program: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000240)={0x0, 0xda0, &(0x7f0000000080)="142f91b1f9", 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 72.341521][ T4668] Bluetooth: hci0: command tx timeout [ 72.453685][ T5321] [ 72.454686][ T5321] ============================= [ 72.456576][ T5321] WARNING: suspicious RCU usage [ 72.458737][ T5321] 6.13.0-syzkaller-00918-g95ec54a420b8 #0 Not tainted [ 72.461266][ T5321] ----------------------------- [ 72.463171][ T5321] ./include/linux/kvm_host.h:1038 suspicious rcu_dereference_check() usage! [ 72.466415][ T5321] [ 72.466415][ T5321] other info that might help us debug this: [ 72.466415][ T5321] [ 72.470438][ T5321] [ 72.470438][ T5321] rcu_scheduler_active = 2, debug_locks = 1 [ 72.473727][ T5321] no locks held by syz.0.0/5321. [ 72.475991][ T5321] [ 72.475991][ T5321] stack backtrace: [ 72.478501][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 72.482122][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.486051][ T5321] Call Trace: [ 72.487366][ T5321] [ 72.488562][ T5321] dump_stack_lvl+0x241/0x360 [ 72.490394][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.492451][ T5321] ? __pfx__printk+0x10/0x10 [ 72.494239][ T5321] ? irqentry_exit+0x63/0x90 [ 72.496208][ T5321] lockdep_rcu_suspicious+0x226/0x340 [ 72.498175][ T5321] kvm_vcpu_gfn_to_memslot+0x429/0x4c0 [ 72.500303][ T5321] kvm_vcpu_write_guest+0x7c/0x130 [ 72.502355][ T5321] kvm_xen_write_hypercall_page+0x2ff/0x5f0 [ 72.504723][ T5321] ? __pfx_kvm_xen_write_hypercall_page+0x10/0x10 [ 72.507218][ T5321] kvm_set_msr_common+0x150/0x3da0 [ 72.509115][ T5321] ? kvm_clear_async_pf_completion_queue+0x3a7/0x3f0 [ 72.511645][ T5321] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 72.513818][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 72.515800][ T5321] vmx_set_msr+0x15da/0x2790 [ 72.517527][ T5321] ? _raw_spin_unlock+0x28/0x50 [ 72.519386][ T5321] ? kvm_clear_async_pf_completion_queue+0x3a7/0x3f0 [ 72.521971][ T5321] kvm_vcpu_reset+0xbea/0x1740 [ 72.523900][ T5321] ? __pfx_kvm_vcpu_reset+0x10/0x10 [ 72.525894][ T5321] ? __raw_spin_lock_init+0x45/0x100 [ 72.527924][ T5321] kvm_arch_vcpu_create+0x8dc/0xa80 [ 72.529864][ T5321] kvm_vm_ioctl_create_vcpu+0x3d6/0xa00 [ 72.531947][ T5321] kvm_vm_ioctl+0x7e2/0xd30 [ 72.533668][ T5321] ? mark_lock+0x9a/0x360 [ 72.535372][ T5321] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 72.537155][ T5321] ? tomoyo_path_number_perm+0x206/0x860 [ 72.539235][ T5321] ? __pfx_lock_release+0x10/0x10 [ 72.541189][ T5321] ? tomoyo_path_number_perm+0x679/0x860 [ 72.543390][ T5321] ? tomoyo_path_number_perm+0x679/0x860 [ 72.545598][ T5321] ? tomoyo_path_number_perm+0x6f9/0x860 [ 72.547785][ T5321] ? __lock_acquire+0x1397/0x2100 [ 72.549704][ T5321] ? tomoyo_path_number_perm+0x206/0x860 [ 72.552375][ T5321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 72.555397][ T5321] ? __fget_files+0x2a/0x410 [ 72.557051][ T5321] ? __fget_files+0x2a/0x410 [ 72.558783][ T5321] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 72.560757][ T5321] __se_sys_ioctl+0xf5/0x170 [ 72.562472][ T5321] do_syscall_64+0xf3/0x230 [ 72.564191][ T5321] ? clear_bhb_loop+0x35/0x90 [ 72.565976][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.568144][ T5321] RIP: 0033:0x7f4716585d29 [ 72.569789][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.576876][ T5321] RSP: 002b:00007f4717340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.580073][ T5321] RAX: ffffffffffffffda RBX: 00007f4716775fa0 RCX: 00007f4716585d29 [ 72.583111][ T5321] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 72.586157][ T5321] RBP: 00007f4716601b08 R08: 0000000000000000 R09: 0000000000000000 [ 72.589189][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.592177][ T5321] R13: 0000000000000000 R14: 00007f4716775fa0 R15: 00007fff4359fc58 [ 72.595251][ T5321]