=============================
[ BUG: Invalid wait context ]
6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted
-----------------------------
kworker/1:3/6007 is trying to lock:
ffffc90003c43410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x254/0xeb0 arch/x86/kvm/xen.c:1819
other info that might help us debug this:
context-{2:2}
4 locks held by kworker/1:3/6007:
#0: ffff88801b48ad48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
#1: ffffc90004077d18 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
#2: ffffffff8e582c78 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: srcu_advance_state kernel/rcu/srcutree.c:1701 [inline]
#2: ffffffff8e582c78 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x73/0x1920 kernel/rcu/srcutree.c:1861
#3: ffffc90003c43958 (&kvm->srcu){.?.?}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:161 [inline]
#3: ffffc90003c43958 (&kvm->srcu){.?.?}-{0:0}, at: srcu_read_lock include/linux/srcu.h:253 [inline]
#3: ffffc90003c43958 (&kvm->srcu){.?.?}-{0:0}, at: kvm_xen_set_evtchn_fast+0x23a/0xeb0 arch/x86/kvm/xen.c:1817
stack backtrace:
CPU: 1 UID: 0 PID: 6007 Comm: kworker/1:3 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full)
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: rcu_gp process_srcu
Call Trace:
__dump_stack lib/dump_stack.c:94 [inline]
dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
print_lock_invalid_wait_context kernel/locking/lockdep.c:4831 [inline]
check_wait_context kernel/locking/lockdep.c:4903 [inline]
__lock_acquire+0x3ff/0x1ba0 kernel/locking/lockdep.c:5185
lock_acquire kernel/locking/lockdep.c:5866 [inline]
lock_acquire+0x179/0x350 kernel/locking/lockdep.c:5823
__raw_read_lock_irqsave include/linux/rwlock_api_smp.h:160 [inline]
_raw_read_lock_irqsave+0x46/0x90 kernel/locking/spinlock.c:236
kvm_xen_set_evtchn_fast+0x254/0xeb0 arch/x86/kvm/xen.c:1819
xen_timer_callback+0x1db/0x2a0 arch/x86/kvm/xen.c:140
__run_hrtimer kernel/time/hrtimer.c:1761 [inline]
__hrtimer_run_queues+0x5ea/0xad0 kernel/time/hrtimer.c:1825
hrtimer_interrupt+0x397/0x8e0 kernel/time/hrtimer.c:1887
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1038 [inline]
__sysvec_apic_timer_interrupt+0x108/0x3f0 arch/x86/kernel/apic/apic.c:1055
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]
sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1049
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:handle_softirqs+0x1dd/0x8e0 kernel/softirq.c:565
Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 86 8b 8b e8 88 a3 f5 09 65 66 c7 05 d6 26 2a 12 00 00 e8 59 38 46 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 00 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1
RSP: 0018:ffffc900006a0f28 EFLAGS: 00000202
RAX: 00000000000455c4 RBX: 00000000ffffffff RCX: 0000000000000002
RDX: 0000000000000000 RSI: ffffffff8dbef517 RDI: ffffffff8bf46500
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff90866017 R11: 0000000000000000 R12: 0000000000000008
R13: 000000000000000a R14: 1ffff920000d41ed R15: ffffed100460a000
__do_softirq kernel/softirq.c:613 [inline]
invoke_softirq kernel/softirq.c:453 [inline]
__irq_exit_rcu+0x109/0x170 kernel/softirq.c:680
irq_exit_rcu+0x9/0x30 kernel/softirq.c:696
common_interrupt+0xbf/0xe0 arch/x86/kernel/irq.c:285
asm_common_interrupt+0x26/0x40 arch/x86/include/asm/idtentry.h:693
RIP: 0010:delay_tsc+0x32/0xc0 arch/x86/lib/delay.c:79
Code: fd bf 01 00 00 00 41 54 55 53 e8 49 ea 17 f6 e8 84 28 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 01 00 00 00 e8 24 ea 17 f6 e8 5f 28 01 00 44 39 e0 75 36 0f 01
RSP: 0018:ffffc90004077ae0 EFLAGS: 00000286
RAX: 0000000080000000 RBX: 0000005fc04e2fde RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff8bf46480 RDI: 0000000000000001
RBP: 0000005fc04e0fba R08: 0000000000000001 R09: 000000000000337b
R10: ffff88816dd342d7 R11: 0000000000000010 R12: 0000000000000001
R13: 00000000000032c9 R14: 0000000000000001 R15: 000000008e582a01
udelay include/asm-generic/delay.h:64 [inline]
try_check_zero+0x3e9/0x6b0 kernel/rcu/srcutree.c:1116
srcu_advance_state kernel/rcu/srcutree.c:1752 [inline]
process_srcu+0x612/0x1920 kernel/rcu/srcutree.c:1861
process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
process_scheduled_works kernel/workqueue.c:3319 [inline]
worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
kthread+0x3c2/0x780 kernel/kthread.c:464
ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
hpet: Lost 10 RTC interrupts
----------------
Code disassembly (best guess):
0: 88 6c 24 26 mov %ch,0x26(%rsp)
4: 4c 89 7c 24 18 mov %r15,0x18(%rsp)
9: 48 c7 c7 20 86 8b 8b mov $0xffffffff8b8b8620,%rdi
10: e8 88 a3 f5 09 call 0x9f5a39d
15: 65 66 c7 05 d6 26 2a movw $0x0,%gs:0x122a26d6(%rip) # 0x122a26f5
1c: 12 00 00
1f: e8 59 38 46 00 call 0x46387d
24: fb sti
25: bb ff ff ff ff mov $0xffffffff,%ebx
* 2a: 49 c7 c7 c0 c0 00 8e mov $0xffffffff8e00c0c0,%r15 <-- trapping instruction
31: 41 0f bc dc bsf %r12d,%ebx
35: 83 c3 01 add $0x1,%ebx
38: 0f 85 a4 00 00 00 jne 0xe2
3e: e9 .byte 0xe9
3f: b1 .byte 0xb1