program: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x0, 0xda0, &(0x7f0000000080)="142f", 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 58.815998][ T5313] [ 58.817076][ T5313] ============================= [ 58.819052][ T5313] WARNING: suspicious RCU usage [ 58.822109][ T5313] 6.13.0-syzkaller-00918-g95ec54a420b8 #0 Not tainted [ 58.824927][ T5313] ----------------------------- [ 58.827087][ T5313] ./include/linux/kvm_host.h:1038 suspicious rcu_dereference_check() usage! [ 58.830876][ T5313] [ 58.830876][ T5313] other info that might help us debug this: [ 58.830876][ T5313] [ 58.834878][ T5313] [ 58.834878][ T5313] rcu_scheduler_active = 2, debug_locks = 1 [ 58.837938][ T5313] no locks held by syz.0.0/5313. [ 58.839800][ T5313] [ 58.839800][ T5313] stack backtrace: [ 58.842103][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 58.845791][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.849627][ T5313] Call Trace: [ 58.850891][ T5313] [ 58.851945][ T5313] dump_stack_lvl+0x241/0x360 [ 58.853720][ T5313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.855635][ T5313] ? __pfx__printk+0x10/0x10 [ 58.857463][ T5313] ? irqentry_exit+0x63/0x90 [ 58.859505][ T5313] lockdep_rcu_suspicious+0x226/0x340 [ 58.861690][ T5313] kvm_vcpu_gfn_to_memslot+0x429/0x4c0 [ 58.863815][ T5313] kvm_vcpu_write_guest+0x7c/0x130 [ 58.865758][ T5313] kvm_xen_write_hypercall_page+0x2ff/0x5f0 [ 58.868097][ T5313] ? __pfx_kvm_xen_write_hypercall_page+0x10/0x10 [ 58.870528][ T5313] kvm_set_msr_common+0x150/0x3da0 [ 58.872598][ T5313] ? kvm_clear_async_pf_completion_queue+0x3a7/0x3f0 [ 58.875224][ T5313] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 58.877437][ T5313] ? do_raw_spin_unlock+0x58/0x8b0 [ 58.879441][ T5313] vmx_set_msr+0x15da/0x2790 [ 58.881337][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 58.883395][ T5313] ? kvm_clear_async_pf_completion_queue+0x3a7/0x3f0 [ 58.885996][ T5313] kvm_vcpu_reset+0xbea/0x1740 [ 58.887895][ T5313] ? __pfx_kvm_vcpu_reset+0x10/0x10 [ 58.889949][ T5313] ? __raw_spin_lock_init+0x45/0x100 [ 58.892056][ T5313] kvm_arch_vcpu_create+0x8dc/0xa80 [ 58.894121][ T5313] kvm_vm_ioctl_create_vcpu+0x3d6/0xa00 [ 58.896294][ T5313] kvm_vm_ioctl+0x7e2/0xd30 [ 58.898099][ T5313] ? mark_lock+0x9a/0x360 [ 58.899826][ T5313] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 58.901851][ T5313] ? tomoyo_path_number_perm+0x206/0x860 [ 58.904024][ T5313] ? __pfx_lock_release+0x10/0x10 [ 58.905961][ T5313] ? tomoyo_path_number_perm+0x679/0x860 [ 58.908156][ T5313] ? tomoyo_path_number_perm+0x679/0x860 [ 58.910343][ T5313] ? tomoyo_path_number_perm+0x6f9/0x860 [ 58.912582][ T5313] ? __lock_acquire+0x1397/0x2100 [ 58.914538][ T5313] ? tomoyo_path_number_perm+0x206/0x860 [ 58.916755][ T5313] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 58.919124][ T5313] ? __fget_files+0x2a/0x410 [ 58.920962][ T5313] ? __fget_files+0x2a/0x410 [ 58.922804][ T5313] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 58.924739][ T5313] __se_sys_ioctl+0xf5/0x170 [ 58.926613][ T5313] do_syscall_64+0xf3/0x230 [ 58.928405][ T5313] ? clear_bhb_loop+0x35/0x90 [ 58.930314][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.932847][ T5313] RIP: 0033:0x7fd3c8385d29 [ 58.934675][ T5313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.942382][ T5313] RSP: 002b:00007fd3c9297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.945555][ T5313] RAX: ffffffffffffffda RBX: 00007fd3c8575fa0 RCX: 00007fd3c8385d29 [ 58.948573][ T5313] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 58.951735][ T5313] RBP: 00007fd3c8401b08 R08: 0000000000000000 R09: 0000000000000000 [ 58.954803][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.957863][ T5313] R13: 0000000000000000 R14: 00007fd3c8575fa0 R15: 00007ffd46da57d8 [ 58.960948][ T5313] [ 58.965425][ T4662] Bluetooth: hci0: command tx timeout