Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts.
executing program
[   54.641711][ T4166] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   54.684631][ T4166] 
[   54.687046][ T4166] =============================
[   54.692284][ T4166] WARNING: suspicious RCU usage
[   54.697138][ T4166] 5.15.184-syzkaller #0 Not tainted
[   54.702434][ T4166] -----------------------------
[   54.707309][ T4166] include/linux/kvm_host.h:889 suspicious rcu_dereference_check() usage!
[   54.715837][ T4166] 
[   54.715837][ T4166] other info that might help us debug this:
[   54.715837][ T4166] 
[   54.726101][ T4166] 
[   54.726101][ T4166] rcu_scheduler_active = 2, debug_locks = 1
[   54.734309][ T4166] 1 lock held by syz-executor262/4166:
[   54.739804][ T4166]  #0: ffff88807d79c0c8 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x1c8/0xb80
[   54.749130][ T4166] 
[   54.749130][ T4166] stack backtrace:
[   54.755032][ T4166] CPU: 1 PID: 4166 Comm: syz-executor262 Not tainted 5.15.184-syzkaller #0
[   54.763613][ T4166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   54.773655][ T4166] Call Trace:
[   54.776918][ T4166]  <TASK>
[   54.779835][ T4166]  dump_stack_lvl+0x168/0x230
[   54.784498][ T4166]  ? load_image+0x3b0/0x3b0
[   54.788979][ T4166]  ? show_regs_print_info+0x20/0x20
[   54.794161][ T4166]  ? lockdep_rcu_suspicious+0x110/0x180
[   54.799695][ T4166]  kvm_vcpu_memslots+0x1b6/0x200
[   54.804622][ T4166]  kvm_vcpu_gfn_to_memslot+0x2b/0x3c0
[   54.809974][ T4166]  ? sync_vmcs02_to_vmcs12+0xd33/0x19a0
[   54.815504][ T4166]  kvm_vcpu_unmap+0x5b/0x80
[   54.819990][ T4166]  nested_vmx_vmexit+0x13f5/0x28d0
[   54.825092][ T4166]  ? nested_mark_vmcs12_pages_dirty+0x290/0x290
[   54.831312][ T4166]  ? __might_fault+0xb7/0x110
[   54.835971][ T4166]  ? __lock_acquire+0x7c60/0x7c60
[   54.840982][ T4166]  vmx_leave_nested+0x7e/0xc0
[   54.845642][ T4166]  kvm_vcpu_ioctl_x86_set_vcpu_events+0x95b/0x1190
[   54.852129][ T4166]  kvm_arch_vcpu_ioctl+0x1092/0x19d0
[   54.857402][ T4166]  ? kvm_arch_vcpu_put+0x840/0x840
[   54.862500][ T4166]  ? is_bpf_text_address+0x254/0x270
[   54.867776][ T4166]  ? __kernel_text_address+0x9a/0x100
[   54.873133][ T4166]  ? mark_lock+0x94/0x320
[   54.877449][ T4166]  ? __lock_acquire+0x13ad/0x7c60
[   54.882464][ T4166]  ? kfree+0xef/0x2a0
[   54.886433][ T4166]  ? kfree+0xef/0x2a0
[   54.890393][ T4166]  ? kasan_set_track+0x62/0x70
[   54.895135][ T4166]  ? kasan_set_track+0x4b/0x70
[   54.899878][ T4166]  ? kasan_set_free_info+0x1f/0x40
[   54.904969][ T4166]  ? verify_lock_unused+0x140/0x140
[   54.910165][ T4166]  ? tomoyo_path_number_perm+0x48f/0x5d0
[   54.915802][ T4166]  ? __mutex_trylock_common+0x14f/0x250
[   54.921331][ T4166]  ? rcu_lock_release+0x20/0x20
[   54.926160][ T4166]  ? __ia32_compat_sys_ioctl+0x850/0x850
[   54.931774][ T4166]  ? rcu_lock_release+0x5/0x20
[   54.936532][ T4166]  ? kvm_vcpu_ioctl+0x1c8/0xb80
[   54.941370][ T4166]  ? kvm_vcpu_ioctl+0x1c8/0xb80
[   54.946206][ T4166]  ? kvm_vcpu_ioctl+0x1c8/0xb80
[   54.951038][ T4166]  ? __mutex_lock_common+0x431/0x2390
[   54.956393][ T4166]  ? kfree+0xef/0x2a0
[   54.960361][ T4166]  ? tomoyo_path_number_perm+0x4d4/0x5d0
[   54.965976][ T4166]  ? verify_lock_unused+0x140/0x140
[   54.971157][ T4166]  ? mutex_lock_io_nested+0x60/0x60
[   54.976341][ T4166]  ? kvm_vcpu_ioctl+0x9bd/0xb80
[   54.981171][ T4166]  ? kfree+0x4a/0x2a0
[   54.985158][ T4166]  kvm_vcpu_ioctl+0x6b1/0xb80
[   54.989820][ T4166]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[   54.995441][ T4166]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[   55.001404][ T4166]  ? lock_chain_count+0x20/0x20
[   55.006233][ T4166]  ? bpf_lsm_file_ioctl+0x5/0x10
[   55.011148][ T4166]  ? security_file_ioctl+0x7c/0xa0
[   55.016330][ T4166]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[   55.021945][ T4166]  __se_sys_ioctl+0xfa/0x170
[   55.026553][ T4166]  do_syscall_64+0x4c/0xa0
[   55.030954][ T4166]  ? clear_bhb_loop+0x30/0x80
[   55.035610][ T4166]  ? clear_bhb_loop+0x30/0x80
[   55.040264][ T4166]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   55.046136][ T4166] RIP: 0033:0x7f1a949aa279
[   55.050531][ T4166] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   55.070116][ T4166] RSP: 002b:00007ffd9007ed88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   55.078506][ T4166] RAX: ffffffffffffffda RBX: 00007ffd9007ef58 RCX: 00007f1a949aa279
[