0000000000000000 [ 135.021454][ T5926] R10: dffffc0000000000 R11: fffffbfff1f5f3e7 R12: 1ffff92000b21e80 [ 135.021472][ T5926] R13: ffff8880615ddd10 R14: ffff888000000000 R15: ffffffffffffff01 [ 135.021498][ T5926] ? __kvm_gpc_refresh+0x1512/0x1710 [ 135.021560][ T5926] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 135.021603][ T5926] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.021634][ T5926] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.021663][ T5926] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.021693][ T5926] ? mutex_lock_nested+0x152/0x1d0 [ 135.021744][ T5926] ? kvm_gpc_refresh+0x34/0x110 [ 135.021783][ T5926] kvm_gpc_refresh+0xe4/0x110 [ 135.021820][ T5926] ? kvm_xen_set_evtchn+0x11e/0x220 [ 135.021854][ T5926] kvm_xen_set_evtchn+0x14f/0x220 [ 135.021892][ T5926] kvm_xen_inject_timer_irqs+0xfd/0x200 [ 135.021927][ T5926] vcpu_run+0x98f/0x7940 [ 135.021973][ T5926] ? vcpu_run+0x362a/0x7940 [ 135.022041][ T5926] ? __pfx_vcpu_run+0x10/0x10 [ 135.022068][ T5926] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 135.022099][ T5926] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 135.022139][ T5926] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 135.022179][ T5926] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 135.022213][ T5926] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 135.022242][ T5926] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.022290][ T5926] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 135.022321][ T5926] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.022351][ T5926] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 135.022381][ T5926] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 135.022413][ T5926] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.022445][ T5926] ? lock_acquire+0x106/0x350 [ 135.022472][ T5926] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 135.022503][ T5926] ? rt_write_unlock+0x19c/0x360 [ 135.022532][ T5926] ? rt_write_unlock+0x1a8/0x360 [ 135.022557][ T5926] kvm_vcpu_ioctl+0xa64/0xfe0 [ 135.022587][ T5926] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.022608][ T5926] ? hook_file_ioctl+0x1f3/0x600 [ 135.022647][ T5926] ? __asan_memset+0x22/0x50 [ 135.022679][ T5926] ? smack_file_ioctl+0x331/0x360 [ 135.022704][ T5926] ? __pfx_smack_file_ioctl+0x10/0x10 [ 135.022745][ T5926] ? __fget_files+0x2a/0x420 [ 135.022767][ T5926] ? __fget_files+0x3a8/0x420 [ 135.022791][ T5926] ? __fget_files+0x2a/0x420 [ 135.022819][ T5926] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.022842][ T5926] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 135.022869][ T5926] __se_sys_ioctl+0xff/0x170 [ 135.022902][ T5926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.022928][ T5926] do_syscall_64+0x174/0x580 [ 135.022953][ T5926] ? trace_irq_disable+0x3b/0x140 [ 135.022974][ T5926] ? clear_bhb_loop+0x40/0x90 [ 135.023001][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.023024][ T5926] RIP: 0033:0x7f511ce8e019 [ 135.023048][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.023068][ T5926] RSP: 002b:00007f511b0e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.023092][ T5926] RAX: ffffffffffffffda RBX: 00007f511d115fa0 RCX: 00007f511ce8e019 [ 135.023109][ T5926] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 135.023122][ T5926] RBP: 00007f511cf2500c R08: 0000000000000000 R09: 0000000000000000 [ 135.023136][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.023149][ T5926] R13: 00007f511d116038 R14: 00007f511d115fa0 R15: 00007ffecdfde898 [ 135.023181][ T5926] [ 135.023781][ T5926] Kernel Offset: disabled