program: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000240)={0x2, 0xda0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) read$FUSE(r0, &(0x7f0000010140)={0x2020}, 0x2036) [ 68.855323][ T5305] Bluetooth: hci0: command tx timeout [ 68.937878][ T5320] [ 68.938784][ T5320] ============================= [ 68.940642][ T5320] WARNING: suspicious RCU usage [ 68.942637][ T5320] 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 Not tainted [ 68.945804][ T5320] ----------------------------- [ 68.947723][ T5320] ./include/linux/kvm_host.h:1059 suspicious rcu_dereference_check() usage! [ 68.951048][ T5320] [ 68.951048][ T5320] other info that might help us debug this: [ 68.951048][ T5320] [ 68.955288][ T5320] [ 68.955288][ T5320] rcu_scheduler_active = 2, debug_locks = 1 [ 68.958605][ T5320] no locks held by syz.0.0/5320. [ 68.960797][ T5320] [ 68.960797][ T5320] stack backtrace: [ 68.963262][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 68.963278][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.963286][ T5320] Call Trace: [ 68.963292][ T5320] [ 68.963298][ T5320] dump_stack_lvl+0x241/0x360 [ 68.963407][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.963420][ T5320] ? __pfx__printk+0x10/0x10 [ 68.963436][ T5320] lockdep_rcu_suspicious+0x226/0x340 [ 68.963452][ T5320] kvm_vcpu_gfn_to_memslot+0x429/0x4c0 [ 68.963471][ T5320] kvm_vcpu_write_guest+0x7c/0x130 [ 68.963485][ T5320] kvm_xen_write_hypercall_page+0x50a/0x5f0 [ 68.963504][ T5320] ? __pfx_kvm_xen_write_hypercall_page+0x10/0x10 [ 68.963524][ T5320] kvm_set_msr_common+0x154/0x3b10 [ 68.963537][ T5320] ? kvm_clear_async_pf_completion_queue+0x3a7/0x3f0 [ 68.963552][ T5320] ? __pfx_lock_release+0x10/0x10 [ 68.963566][ T5320] ? __pfx_kvm_set_msr_common+0x10/0x10 [ 68.963579][ T5320] ? do_raw_spin_unlock+0x58/0x8b0 [ 68.963592][ T5320] vmx_set_msr+0x151d/0x26f0 [ 68.963602][ T5320] ? _raw_spin_unlock+0x28/0x50 [ 68.963645][ T5320] ? kvm_clear_async_pf_completion_queue+0x3a7/0x3f0 [ 68.963661][ T5320] kvm_vcpu_reset+0xbea/0x1740 [ 68.963678][ T5320] ? __pfx_kvm_vcpu_reset+0x10/0x10 [ 68.963688][ T5320] ? __raw_spin_lock_init+0x45/0x100 [ 68.963706][ T5320] kvm_arch_vcpu_create+0x8f4/0xa80 [ 68.963723][ T5320] kvm_vm_ioctl_create_vcpu+0x3d8/0x8b0 [ 68.963743][ T5320] kvm_vm_ioctl+0x7be/0xd50 [ 68.963757][ T5320] ? mark_lock+0x9a/0x360 [ 68.963768][ T5320] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 68.963787][ T5320] ? tomoyo_path_number_perm+0x209/0x770 [ 68.963832][ T5320] ? __pfx_lock_release+0x10/0x10 [ 68.963850][ T5320] ? tomoyo_path_number_perm+0x5dd/0x770 [ 68.963868][ T5320] ? tomoyo_path_number_perm+0x5dd/0x770 [ 68.963886][ T5320] ? tomoyo_path_number_perm+0x65d/0x770 [ 68.963899][ T5320] ? __lock_acquire+0x1397/0x2100 [ 68.963914][ T5320] ? tomoyo_path_number_perm+0x209/0x770 [ 68.963929][ T5320] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.963964][ T5320] ? __fget_files+0x2a/0x410 [ 68.963981][ T5320] ? __fget_files+0x2a/0x410 [ 68.963997][ T5320] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 68.964013][ T5320] __se_sys_ioctl+0xf5/0x170 [ 68.964025][ T5320] do_syscall_64+0xf3/0x230 [ 68.964041][ T5320] ? clear_bhb_loop+0x35/0x90 [ 68.964058][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.964078][ T5320] RIP: 0033:0x7f10a398d169 [ 68.964091][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.964100][ T5320] RSP: 002b:00007f10a471e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.964113][ T5320] RAX: ffffffffffffffda RBX: 00007f10a3ba5fa0 RCX: 00007f10a398d169 [ 68.964121][ T5320] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 68.964128][ T5320] RBP: 00007f10a3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.964135][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.964142][ T5320] R13: 0000000000000000 R14: 00007f10a3ba5fa0 R15: 00007ffefb0daaa8 [ 68.964157][ T5320]