./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3323288811 <...> Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. execve("./syz-executor3323288811", ["./syz-executor3323288811"], 0x7fff26aa3260 /* 10 vars */) = 0 brk(NULL) = 0x555566471000 brk(0x555566471d00) = 0x555566471d00 arch_prctl(ARCH_SET_FS, 0x555566471380) = 0 set_tid_address(0x555566471650) = 296 set_robust_list(0x555566471660, 24) = 0 rseq(0x555566471ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3323288811", 4096) = 28 getrandom("\x56\xa2\x70\xbc\xd8\x9f\xe2\xd0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555566471d00 brk(0x555566492d00) = 0x555566492d00 brk(0x555566493000) = 0x555566493000 mprotect(0x7f8fda79f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 297 attached , child_tidptr=0x555566471650) = 297 [pid 297] set_robust_list(0x555566471660, 24) = 0 [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 297] setpgid(0, 0) = 0 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "1000", 4) = 4 [pid 297] close(3) = 0 [pid 297] write(1, "executing program\n", 18executing program ) = 18 [pid 297] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [ 28.877237][ T36] audit: type=1400 audit(1752266192.720:64): avc: denied { execmem } for pid=296 comm="syz-executor332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.899352][ T36] audit: type=1400 audit(1752266192.740:65): avc: denied { read } for pid=297 comm="syz-executor332" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.900131][ T297] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.923375][ T36] audit: type=1400 audit(1752266192.740:66): avc: denied { open } for pid=297 comm="syz-executor332" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [pid 297] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 297] eventfd(127) = 5 [pid 297] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 297] exit_group(0) = ? [ 28.962632][ T36] audit: type=1400 audit(1752266192.740:67): avc: denied { ioctl } for pid=297 comm="syz-executor332" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.018529][ T297] ------------[ cut here ]------------ [ 29.024063][ T297] WARNING: CPU: 0 PID: 297 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 29.033959][ T297] Modules linked in: [ 29.037958][ T297] CPU: 0 UID: 0 PID: 297 Comm: syz-executor332 Not tainted 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 29.051833][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.061977][ T297] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 29.067951][ T297] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 29.087668][ T297] RSP: 0018:ffffc900011ffaa8 EFLAGS: 00010202 [ 29.093781][ T297] RAX: 1ffffd1ffff80dea RBX: ffffc90000d228e8 RCX: ffffffff816d8c29 [ 29.101796][ T297] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc06f50 [ 29.109839][ T297] RBP: ffffc900011ffb10 R08: ffffe8ffffc06f57 R09: 1ffffd1ffff80dea [ 29.117894][ T297] R10: dffffc0000000000 R11: fffff91ffff80deb R12: dffffc0000000000 [ 29.125902][ T297] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc06f50 [ 29.134047][ T297] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.143118][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.149826][ T297] CR2: 0000560c2caedbe0 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 29.157877][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.165886][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.173934][ T297] Call Trace: [ 29.177294][ T297] [ 29.180252][ T297] kvm_put_kvm+0x1100/0x12b0 [ 29.184888][ T297] ? __cfi_kvm_vm_release+0x10/0x10 [ 29.190197][ T297] kvm_vm_release+0x47/0x70 [ 29.194863][ T297] __fput+0x1fb/0xa00 [ 29.198997][ T297] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.204614][ T297] ____fput+0x20/0x30 [ 29.208688][ T297] task_work_run+0x1e3/0x250 [ 29.213440][ T297] ? __cfi_task_work_run+0x10/0x10 [ 29.218625][ T297] ? __kasan_check_write+0x18/0x20 [ 29.223808][ T297] do_exit+0x9b4/0x2630 [ 29.228047][ T297] ? __cfi_do_exit+0x10/0x10 [ 29.232838][ T297] ? __kasan_check_write+0x18/0x20 [ 29.238051][ T297] ? _raw_spin_lock_irq+0x8d/0x120 [ 29.243213][ T297] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.248889][ T297] ? zap_other_threads+0x334/0x370 [ 29.254038][ T297] do_group_exit+0x22a/0x300 [ 29.258685][ T297] __x64_sys_exit_group+0x43/0x50 [ 29.263832][ T297] x64_sys_call+0x2ed2/0x2ee0 [ 29.268618][ T297] do_syscall_64+0x58/0xf0 [ 29.273186][ T297] ? clear_bhb_loop+0x50/0xa0 [ 29.277955][ T297] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.283905][ T297] RIP: 0033:0x7f8fda72ac09 [ 29.288380][ T297] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 29.295430][ T297] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.303917][ T297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 29.312038][ T297] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [pid 297] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=39} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 299 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x555566471660, 24) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 executing program [pid 299] write(1, "executing program\n", 18) = 18 [pid 299] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 299] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 299] eventfd(127) = 5 [pid 299] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 299] exit_group(0) = ? [ 29.320064][ T297] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 29.328122][ T297] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 29.336241][ T297] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 29.344337][ T297] [ 29.347435][ T297] ---[ end trace 0000000000000000 ]--- [pid 299] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 300 attached , child_tidptr=0x555566471650) = 300 [pid 300] set_robust_list(0x555566471660, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 [pid 300] write(1, "executing program\n", 18executing program ) = 18 [pid 300] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 300] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 300] eventfd(127) = 5 [pid 300] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 300] exit_group(0) = ? [pid 300] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 301 attached , child_tidptr=0x555566471650) = 301 [pid 301] set_robust_list(0x555566471660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3executing program ) = 0 [pid 301] write(1, "executing program\n", 18) = 18 [pid 301] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 301] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 301] eventfd(127) = 5 [pid 301] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 301] exit_group(0) = ? [pid 301] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 302 attached , child_tidptr=0x555566471650) = 302 [pid 302] set_robust_list(0x555566471660, 24) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 executing program [pid 302] write(1, "executing program\n", 18) = 18 [pid 302] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 302] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 302] eventfd(127) = 5 [pid 302] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 302] exit_group(0) = ? [pid 302] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 303 attached , child_tidptr=0x555566471650) = 303 [pid 303] set_robust_list(0x555566471660, 24) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] write(1, "executing program\n", 18executing program ) = 18 [pid 303] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 303] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 303] eventfd(127) = 5 [pid 303] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 303] exit_group(0) = ? [pid 303] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 304 ./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x555566471660, 24) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 executing program [pid 304] write(1, "executing program\n", 18) = 18 [pid 304] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 304] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 304] eventfd(127) = 5 [pid 304] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 304] exit_group(0) = ? [pid 304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 305 ./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x555566471660, 24) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4executing program ) = 4 [pid 305] close(3) = 0 [pid 305] write(1, "executing program\n", 18) = 18 [pid 305] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 305] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 305] eventfd(127) = 5 [pid 305] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 305] exit_group(0) = ? [pid 305] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 306 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x555566471660, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 executing program [pid 306] write(1, "executing program\n", 18) = 18 [pid 306] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 306] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 306] eventfd(127) = 5 [pid 306] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 306] exit_group(0) = ? [ 29.846739][ T306] ------------[ cut here ]------------ [ 29.852251][ T306] WARNING: CPU: 0 PID: 306 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 29.862089][ T306] Modules linked in: [ 29.866072][ T306] CPU: 0 UID: 0 PID: 306 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 29.881448][ T306] Tainted: [W]=WARN [ 29.885276][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.897461][ T306] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 29.903407][ T306] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 29.923183][ T306] RSP: 0018:ffffc900011ffaa8 EFLAGS: 00010202 [ 29.929319][ T306] RAX: 1ffffd1ffff80e1a RBX: ffffc900012878e8 RCX: ffffffff816d8c29 [ 29.937369][ T306] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc070d0 [ 29.945373][ T306] RBP: ffffc900011ffb10 R08: ffffe8ffffc070d7 R09: 1ffffd1ffff80e1a [ 29.953464][ T306] R10: dffffc0000000000 R11: fffff91ffff80e1b R12: dffffc0000000000 [ 29.961573][ T306] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc070d0 [ 29.969699][ T306] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.978719][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.985327][ T306] CR2: 00007f8fda7a30d0 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 29.993342][ T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.001370][ T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.009399][ T306] Call Trace: [ 30.012698][ T306] [ 30.015632][ T306] kvm_put_kvm+0x1100/0x12b0 [ 30.020277][ T306] ? __cfi_kvm_vm_release+0x10/0x10 [ 30.025523][ T306] kvm_vm_release+0x47/0x70 [ 30.030136][ T306] __fput+0x1fb/0xa00 [ 30.034624][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.040246][ T306] ____fput+0x20/0x30 [ 30.044255][ T306] task_work_run+0x1e3/0x250 [ 30.048936][ T306] ? __cfi_task_work_run+0x10/0x10 [ 30.054096][ T306] ? __kasan_check_write+0x18/0x20 [ 30.059438][ T306] do_exit+0x9b4/0x2630 [ 30.063661][ T306] ? __cfi_do_exit+0x10/0x10 [ 30.068491][ T306] ? __kasan_check_write+0x18/0x20 [ 30.073695][ T306] ? _raw_spin_lock_irq+0x8d/0x120 [ 30.079038][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.084674][ T306] ? zap_other_threads+0x334/0x370 [ 30.089899][ T306] do_group_exit+0x22a/0x300 [ 30.094646][ T306] __x64_sys_exit_group+0x43/0x50 [ 30.099798][ T306] x64_sys_call+0x2ed2/0x2ee0 [ 30.104528][ T306] do_syscall_64+0x58/0xf0 [ 30.109370][ T306] ? clear_bhb_loop+0x50/0xa0 [ 30.114100][ T306] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.120103][ T306] RIP: 0033:0x7f8fda72ac09 [ 30.124557][ T306] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 30.131763][ T306] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 306] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 307 ./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x555566471660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 executing program [pid 307] write(1, "executing program\n", 18) = 18 [pid 307] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 307] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 307] eventfd(127) = 5 [pid 307] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 307] exit_group(0) = ? [ 30.140374][ T306] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 30.148423][ T306] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 30.156682][ T306] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 30.164903][ T306] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 30.172967][ T306] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 30.181008][ T306] [ 30.184050][ T306] ---[ end trace 0000000000000000 ]--- [pid 307] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 308 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x555566471660, 24) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 executing program [pid 308] write(1, "executing program\n", 18) = 18 [pid 308] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 308] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 308] eventfd(127) = 5 [pid 308] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 308] exit_group(0) = ? [ 30.286775][ T308] ------------[ cut here ]------------ [ 30.292279][ T308] WARNING: CPU: 0 PID: 308 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 30.302068][ T308] Modules linked in: [ 30.306114][ T308] CPU: 0 UID: 0 PID: 308 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 30.321460][ T308] Tainted: [W]=WARN [ 30.325275][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.336184][ T308] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 30.342138][ T308] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 30.362337][ T308] RSP: 0018:ffffc9000117faa8 EFLAGS: 00010202 [ 30.368460][ T308] RAX: 1ffffd1ffff80e4a RBX: ffffc9000129d8e8 RCX: ffffffff816d8c29 [ 30.376515][ T308] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07250 [ 30.384524][ T308] RBP: ffffc9000117fb10 R08: ffffe8ffffc07257 R09: 1ffffd1ffff80e4a [ 30.392551][ T308] R10: dffffc0000000000 R11: fffff91ffff80e4b R12: dffffc0000000000 [ 30.400600][ T308] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07250 [ 30.408628][ T308] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.417647][ T308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.424235][ T308] CR2: 00007f8fda7a6110 CR3: 0000000102318000 CR4: 00000000003526b0 [ 30.432291][ T308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.440417][ T308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.448441][ T308] Call Trace: [ 30.451745][ T308] [ 30.454678][ T308] kvm_put_kvm+0x1100/0x12b0 [ 30.459326][ T308] ? __cfi_kvm_vm_release+0x10/0x10 [ 30.464596][ T308] kvm_vm_release+0x47/0x70 [ 30.469162][ T308] __fput+0x1fb/0xa00 [ 30.473180][ T308] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.478897][ T308] ____fput+0x20/0x30 [ 30.482919][ T308] task_work_run+0x1e3/0x250 [ 30.487604][ T308] ? __cfi_task_work_run+0x10/0x10 [ 30.492778][ T308] ? __kasan_check_write+0x18/0x20 [ 30.497970][ T308] do_exit+0x9b4/0x2630 [ 30.502176][ T308] ? __cfi_do_exit+0x10/0x10 [ 30.506858][ T308] ? __kasan_check_write+0x18/0x20 [ 30.512009][ T308] ? _raw_spin_lock_irq+0x8d/0x120 [ 30.517221][ T308] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.522808][ T308] ? zap_other_threads+0x334/0x370 [ 30.528042][ T308] do_group_exit+0x22a/0x300 [ 30.532681][ T308] __x64_sys_exit_group+0x43/0x50 [ 30.537793][ T308] x64_sys_call+0x2ed2/0x2ee0 [ 30.542511][ T308] do_syscall_64+0x58/0xf0 [ 30.546982][ T308] ? clear_bhb_loop+0x50/0xa0 [ 30.551699][ T308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.557665][ T308] RIP: 0033:0x7f8fda72ac09 [ 30.562100][ T308] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 30.569158][ T308] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.577628][ T308] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 308] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 309 ./strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x555566471660, 24) = 0 [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] write(1, "executing program\n", 18executing program ) = 18 [pid 309] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 309] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 309] eventfd(127) = 5 [pid 309] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 309] exit_group(0) = ? [ 30.585610][ T308] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 30.593624][ T308] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 30.601649][ T308] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 30.609713][ T308] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 30.617777][ T308] [ 30.620840][ T308] ---[ end trace 0000000000000000 ]--- [pid 309] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 310 attached , child_tidptr=0x555566471650) = 310 [pid 310] set_robust_list(0x555566471660, 24) = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3executing program ) = 0 [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 310] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 310] eventfd(127) = 5 [pid 310] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 310] exit_group(0) = ? [pid 310] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 311 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x555566471660, 24) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 executing program [pid 311] write(1, "executing program\n", 18) = 18 [pid 311] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 311] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 311] eventfd(127) = 5 [pid 311] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 311] exit_group(0) = ? [ 30.776732][ T311] ------------[ cut here ]------------ [ 30.782228][ T311] WARNING: CPU: 0 PID: 311 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 30.792218][ T311] Modules linked in: [ 30.796168][ T311] CPU: 0 UID: 0 PID: 311 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 30.811534][ T311] Tainted: [W]=WARN [ 30.815360][ T311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.825463][ T311] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 30.831418][ T311] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 30.851081][ T311] RSP: 0018:ffffc900011ffaa8 EFLAGS: 00010202 [ 30.857229][ T311] RAX: 1ffffd1ffff80e7a RBX: ffffc900012c88e8 RCX: ffffffff816d8c29 [ 30.865227][ T311] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc073d0 [ 30.873289][ T311] RBP: ffffc900011ffb10 R08: ffffe8ffffc073d7 R09: 1ffffd1ffff80e7a [ 30.881331][ T311] R10: dffffc0000000000 R11: fffff91ffff80e7b R12: dffffc0000000000 [ 30.889356][ T311] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc073d0 [ 30.897392][ T311] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.906385][ T311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.912985][ T311] CR2: 00007f8fda6fb65e CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 30.921000][ T311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.929016][ T311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.937044][ T311] Call Trace: [ 30.940347][ T311] [ 30.943283][ T311] kvm_put_kvm+0x1100/0x12b0 [ 30.947935][ T311] ? __cfi_kvm_vm_release+0x10/0x10 [ 30.953277][ T311] kvm_vm_release+0x47/0x70 [ 30.957844][ T311] __fput+0x1fb/0xa00 [ 30.961926][ T311] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.967565][ T311] ____fput+0x20/0x30 [ 30.971573][ T311] task_work_run+0x1e3/0x250 [ 30.976454][ T311] ? __cfi_task_work_run+0x10/0x10 [ 30.981717][ T311] ? __kasan_check_write+0x18/0x20 [ 30.986911][ T311] do_exit+0x9b4/0x2630 [ 30.991170][ T311] ? __cfi_do_exit+0x10/0x10 [ 30.995786][ T311] ? __kasan_check_write+0x18/0x20 [ 31.000963][ T311] ? _raw_spin_lock_irq+0x8d/0x120 [ 31.006148][ T311] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.011719][ T311] ? zap_other_threads+0x334/0x370 [ 31.016905][ T311] do_group_exit+0x22a/0x300 [ 31.021539][ T311] __x64_sys_exit_group+0x43/0x50 [ 31.026650][ T311] x64_sys_call+0x2ed2/0x2ee0 [ 31.031412][ T311] do_syscall_64+0x58/0xf0 [ 31.036037][ T311] ? clear_bhb_loop+0x50/0xa0 [ 31.040763][ T311] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.046719][ T311] RIP: 0033:0x7f8fda72ac09 [ 31.051165][ T311] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 31.058231][ T311] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.066804][ T311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 311] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 312 attached , child_tidptr=0x555566471650) = 312 [pid 312] set_robust_list(0x555566471660, 24) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 executing program [pid 312] write(1, "executing program\n", 18) = 18 [pid 312] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 312] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 312] eventfd(127) = 5 [pid 312] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 312] exit_group(0) = ? [ 31.074806][ T311] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.082838][ T311] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 31.090881][ T311] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 31.098923][ T311] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 31.106979][ T311] [ 31.110023][ T311] ---[ end trace 0000000000000000 ]--- [pid 312] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 313 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x555566471660, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18executing program ) = 18 [pid 313] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 313] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 313] eventfd(127) = 5 [pid 313] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 313] exit_group(0) = ? [ 31.216981][ T313] ------------[ cut here ]------------ [ 31.222522][ T313] WARNING: CPU: 0 PID: 313 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 31.232352][ T313] Modules linked in: [ 31.236417][ T313] CPU: 0 UID: 0 PID: 313 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 31.251792][ T313] Tainted: [W]=WARN [ 31.255627][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.265757][ T313] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 31.271776][ T313] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 31.291514][ T313] RSP: 0018:ffffc9000110faa8 EFLAGS: 00010202 [ 31.297665][ T313] RAX: 1ffffd1ffff80eaa RBX: ffffc900012de8e8 RCX: ffffffff816d8c29 [ 31.305834][ T313] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07550 [ 31.313859][ T313] RBP: ffffc9000110fb10 R08: ffffe8ffffc07557 R09: 1ffffd1ffff80eaa [ 31.321992][ T313] R10: dffffc0000000000 R11: fffff91ffff80eab R12: dffffc0000000000 [ 31.330023][ T313] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07550 [ 31.338148][ T313] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.347169][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.353866][ T313] CR2: 0000200000000040 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 31.362086][ T313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.370158][ T313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.378203][ T313] Call Trace: [ 31.381503][ T313] [ 31.384445][ T313] kvm_put_kvm+0x1100/0x12b0 [ 31.389205][ T313] ? __cfi_kvm_vm_release+0x10/0x10 [ 31.394452][ T313] kvm_vm_release+0x47/0x70 [ 31.399014][ T313] __fput+0x1fb/0xa00 [ 31.403113][ T313] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.409161][ T313] ____fput+0x20/0x30 [ 31.413168][ T313] task_work_run+0x1e3/0x250 [ 31.417837][ T313] ? __cfi_task_work_run+0x10/0x10 [ 31.423263][ T313] ? __kasan_check_write+0x18/0x20 [ 31.428608][ T313] do_exit+0x9b4/0x2630 [ 31.432826][ T313] ? __cfi_do_exit+0x10/0x10 [ 31.437590][ T313] ? __kasan_check_write+0x18/0x20 [ 31.442747][ T313] ? _raw_spin_lock_irq+0x8d/0x120 [ 31.447917][ T313] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.453495][ T313] ? zap_other_threads+0x334/0x370 [ 31.458709][ T313] do_group_exit+0x22a/0x300 [ 31.463435][ T313] __x64_sys_exit_group+0x43/0x50 [ 31.468562][ T313] x64_sys_call+0x2ed2/0x2ee0 [ 31.473828][ T313] do_syscall_64+0x58/0xf0 [ 31.478360][ T313] ? clear_bhb_loop+0x50/0xa0 [ 31.483180][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.489257][ T313] RIP: 0033:0x7f8fda72ac09 [ 31.493816][ T313] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 31.500949][ T313] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.509473][ T313] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 314 ./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x555566471660, 24) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 executing program [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 314] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 314] eventfd(127) = 5 [pid 314] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 314] exit_group(0) = ? [ 31.517534][ T313] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.525539][ T313] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 31.533607][ T313] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 31.541646][ T313] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 31.549680][ T313] [ 31.552721][ T313] ---[ end trace 0000000000000000 ]--- [ 31.586812][ T314] ------------[ cut here ]------------ [ 31.592341][ T314] WARNING: CPU: 0 PID: 314 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 31.602124][ T314] Modules linked in: [ 31.606089][ T314] CPU: 0 UID: 0 PID: 314 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 31.621467][ T314] Tainted: [W]=WARN [ 31.625309][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.635426][ T314] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 31.641443][ T314] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 31.661315][ T314] RSP: 0018:ffffc900012a7aa8 EFLAGS: 00010202 [ 31.667519][ T314] RAX: 1ffffd1ffff80eda RBX: ffffc900012e98e8 RCX: ffffffff816d8c29 [ 31.676121][ T314] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc076d0 [ 31.684234][ T314] RBP: ffffc900012a7b10 R08: ffffe8ffffc076d7 R09: 1ffffd1ffff80eda [ 31.692271][ T314] R10: dffffc0000000000 R11: fffff91ffff80edb R12: dffffc0000000000 [ 31.700533][ T314] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc076d0 [ 31.709153][ T314] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.718240][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.724951][ T314] CR2: 0000555566471650 CR3: 0000000102318000 CR4: 00000000003526b0 [ 31.732994][ T314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.741037][ T314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.749307][ T314] Call Trace: [ 31.752888][ T314] [ 31.755867][ T314] kvm_put_kvm+0x1100/0x12b0 [ 31.760678][ T314] ? __cfi_kvm_vm_release+0x10/0x10 [ 31.766007][ T314] kvm_vm_release+0x47/0x70 [ 31.771250][ T314] __fput+0x1fb/0xa00 [ 31.781147][ T314] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.787113][ T314] ____fput+0x20/0x30 [ 31.791111][ T314] task_work_run+0x1e3/0x250 [ 31.795714][ T314] ? __cfi_task_work_run+0x10/0x10 [ 31.801418][ T314] ? __kasan_check_write+0x18/0x20 [ 31.806617][ T314] do_exit+0x9b4/0x2630 [ 31.810873][ T314] ? __cfi_do_exit+0x10/0x10 [ 31.815476][ T314] ? __kasan_check_write+0x18/0x20 [ 31.820824][ T314] ? _raw_spin_lock_irq+0x8d/0x120 [ 31.825989][ T314] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.831821][ T314] ? zap_other_threads+0x334/0x370 [ 31.837166][ T314] do_group_exit+0x22a/0x300 [ 31.841812][ T314] __x64_sys_exit_group+0x43/0x50 [ 31.846938][ T314] x64_sys_call+0x2ed2/0x2ee0 [ 31.851789][ T314] do_syscall_64+0x58/0xf0 [ 31.856310][ T314] ? clear_bhb_loop+0x50/0xa0 [ 31.861031][ T314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.866989][ T314] RIP: 0033:0x7f8fda72ac09 [ 31.871459][ T314] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 31.878629][ T314] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 315 ./strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x555566471660, 24) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3executing program ) = 0 [pid 315] write(1, "executing program\n", 18) = 18 [pid 315] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 315] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 315] eventfd(127) = 5 [pid 315] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 315] exit_group(0) = ? [ 31.887116][ T314] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 31.895108][ T314] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.903147][ T314] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 31.911196][ T314] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 31.919219][ T314] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 31.927284][ T314] [ 31.930410][ T314] ---[ end trace 0000000000000000 ]--- [pid 315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 316 ./strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x555566471660, 24) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] write(1, "executing program\n", 18executing program ) = 18 [pid 316] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 316] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 316] eventfd(127) = 5 [pid 316] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 316] exit_group(0) = ? [ 32.046845][ T316] ------------[ cut here ]------------ [ 32.052956][ T316] WARNING: CPU: 0 PID: 316 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 32.064179][ T316] Modules linked in: [ 32.068809][ T316] CPU: 0 UID: 0 PID: 316 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 32.085781][ T316] Tainted: [W]=WARN [ 32.090203][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.104229][ T316] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 32.110485][ T316] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 32.133497][ T316] RSP: 0018:ffffc9000110faa8 EFLAGS: 00010202 [ 32.139975][ T316] RAX: 1ffffd1ffff80f0a RBX: ffffc900012ff8e8 RCX: ffffffff816d8c29 [ 32.149509][ T316] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07850 [ 32.159291][ T316] RBP: ffffc9000110fb10 R08: ffffe8ffffc07857 R09: 1ffffd1ffff80f0a [ 32.168645][ T316] R10: dffffc0000000000 R11: fffff91ffff80f0b R12: dffffc0000000000 [ 32.176786][ T316] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07850 [ 32.185404][ T316] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.195340][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.203767][ T316] CR2: 00007f8fda7a30d0 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 32.212512][ T316] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.220651][ T316] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.228803][ T316] Call Trace: [ 32.232285][ T316] [ 32.235237][ T316] kvm_put_kvm+0x1100/0x12b0 [ 32.239886][ T316] ? __cfi_kvm_vm_release+0x10/0x10 [ 32.246026][ T316] kvm_vm_release+0x47/0x70 [ 32.250576][ T316] __fput+0x1fb/0xa00 [ 32.254694][ T316] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.260479][ T316] ____fput+0x20/0x30 [ 32.264548][ T316] task_work_run+0x1e3/0x250 [ 32.269292][ T316] ? __cfi_task_work_run+0x10/0x10 [ 32.274529][ T316] ? __kasan_check_write+0x18/0x20 [ 32.279923][ T316] do_exit+0x9b4/0x2630 [ 32.284132][ T316] ? __cfi_do_exit+0x10/0x10 [ 32.288885][ T316] ? __kasan_check_write+0x18/0x20 [ 32.294145][ T316] ? _raw_spin_lock_irq+0x8d/0x120 [ 32.299482][ T316] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.305105][ T316] ? zap_other_threads+0x334/0x370 [ 32.310335][ T316] do_group_exit+0x22a/0x300 [ 32.314980][ T316] __x64_sys_exit_group+0x43/0x50 [ 32.320554][ T316] x64_sys_call+0x2ed2/0x2ee0 [ 32.325288][ T316] do_syscall_64+0x58/0xf0 [ 32.330349][ T316] ? clear_bhb_loop+0x50/0xa0 [ 32.335168][ T316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.341218][ T316] RIP: 0033:0x7f8fda72ac09 [ 32.345738][ T316] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 32.352818][ T316] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.361285][ T316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 32.370841][ T316] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 32.378993][ T316] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 32.387306][ T316] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=34} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 317 ./strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x555566471660, 24) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 executing program [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18) = 18 [pid 317] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 317] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 317] eventfd(127) = 5 [pid 317] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 317] exit_group(0) = ? [ 32.395416][ T316] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 32.403523][ T316] [ 32.406645][ T316] ---[ end trace 0000000000000000 ]--- [ 32.446795][ T317] ------------[ cut here ]------------ [ 32.453818][ T317] WARNING: CPU: 0 PID: 317 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 32.464224][ T317] Modules linked in: [ 32.468575][ T317] CPU: 0 UID: 0 PID: 317 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 32.485579][ T317] Tainted: [W]=WARN [ 32.489895][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.502147][ T317] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 32.509264][ T317] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 32.529470][ T317] RSP: 0018:ffffc9000110faa8 EFLAGS: 00010202 [ 32.536127][ T317] RAX: 1ffffd1ffff80f3a RBX: ffffc9000130a8e8 RCX: ffffffff816d8c29 [ 32.545747][ T317] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc079d0 [ 32.557592][ T317] RBP: ffffc9000110fb10 R08: ffffe8ffffc079d7 R09: 1ffffd1ffff80f3a [ 32.566647][ T317] R10: dffffc0000000000 R11: fffff91ffff80f3b R12: dffffc0000000000 [ 32.577277][ T317] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc079d0 [ 32.586990][ T317] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.597744][ T317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.604384][ T317] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 32.612780][ T317] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.621858][ T317] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.631102][ T317] Call Trace: [ 32.634732][ T317] [ 32.637754][ T317] kvm_put_kvm+0x1100/0x12b0 [ 32.642405][ T317] ? __cfi_kvm_vm_release+0x10/0x10 [ 32.647725][ T317] kvm_vm_release+0x47/0x70 [ 32.652388][ T317] __fput+0x1fb/0xa00 [ 32.656657][ T317] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.662615][ T317] ____fput+0x20/0x30 [ 32.666743][ T317] task_work_run+0x1e3/0x250 [ 32.673507][ T317] ? __cfi_task_work_run+0x10/0x10 [ 32.679459][ T317] ? __kasan_check_write+0x18/0x20 [ 32.684641][ T317] do_exit+0x9b4/0x2630 [ 32.689075][ T317] ? __cfi_do_exit+0x10/0x10 [ 32.693732][ T317] ? __kasan_check_write+0x18/0x20 [ 32.699083][ T317] ? _raw_spin_lock_irq+0x8d/0x120 [ 32.705201][ T317] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.710896][ T317] ? zap_other_threads+0x334/0x370 [ 32.716179][ T317] do_group_exit+0x22a/0x300 [ 32.721274][ T317] __x64_sys_exit_group+0x43/0x50 [ 32.726647][ T317] x64_sys_call+0x2ed2/0x2ee0 [ 32.732071][ T317] do_syscall_64+0x58/0xf0 [ 32.736775][ T317] ? clear_bhb_loop+0x50/0xa0 [ 32.741734][ T317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.747727][ T317] RIP: 0033:0x7f8fda72ac09 [ 32.752268][ T317] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 32.759356][ T317] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.767991][ T317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 32.776307][ T317] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 32.784504][ T317] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 317] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=34} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 318 ./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x555566471660, 24) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] write(1, "executing program\n", 18executing program ) = 18 [pid 318] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 318] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 318] eventfd(127) = 5 [pid 318] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 318] exit_group(0) = ? [ 32.792668][ T317] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 32.800791][ T317] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 32.809009][ T317] [ 32.812061][ T317] ---[ end trace 0000000000000000 ]--- [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 319 attached , child_tidptr=0x555566471650) = 319 [pid 319] set_robust_list(0x555566471660, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] write(1, "executing program\n", 18executing program ) = 18 [pid 319] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 319] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 319] eventfd(127) = 5 [pid 319] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 319] exit_group(0) = ? [pid 319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 320 attached , child_tidptr=0x555566471650) = 320 [pid 320] set_robust_list(0x555566471660, 24) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 executing program [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 320] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 320] eventfd(127) = 5 [pid 320] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 321 ./strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x555566471660, 24) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 executing program [pid 321] write(1, "executing program\n", 18) = 18 [pid 321] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 321] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 321] eventfd(127) = 5 [pid 321] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 322 ./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x555566471660, 24) = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 executing program [pid 322] write(1, "executing program\n", 18) = 18 [pid 322] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 322] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 322] eventfd(127) = 5 [pid 322] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 322] exit_group(0) = ? [pid 322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 323 ./strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x555566471660, 24) = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3executing program ) = 0 [pid 323] write(1, "executing program\n", 18) = 18 [pid 323] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 323] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 323] eventfd(127) = 5 [pid 323] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 323] exit_group(0) = ? [ 33.196729][ T323] ------------[ cut here ]------------ [ 33.202672][ T323] WARNING: CPU: 0 PID: 323 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 33.212719][ T323] Modules linked in: [ 33.216787][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 33.232899][ T323] Tainted: [W]=WARN [ 33.236917][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.247260][ T323] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 33.253199][ T323] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 33.273147][ T323] RSP: 0018:ffffc9000117faa8 EFLAGS: 00010202 [ 33.279425][ T323] RAX: 1ffffd1ffff80f6a RBX: ffffc900013558e8 RCX: ffffffff816d8c29 [ 33.287574][ T323] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07b50 [ 33.295686][ T323] RBP: ffffc9000117fb10 R08: ffffe8ffffc07b57 R09: 1ffffd1ffff80f6a [ 33.303713][ T323] R10: dffffc0000000000 R11: fffff91ffff80f6b R12: dffffc0000000000 [ 33.312489][ T323] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07b50 [ 33.320573][ T323] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.329860][ T323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.336554][ T323] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 33.344560][ T323] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.352740][ T323] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.361505][ T323] Call Trace: [ 33.364822][ T323] [ 33.367895][ T323] kvm_put_kvm+0x1100/0x12b0 [ 33.372644][ T323] ? __cfi_kvm_vm_release+0x10/0x10 [ 33.377962][ T323] kvm_vm_release+0x47/0x70 [ 33.382515][ T323] __fput+0x1fb/0xa00 [ 33.386549][ T323] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.392237][ T323] ____fput+0x20/0x30 [ 33.396272][ T323] task_work_run+0x1e3/0x250 [ 33.400920][ T323] ? __cfi_task_work_run+0x10/0x10 [ 33.406443][ T323] ? __kasan_check_write+0x18/0x20 [ 33.412145][ T323] do_exit+0x9b4/0x2630 [ 33.416474][ T323] ? __cfi_do_exit+0x10/0x10 [ 33.421124][ T323] ? __kasan_check_write+0x18/0x20 [ 33.426623][ T323] ? _raw_spin_lock_irq+0x8d/0x120 [ 33.431793][ T323] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.437674][ T323] ? zap_other_threads+0x334/0x370 [ 33.443451][ T323] do_group_exit+0x22a/0x300 [ 33.448420][ T323] __x64_sys_exit_group+0x43/0x50 [ 33.453582][ T323] x64_sys_call+0x2ed2/0x2ee0 [ 33.458535][ T323] do_syscall_64+0x58/0xf0 [ 33.463216][ T323] ? clear_bhb_loop+0x50/0xa0 [ 33.468092][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.474123][ T323] RIP: 0033:0x7f8fda72ac09 [ 33.478599][ T323] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 33.485640][ T323] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 323] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 324 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x555566471660, 24) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 executing program [pid 324] write(1, "executing program\n", 18) = 18 [pid 324] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 324] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 324] eventfd(127) = 5 [pid 324] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 324] exit_group(0) = ? [ 33.494117][ T323] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 33.502349][ T323] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 33.510859][ T323] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 33.518913][ T323] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 33.527183][ T323] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 33.535410][ T323] [ 33.538526][ T323] ---[ end trace 0000000000000000 ]--- [pid 324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 325 ./strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x555566471660, 24) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4executing program ) = 4 [pid 325] close(3) = 0 [pid 325] write(1, "executing program\n", 18) = 18 [pid 325] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 325] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 325] eventfd(127) = 5 [pid 325] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 326 ./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x555566471660, 24) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] write(1, "executing program\n", 18executing program ) = 18 [pid 326] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 326] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 326] eventfd(127) = 5 [pid 326] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 326] exit_group(0) = ? [ 33.686677][ T326] ------------[ cut here ]------------ [ 33.692980][ T326] WARNING: CPU: 0 PID: 326 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 33.702917][ T326] Modules linked in: [ 33.707173][ T326] CPU: 0 UID: 0 PID: 326 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 33.722607][ T326] Tainted: [W]=WARN [ 33.726746][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.737050][ T326] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 33.742997][ T326] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 33.762858][ T326] RSP: 0018:ffffc9000110faa8 EFLAGS: 00010202 [ 33.769032][ T326] RAX: 1ffffd1ffff80f9a RBX: ffffc900013768e8 RCX: ffffffff816d8c29 [ 33.777197][ T326] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07cd0 [ 33.785194][ T326] RBP: ffffc9000110fb10 R08: ffffe8ffffc07cd7 R09: 1ffffd1ffff80f9a [ 33.793245][ T326] R10: dffffc0000000000 R11: fffff91ffff80f9b R12: dffffc0000000000 [ 33.801370][ T326] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07cd0 [ 33.809390][ T326] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.818732][ T326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.825331][ T326] CR2: 00007ffd326a7178 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 33.834253][ T326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.842521][ T326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.850616][ T326] Call Trace: [ 33.854066][ T326] [ 33.857105][ T326] kvm_put_kvm+0x1100/0x12b0 [ 33.861760][ T326] ? __cfi_kvm_vm_release+0x10/0x10 [ 33.867072][ T326] kvm_vm_release+0x47/0x70 [ 33.871744][ T326] __fput+0x1fb/0xa00 [ 33.876044][ T326] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.881732][ T326] ____fput+0x20/0x30 [ 33.885740][ T326] task_work_run+0x1e3/0x250 [ 33.890409][ T326] ? __cfi_task_work_run+0x10/0x10 [ 33.895563][ T326] ? __kasan_check_write+0x18/0x20 [ 33.902453][ T326] do_exit+0x9b4/0x2630 [ 33.906795][ T326] ? __cfi_do_exit+0x10/0x10 [ 33.911459][ T326] ? __kasan_check_write+0x18/0x20 [ 33.916642][ T326] ? _raw_spin_lock_irq+0x8d/0x120 [ 33.921788][ T326] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.927414][ T326] ? zap_other_threads+0x334/0x370 [ 33.932585][ T326] do_group_exit+0x22a/0x300 [ 33.937311][ T326] __x64_sys_exit_group+0x43/0x50 [ 33.942453][ T326] x64_sys_call+0x2ed2/0x2ee0 [ 33.947219][ T326] do_syscall_64+0x58/0xf0 [ 33.951674][ T326] ? clear_bhb_loop+0x50/0xa0 [ 33.956427][ T326] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.962503][ T326] RIP: 0033:0x7f8fda72ac09 [ 33.966980][ T326] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 33.974463][ T326] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 326] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 327 ./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x555566471660, 24) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] write(1, "executing program\n", 18executing program ) = 18 [pid 327] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 327] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 327] eventfd(127) = 5 [pid 327] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 327] exit_group(0) = ? [ 33.983067][ T326] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 33.991132][ T326] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 33.999532][ T326] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 34.007686][ T326] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 34.015823][ T326] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 34.023888][ T326] [ 34.026969][ T326] ---[ end trace 0000000000000000 ]--- [pid 327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 328 ./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x555566471660, 24) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] write(1, "executing program\n", 18) = 18 executing program [pid 328] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 328] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 328] eventfd(127) = 5 [pid 328] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 328] exit_group(0) = ? [pid 328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 329 attached , child_tidptr=0x555566471650) = 329 [pid 329] set_robust_list(0x555566471660, 24) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] write(1, "executing program\n", 18executing program ) = 18 [pid 329] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 329] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 329] eventfd(127) = 5 [pid 329] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 329] exit_group(0) = ? [pid 329] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 330 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x555566471660, 24) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 executing program [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 330] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 330] eventfd(127) = 5 [pid 330] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 331 ./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x555566471660, 24) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4executing program ) = 4 [pid 331] close(3) = 0 [pid 331] write(1, "executing program\n", 18) = 18 [pid 331] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 331] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 331] eventfd(127) = 5 [pid 331] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 332 ./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x555566471660, 24) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 executing program [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 332] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 332] eventfd(127) = 5 [pid 332] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 333 ./strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x555566471660, 24) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] write(1, "executing program\n", 18executing program ) = 18 [pid 333] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 333] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 333] eventfd(127) = 5 [pid 333] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 333] exit_group(0) = ? [ 34.457002][ T333] ------------[ cut here ]------------ [ 34.462786][ T333] WARNING: CPU: 0 PID: 333 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 34.472673][ T333] Modules linked in: [ 34.476780][ T333] CPU: 0 UID: 0 PID: 333 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 34.492359][ T333] Tainted: [W]=WARN [ 34.496307][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.506458][ T333] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 34.512397][ T333] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 34.532185][ T333] RSP: 0018:ffffc9000117faa8 EFLAGS: 00010202 [ 34.538333][ T333] RAX: 1ffffd1ffff80fca RBX: ffffc900013c38e8 RCX: ffffffff816d8c29 [ 34.546381][ T333] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07e50 [ 34.554478][ T333] RBP: ffffc9000117fb10 R08: ffffe8ffffc07e57 R09: 1ffffd1ffff80fca [ 34.562615][ T333] R10: dffffc0000000000 R11: fffff91ffff80fcb R12: dffffc0000000000 [ 34.570677][ T333] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07e50 [ 34.578722][ T333] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.587877][ T333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.594558][ T333] CR2: 00007f8fda77501d CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 34.602760][ T333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.610785][ T333] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.618800][ T333] Call Trace: [ 34.622109][ T333] [ 34.625044][ T333] kvm_put_kvm+0x1100/0x12b0 [ 34.629687][ T333] ? __cfi_kvm_vm_release+0x10/0x10 [ 34.635021][ T333] kvm_vm_release+0x47/0x70 [ 34.639580][ T333] __fput+0x1fb/0xa00 [ 34.643594][ T333] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.649215][ T333] ____fput+0x20/0x30 [ 34.653819][ T333] task_work_run+0x1e3/0x250 [ 34.658474][ T333] ? __cfi_task_work_run+0x10/0x10 [ 34.664049][ T333] ? __kasan_check_write+0x18/0x20 [ 34.669330][ T333] do_exit+0x9b4/0x2630 [ 34.673534][ T333] ? __cfi_do_exit+0x10/0x10 [ 34.678191][ T333] ? __kasan_check_write+0x18/0x20 [ 34.683366][ T333] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.688725][ T333] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.694318][ T333] ? zap_other_threads+0x334/0x370 [ 34.699639][ T333] do_group_exit+0x22a/0x300 [ 34.704401][ T333] __x64_sys_exit_group+0x43/0x50 [ 34.709656][ T333] x64_sys_call+0x2ed2/0x2ee0 [ 34.714482][ T333] do_syscall_64+0x58/0xf0 [ 34.719095][ T333] ? clear_bhb_loop+0x50/0xa0 [ 34.723829][ T333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.730065][ T333] RIP: 0033:0x7f8fda72ac09 [ 34.734790][ T333] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 34.742267][ T333] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 333] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 334 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x555566471660, 24) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 executing program [pid 334] write(1, "executing program\n", 18) = 18 [pid 334] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 334] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 334] eventfd(127) = 5 [pid 334] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 334] exit_group(0) = ? [ 34.752876][ T333] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 34.761472][ T333] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 34.769992][ T333] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 34.779758][ T333] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 34.788162][ T333] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 34.796415][ T333] [ 34.799502][ T333] ---[ end trace 0000000000000000 ]--- [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 335 ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x555566471660, 24) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] write(1, "executing program\n", 18executing program ) = 18 [pid 335] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 335] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 335] eventfd(127) = 5 [pid 335] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 336 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x555566471660, 24) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3executing program ) = 0 [pid 336] write(1, "executing program\n", 18) = 18 [pid 336] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 336] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 336] eventfd(127) = 5 [pid 336] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 336] exit_group(0) = ? [pid 336] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 337 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x555566471660, 24) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18executing program ) = 18 [pid 337] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 337] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 337] eventfd(127) = 5 [pid 337] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 337] exit_group(0) = ? [ 35.026788][ T337] ------------[ cut here ]------------ [ 35.032486][ T337] WARNING: CPU: 0 PID: 337 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 35.042406][ T337] Modules linked in: [ 35.046489][ T337] CPU: 0 UID: 0 PID: 337 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 35.061881][ T337] Tainted: [W]=WARN [ 35.065720][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.075945][ T337] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 35.081896][ T337] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 35.101831][ T337] RSP: 0018:ffffc9000117faa8 EFLAGS: 00010202 [ 35.108060][ T337] RAX: 1ffffd1ffff80ffa RBX: ffffc900013ef8e8 RCX: ffffffff816d8c29 [ 35.116537][ T337] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07fd0 [ 35.124734][ T337] RBP: ffffc9000117fb10 R08: ffffe8ffffc07fd7 R09: 1ffffd1ffff80ffa [ 35.132813][ T337] R10: dffffc0000000000 R11: fffff91ffff80ffb R12: dffffc0000000000 [ 35.140972][ T337] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07fd0 [ 35.149045][ T337] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.158254][ T337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.164970][ T337] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 35.173170][ T337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.181390][ T337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.189952][ T337] Call Trace: [ 35.193386][ T337] [ 35.196414][ T337] kvm_put_kvm+0x1100/0x12b0 [ 35.201251][ T337] ? __cfi_kvm_vm_release+0x10/0x10 [ 35.206526][ T337] kvm_vm_release+0x47/0x70 [ 35.211072][ T337] __fput+0x1fb/0xa00 [ 35.215062][ T337] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.220706][ T337] ____fput+0x20/0x30 [ 35.224836][ T337] task_work_run+0x1e3/0x250 [ 35.229603][ T337] ? __cfi_task_work_run+0x10/0x10 [ 35.235109][ T337] ? __kasan_check_write+0x18/0x20 [ 35.240921][ T337] do_exit+0x9b4/0x2630 [ 35.245966][ T337] ? __cfi_do_exit+0x10/0x10 [ 35.250778][ T337] ? __kasan_check_write+0x18/0x20 [ 35.256020][ T337] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.261426][ T337] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.267112][ T337] ? zap_other_threads+0x334/0x370 [ 35.272466][ T337] do_group_exit+0x22a/0x300 [ 35.277203][ T337] __x64_sys_exit_group+0x43/0x50 [ 35.282293][ T337] x64_sys_call+0x2ed2/0x2ee0 [ 35.287068][ T337] do_syscall_64+0x58/0xf0 [ 35.291810][ T337] ? clear_bhb_loop+0x50/0xa0 [ 35.296741][ T337] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.302784][ T337] RIP: 0033:0x7f8fda72ac09 [ 35.307298][ T337] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 35.314522][ T337] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 338 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x555566471660, 24) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 executing program [pid 338] write(1, "executing program\n", 18) = 18 [pid 338] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 338] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 338] eventfd(127) = 5 [pid 338] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 338] exit_group(0) = ? [ 35.323076][ T337] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 35.331232][ T337] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 35.339434][ T337] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 35.347527][ T337] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 35.355553][ T337] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 35.363605][ T337] [ 35.366685][ T337] ---[ end trace 0000000000000000 ]--- [ 35.406777][ T338] ------------[ cut here ]------------ [ 35.412287][ T338] WARNING: CPU: 0 PID: 338 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 35.422111][ T338] Modules linked in: [ 35.426583][ T338] CPU: 0 UID: 0 PID: 338 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 35.442058][ T338] Tainted: [W]=WARN [ 35.445895][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.456274][ T338] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 35.462190][ T338] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 35.482082][ T338] RSP: 0018:ffffc9000133faa8 EFLAGS: 00010202 [ 35.488220][ T338] RAX: 1ffffd1ffff8102a RBX: ffffc900013fa8e8 RCX: ffffffff816d8c29 [ 35.496254][ T338] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08150 [ 35.504352][ T338] RBP: ffffc9000133fb10 R08: ffffe8ffffc08157 R09: 1ffffd1ffff8102a [ 35.512401][ T338] R10: dffffc0000000000 R11: fffff91ffff8102b R12: dffffc0000000000 [ 35.520435][ T338] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08150 [ 35.528486][ T338] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.537514][ T338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.544198][ T338] CR2: 00007f8fda7a30d0 CR3: 0000000102318000 CR4: 00000000003526b0 [ 35.552376][ T338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.560736][ T338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.568941][ T338] Call Trace: [ 35.572353][ T338] [ 35.575392][ T338] kvm_put_kvm+0x1100/0x12b0 [ 35.580132][ T338] ? __cfi_kvm_vm_release+0x10/0x10 [ 35.585365][ T338] kvm_vm_release+0x47/0x70 [ 35.589925][ T338] __fput+0x1fb/0xa00 [ 35.593949][ T338] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.599737][ T338] ____fput+0x20/0x30 [ 35.603746][ T338] task_work_run+0x1e3/0x250 [ 35.608402][ T338] ? __cfi_task_work_run+0x10/0x10 [ 35.613684][ T338] ? __kasan_check_write+0x18/0x20 [ 35.619199][ T338] do_exit+0x9b4/0x2630 [ 35.623408][ T338] ? __cfi_do_exit+0x10/0x10 [ 35.628272][ T338] ? __kasan_check_write+0x18/0x20 [ 35.633451][ T338] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.638635][ T338] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.644311][ T338] ? zap_other_threads+0x334/0x370 [ 35.649513][ T338] do_group_exit+0x22a/0x300 [ 35.654178][ T338] __x64_sys_exit_group+0x43/0x50 [ 35.659268][ T338] x64_sys_call+0x2ed2/0x2ee0 [ 35.663982][ T338] do_syscall_64+0x58/0xf0 [ 35.668544][ T338] ? clear_bhb_loop+0x50/0xa0 [ 35.673360][ T338] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.679461][ T338] RIP: 0033:0x7f8fda72ac09 [ 35.684021][ T338] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 35.691092][ T338] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.699601][ T338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 339 attached , child_tidptr=0x555566471650) = 339 [pid 339] set_robust_list(0x555566471660, 24) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 executing program [pid 339] write(1, "executing program\n", 18) = 18 [pid 339] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 339] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 339] eventfd(127) = 5 [pid 339] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 339] exit_group(0) = ? [ 35.707671][ T338] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 35.715684][ T338] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 35.723739][ T338] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 35.731794][ T338] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 35.739849][ T338] [ 35.742904][ T338] ---[ end trace 0000000000000000 ]--- [pid 339] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 340 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x555566471660, 24) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3executing program ) = 0 [pid 340] write(1, "executing program\n", 18) = 18 [pid 340] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 340] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 340] eventfd(127) = 5 [pid 340] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 340] exit_group(0) = ? [ 35.846780][ T340] ------------[ cut here ]------------ [ 35.852313][ T340] WARNING: CPU: 0 PID: 340 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 35.862178][ T340] Modules linked in: [ 35.866268][ T340] CPU: 0 UID: 0 PID: 340 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 35.881734][ T340] Tainted: [W]=WARN [ 35.885564][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.895675][ T340] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 35.901715][ T340] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 35.921495][ T340] RSP: 0018:ffffc9000133faa8 EFLAGS: 00010202 [ 35.927731][ T340] RAX: 1ffffd1ffff8105a RBX: ffffc900014108e8 RCX: ffffffff816d8c29 [ 35.935733][ T340] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc082d0 [ 35.943903][ T340] RBP: ffffc9000133fb10 R08: ffffe8ffffc082d7 R09: 1ffffd1ffff8105a [ 35.952067][ T340] R10: dffffc0000000000 R11: fffff91ffff8105b R12: dffffc0000000000 [ 35.960300][ T340] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc082d0 [ 35.968358][ T340] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.977357][ T340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.983967][ T340] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 35.991992][ T340] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.000120][ T340] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.008202][ T340] Call Trace: [ 36.011507][ T340] [ 36.014452][ T340] kvm_put_kvm+0x1100/0x12b0 [ 36.019472][ T340] ? __cfi_kvm_vm_release+0x10/0x10 [ 36.024753][ T340] kvm_vm_release+0x47/0x70 [ 36.029532][ T340] __fput+0x1fb/0xa00 [ 36.033765][ T340] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.039531][ T340] ____fput+0x20/0x30 [ 36.043642][ T340] task_work_run+0x1e3/0x250 [ 36.048441][ T340] ? __cfi_task_work_run+0x10/0x10 [ 36.053693][ T340] ? __kasan_check_write+0x18/0x20 [ 36.058979][ T340] do_exit+0x9b4/0x2630 [ 36.063172][ T340] ? __cfi_do_exit+0x10/0x10 [ 36.067825][ T340] ? __kasan_check_write+0x18/0x20 [ 36.072968][ T340] ? _raw_spin_lock_irq+0x8d/0x120 [ 36.078152][ T340] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.083734][ T340] ? zap_other_threads+0x334/0x370 [ 36.088990][ T340] do_group_exit+0x22a/0x300 [ 36.093619][ T340] __x64_sys_exit_group+0x43/0x50 [ 36.098871][ T340] x64_sys_call+0x2ed2/0x2ee0 [ 36.103583][ T340] do_syscall_64+0x58/0xf0 [ 36.108054][ T340] ? clear_bhb_loop+0x50/0xa0 [ 36.112775][ T340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.118747][ T340] RIP: 0033:0x7f8fda72ac09 [ 36.123237][ T340] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 36.130303][ T340] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.138823][ T340] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 341 ./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x555566471660, 24) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 executing program [pid 341] write(1, "executing program\n", 18) = 18 [pid 341] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 341] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 341] eventfd(127) = 5 [pid 341] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 341] exit_group(0) = ? [ 36.146894][ T340] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 36.154922][ T340] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 36.163300][ T340] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 36.171366][ T340] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 36.179608][ T340] [ 36.182652][ T340] ---[ end trace 0000000000000000 ]--- [pid 341] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 342 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x555566471660, 24) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] write(1, "executing program\n", 18executing program ) = 18 [pid 342] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 342] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 342] eventfd(127) = 5 [pid 342] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 343 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x555566471660, 24) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3executing program ) = 0 [pid 343] write(1, "executing program\n", 18) = 18 [pid 343] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 343] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 343] eventfd(127) = 5 [pid 343] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 343] exit_group(0) = ? [pid 343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 344 ./strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x555566471660, 24) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3executing program ) = 0 [pid 344] write(1, "executing program\n", 18) = 18 [pid 344] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 344] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 344] eventfd(127) = 5 [pid 344] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 344] exit_group(0) = ? [ 36.406853][ T344] ------------[ cut here ]------------ [ 36.412477][ T344] WARNING: CPU: 0 PID: 344 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 36.423507][ T344] Modules linked in: [ 36.427592][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 36.443899][ T344] Tainted: [W]=WARN [ 36.448656][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.458945][ T344] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 36.464974][ T344] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 36.485106][ T344] RSP: 0018:ffffc9000110faa8 EFLAGS: 00010202 [ 36.491293][ T344] RAX: 1ffffd1ffff8108a RBX: ffffc9000143c8e8 RCX: ffffffff816d8c29 [ 36.500713][ T344] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08450 [ 36.508953][ T344] RBP: ffffc9000110fb10 R08: ffffe8ffffc08457 R09: 1ffffd1ffff8108a [ 36.516988][ T344] R10: dffffc0000000000 R11: fffff91ffff8108b R12: dffffc0000000000 [ 36.525428][ T344] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08450 [ 36.533564][ T344] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.542582][ T344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.549232][ T344] CR2: 0000200000000040 CR3: 0000000102318000 CR4: 00000000003526b0 [ 36.557362][ T344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.565371][ T344] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.573411][ T344] Call Trace: [ 36.576747][ T344] [ 36.579687][ T344] kvm_put_kvm+0x1100/0x12b0 [ 36.584289][ T344] ? __cfi_kvm_vm_release+0x10/0x10 [ 36.589579][ T344] kvm_vm_release+0x47/0x70 [ 36.594393][ T344] __fput+0x1fb/0xa00 [ 36.598438][ T344] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.604015][ T344] ____fput+0x20/0x30 [ 36.608052][ T344] task_work_run+0x1e3/0x250 [ 36.612682][ T344] ? __cfi_task_work_run+0x10/0x10 [ 36.617859][ T344] ? __kasan_check_write+0x18/0x20 [ 36.623008][ T344] do_exit+0x9b4/0x2630 [ 36.627349][ T344] ? __cfi_do_exit+0x10/0x10 [ 36.631975][ T344] ? __kasan_check_write+0x18/0x20 [ 36.637328][ T344] ? _raw_spin_lock_irq+0x8d/0x120 [ 36.642659][ T344] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.648268][ T344] ? zap_other_threads+0x334/0x370 [ 36.653404][ T344] do_group_exit+0x22a/0x300 [ 36.658063][ T344] __x64_sys_exit_group+0x43/0x50 [ 36.663152][ T344] x64_sys_call+0x2ed2/0x2ee0 [ 36.667934][ T344] do_syscall_64+0x58/0xf0 [ 36.672390][ T344] ? clear_bhb_loop+0x50/0xa0 [ 36.677135][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.683074][ T344] RIP: 0033:0x7f8fda72ac09 [ 36.687556][ T344] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 36.694590][ T344] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 344] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 345 attached , child_tidptr=0x555566471650) = 345 [pid 345] set_robust_list(0x555566471660, 24) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 [pid 345] write(1, "executing program\n", 18executing program ) = 18 [pid 345] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 345] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 345] eventfd(127) = 5 [pid 345] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 345] exit_group(0) = ? [ 36.703143][ T344] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 36.711155][ T344] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 36.719184][ T344] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 36.727295][ T344] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 36.735272][ T344] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 36.743395][ T344] [ 36.746448][ T344] ---[ end trace 0000000000000000 ]--- [pid 345] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=345, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 346 ./strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x555566471660, 24) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] write(1, "executing program\n", 18executing program ) = 18 [pid 346] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 346] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 346] eventfd(127) = 5 [pid 346] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 346] exit_group(0) = ? [ 36.826715][ T346] ------------[ cut here ]------------ [ 36.832282][ T346] WARNING: CPU: 0 PID: 346 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 36.842119][ T346] Modules linked in: [ 36.846090][ T346] CPU: 0 UID: 0 PID: 346 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 36.861561][ T346] Tainted: [W]=WARN [ 36.865391][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.875663][ T346] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 36.881648][ T346] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 36.901327][ T346] RSP: 0018:ffffc9000133faa8 EFLAGS: 00010202 [ 36.907901][ T346] RAX: 1ffffd1ffff810ba RBX: ffffc900014528e8 RCX: ffffffff816d8c29 [ 36.915889][ T346] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc085d0 [ 36.923951][ T346] RBP: ffffc9000133fb10 R08: ffffe8ffffc085d7 R09: 1ffffd1ffff810ba [ 36.931975][ T346] R10: dffffc0000000000 R11: fffff91ffff810bb R12: dffffc0000000000 [ 36.940010][ T346] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc085d0 [ 36.948558][ T346] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.957644][ T346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.964297][ T346] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 36.972318][ T346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.980993][ T346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.989232][ T346] Call Trace: [ 36.992544][ T346] [ 36.995483][ T346] kvm_put_kvm+0x1100/0x12b0 [ 37.000217][ T346] ? __cfi_kvm_vm_release+0x10/0x10 [ 37.005453][ T346] kvm_vm_release+0x47/0x70 [ 37.010004][ T346] __fput+0x1fb/0xa00 [ 37.014053][ T346] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.019649][ T346] ____fput+0x20/0x30 [ 37.023655][ T346] task_work_run+0x1e3/0x250 [ 37.028577][ T346] ? __cfi_task_work_run+0x10/0x10 [ 37.033741][ T346] ? __kasan_check_write+0x18/0x20 [ 37.039028][ T346] do_exit+0x9b4/0x2630 [ 37.043226][ T346] ? __cfi_do_exit+0x10/0x10 [ 37.048057][ T346] ? __kasan_check_write+0x18/0x20 [ 37.053215][ T346] ? _raw_spin_lock_irq+0x8d/0x120 [ 37.058393][ T346] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.063972][ T346] ? zap_other_threads+0x334/0x370 [ 37.069146][ T346] do_group_exit+0x22a/0x300 [ 37.074117][ T346] __x64_sys_exit_group+0x43/0x50 [ 37.079201][ T346] x64_sys_call+0x2ed2/0x2ee0 [ 37.083909][ T346] do_syscall_64+0x58/0xf0 [ 37.088391][ T346] ? clear_bhb_loop+0x50/0xa0 [ 37.093134][ T346] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.099109][ T346] RIP: 0033:0x7f8fda72ac09 [ 37.103560][ T346] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 37.110649][ T346] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.119182][ T346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 347 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x555566471660, 24) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 executing program [pid 347] write(1, "executing program\n", 18) = 18 [pid 347] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 347] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 347] eventfd(127) = 5 [pid 347] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 347] exit_group(0) = ? [ 37.127214][ T346] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 37.135212][ T346] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 37.143232][ T346] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 37.151718][ T346] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 37.159746][ T346] [ 37.162796][ T346] ---[ end trace 0000000000000000 ]--- [ 37.206676][ T347] ------------[ cut here ]------------ [ 37.212294][ T347] WARNING: CPU: 0 PID: 347 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 37.222144][ T347] Modules linked in: [ 37.226218][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 37.241632][ T347] Tainted: [W]=WARN [ 37.245650][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.255841][ T347] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 37.261851][ T347] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 37.281690][ T347] RSP: 0018:ffffc9000117faa8 EFLAGS: 00010202 [ 37.287811][ T347] RAX: 1ffffd1ffff810ea RBX: ffffc9000145d8e8 RCX: ffffffff816d8c29 [ 37.295812][ T347] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08750 [ 37.303978][ T347] RBP: ffffc9000117fb10 R08: ffffe8ffffc08757 R09: 1ffffd1ffff810ea [ 37.312045][ T347] R10: dffffc0000000000 R11: fffff91ffff810eb R12: dffffc0000000000 [ 37.320101][ T347] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08750 [ 37.328159][ T347] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.337403][ T347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.344022][ T347] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 37.352045][ T347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.360076][ T347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.368133][ T347] Call Trace: [ 37.371462][ T347] [ 37.374658][ T347] kvm_put_kvm+0x1100/0x12b0 [ 37.379401][ T347] ? __cfi_kvm_vm_release+0x10/0x10 [ 37.384638][ T347] kvm_vm_release+0x47/0x70 [ 37.389193][ T347] __fput+0x1fb/0xa00 [ 37.393206][ T347] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.398934][ T347] ____fput+0x20/0x30 [ 37.402971][ T347] task_work_run+0x1e3/0x250 [ 37.407624][ T347] ? __cfi_task_work_run+0x10/0x10 [ 37.412765][ T347] ? __kasan_check_write+0x18/0x20 [ 37.417941][ T347] do_exit+0x9b4/0x2630 [ 37.422131][ T347] ? __cfi_do_exit+0x10/0x10 [ 37.426772][ T347] ? __kasan_check_write+0x18/0x20 [ 37.431929][ T347] ? _raw_spin_lock_irq+0x8d/0x120 [ 37.437107][ T347] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.442674][ T347] ? zap_other_threads+0x334/0x370 [ 37.447895][ T347] do_group_exit+0x22a/0x300 [ 37.452532][ T347] __x64_sys_exit_group+0x43/0x50 [ 37.457706][ T347] x64_sys_call+0x2ed2/0x2ee0 [ 37.462419][ T347] do_syscall_64+0x58/0xf0 [ 37.466896][ T347] ? clear_bhb_loop+0x50/0xa0 [ 37.471624][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.477580][ T347] RIP: 0033:0x7f8fda72ac09 [ 37.482132][ T347] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 37.489242][ T347] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.497752][ T347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 348 ./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x555566471660, 24) = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 348] write(1, "executing program\n", 18executing program ) = 18 [pid 348] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 348] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 348] eventfd(127) = 5 [pid 348] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 348] exit_group(0) = ? [ 37.505749][ T347] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 37.513859][ T347] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 37.521899][ T347] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 37.529956][ T347] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 37.538031][ T347] [ 37.541081][ T347] ---[ end trace 0000000000000000 ]--- [pid 348] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 349 ./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x555566471660, 24) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 executing program [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 349] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 349] eventfd(127) = 5 [pid 349] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 349] exit_group(0) = ? [pid 349] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=349, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 350 ./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x555566471660, 24) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 executing program [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 350] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 350] eventfd(127) = 5 [pid 350] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 350] exit_group(0) = ? [pid 350] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 351 ./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x555566471660, 24) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 executing program [pid 351] write(1, "executing program\n", 18) = 18 [pid 351] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 351] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 351] eventfd(127) = 5 [pid 351] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 351] exit_group(0) = ? [pid 351] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 352 ./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x555566471660, 24) = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 executing program [pid 352] write(1, "executing program\n", 18) = 18 [pid 352] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 352] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 352] eventfd(127) = 5 [pid 352] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 352] exit_group(0) = ? [ 37.846802][ T352] ------------[ cut here ]------------ [ 37.852413][ T352] WARNING: CPU: 0 PID: 352 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 37.862211][ T352] Modules linked in: [ 37.866250][ T352] CPU: 0 UID: 0 PID: 352 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 37.881708][ T352] Tainted: [W]=WARN [ 37.885531][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.895627][ T352] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 37.901605][ T352] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 37.921288][ T352] RSP: 0018:ffffc9000110faa8 EFLAGS: 00010202 [ 37.927423][ T352] RAX: 1ffffd1ffff8111a RBX: ffffc900014948e8 RCX: ffffffff816d8c29 [ 37.935423][ T352] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc088d0 [ 37.943446][ T352] RBP: ffffc9000110fb10 R08: ffffe8ffffc088d7 R09: 1ffffd1ffff8111a [ 37.951468][ T352] R10: dffffc0000000000 R11: fffff91ffff8111b R12: dffffc0000000000 [ 37.959499][ T352] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc088d0 [ 37.967586][ T352] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.976568][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.983182][ T352] CR2: 00007f8fda7a6110 CR3: 0000000102318000 CR4: 00000000003526b0 [ 37.991203][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.999228][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.007245][ T352] Call Trace: [ 38.010542][ T352] [ 38.013570][ T352] kvm_put_kvm+0x1100/0x12b0 [ 38.018296][ T352] ? __cfi_kvm_vm_release+0x10/0x10 [ 38.023620][ T352] kvm_vm_release+0x47/0x70 [ 38.028172][ T352] __fput+0x1fb/0xa00 [ 38.032219][ T352] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.037895][ T352] ____fput+0x20/0x30 [ 38.041904][ T352] task_work_run+0x1e3/0x250 [ 38.046534][ T352] ? __cfi_task_work_run+0x10/0x10 [ 38.051667][ T352] ? __kasan_check_write+0x18/0x20 [ 38.056832][ T352] do_exit+0x9b4/0x2630 [ 38.061030][ T352] ? __cfi_do_exit+0x10/0x10 [ 38.065651][ T352] ? __kasan_check_write+0x18/0x20 [ 38.070833][ T352] ? _raw_spin_lock_irq+0x8d/0x120 [ 38.076024][ T352] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.081589][ T352] ? zap_other_threads+0x334/0x370 [ 38.086759][ T352] do_group_exit+0x22a/0x300 [ 38.091376][ T352] __x64_sys_exit_group+0x43/0x50 [ 38.096621][ T352] x64_sys_call+0x2ed2/0x2ee0 [ 38.101330][ T352] do_syscall_64+0x58/0xf0 [ 38.105759][ T352] ? clear_bhb_loop+0x50/0xa0 [ 38.110474][ T352] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.116438][ T352] RIP: 0033:0x7f8fda72ac09 [ 38.120886][ T352] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 38.127990][ T352] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 38.136498][ T352] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 353 ./strace-static-x86_64: Process 353 attached [pid 353] set_robust_list(0x555566471660, 24) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 353] setpgid(0, 0) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 353] close(3) = 0 executing program [pid 353] write(1, "executing program\n", 18) = 18 [pid 353] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 353] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 353] eventfd(127) = 5 [pid 353] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 353] exit_group(0) = ? [ 38.144498][ T352] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 38.152523][ T352] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 38.160642][ T352] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 38.168672][ T352] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 38.176740][ T352] [ 38.179781][ T352] ---[ end trace 0000000000000000 ]--- [ 38.216561][ T353] ------------[ cut here ]------------ [ 38.222165][ T353] WARNING: CPU: 0 PID: 353 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 38.232043][ T353] Modules linked in: [ 38.236096][ T353] CPU: 0 UID: 0 PID: 353 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 38.251465][ T353] Tainted: [W]=WARN [ 38.255301][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.265502][ T353] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 38.271489][ T353] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 38.291178][ T353] RSP: 0018:ffffc9000133faa8 EFLAGS: 00010202 [ 38.297331][ T353] RAX: 1ffffd1ffff8114a RBX: ffffc9000149f8e8 RCX: ffffffff816d8c29 [ 38.305399][ T353] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08a50 [ 38.313415][ T353] RBP: ffffc9000133fb10 R08: ffffe8ffffc08a57 R09: 1ffffd1ffff8114a [ 38.321444][ T353] R10: dffffc0000000000 R11: fffff91ffff8114b R12: dffffc0000000000 [ 38.329553][ T353] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08a50 [ 38.337763][ T353] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.346765][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.353489][ T353] CR2: 00007f8fda77501d CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 38.361704][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.369741][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.377838][ T353] Call Trace: [ 38.381141][ T353] [ 38.384076][ T353] kvm_put_kvm+0x1100/0x12b0 [ 38.388721][ T353] ? __cfi_kvm_vm_release+0x10/0x10 [ 38.393974][ T353] kvm_vm_release+0x47/0x70 [ 38.398667][ T353] __fput+0x1fb/0xa00 [ 38.402686][ T353] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.408337][ T353] ____fput+0x20/0x30 [ 38.412368][ T353] task_work_run+0x1e3/0x250 [ 38.417038][ T353] ? __cfi_task_work_run+0x10/0x10 [ 38.422354][ T353] ? __kasan_check_write+0x18/0x20 [ 38.427736][ T353] do_exit+0x9b4/0x2630 [ 38.431950][ T353] ? __cfi_do_exit+0x10/0x10 [ 38.436683][ T353] ? __kasan_check_write+0x18/0x20 [ 38.442097][ T353] ? _raw_spin_lock_irq+0x8d/0x120 [ 38.447296][ T353] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.453030][ T353] ? zap_other_threads+0x334/0x370 [ 38.458269][ T353] do_group_exit+0x22a/0x300 [ 38.462934][ T353] __x64_sys_exit_group+0x43/0x50 [ 38.468200][ T353] x64_sys_call+0x2ed2/0x2ee0 [ 38.472958][ T353] do_syscall_64+0x58/0xf0 [ 38.477559][ T353] ? clear_bhb_loop+0x50/0xa0 [ 38.482275][ T353] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.488325][ T353] RIP: 0033:0x7f8fda72ac09 [ 38.492860][ T353] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 38.499938][ T353] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 38.508435][ T353] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [pid 353] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=353, si_uid=0, si_status=0, si_utime=0, si_stime=32} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 354 ./strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x555566471660, 24) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 executing program [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 354] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 354] eventfd(127) = 5 [pid 354] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 354] exit_group(0) = ? [ 38.516572][ T353] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 38.524676][ T353] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 38.532711][ T353] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 38.541978][ T353] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 38.550035][ T353] [ 38.553178][ T353] ---[ end trace 0000000000000000 ]--- [pid 354] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=354, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555566471650) = 355 ./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x555566471660, 24) = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] write(1, "executing program\n", 18executing program ) = 18 [pid 355] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 355] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 355] eventfd(127) = 5 [pid 355] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 355] exit_group(0) = ? [ 38.656777][ T355] ------------[ cut here ]------------ [ 38.662520][ T355] WARNING: CPU: 0 PID: 355 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 38.672543][ T355] Modules linked in: [ 38.676613][ T355] CPU: 0 UID: 0 PID: 355 Comm: syz-executor332 Tainted: G W 6.12.30-syzkaller-ga76eb2b67bde #0 8824182ce8c593946fea7a5d8bf7bacf32ac00e2 [ 38.692701][ T355] Tainted: [W]=WARN [ 38.696552][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.706840][ T355] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 38.712774][ T355] Code: 00 48 8b 5d a0 74 08 48 89 df e8 a2 18 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 98 7f 1a 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 38.732657][ T355] RSP: 0018:ffffc9000117faa8 EFLAGS: 00010202 [ 38.738880][ T355] RAX: 1ffffd1ffff8117a RBX: ffffc900014b58e8 RCX: ffffffff816d8c29 [ 38.746922][ T355] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08bd0 [ 38.754937][ T355] RBP: ffffc9000117fb10 R08: ffffe8ffffc08bd7 R09: 1ffffd1ffff8117a [ 38.762990][ T355] R10: dffffc0000000000 R11: fffff91ffff8117b R12: dffffc0000000000 [ 38.771064][ T355] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08bd0 [ 38.779096][ T355] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 38.788509][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.795201][ T355] CR2: 00007f8fda7a6110 CR3: 0000000101fb4000 CR4: 00000000003526b0 [ 38.804530][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.814079][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.822405][ T355] Call Trace: [ 38.825804][ T355] [ 38.828872][ T355] kvm_put_kvm+0x1100/0x12b0 [ 38.833732][ T355] ? __cfi_kvm_vm_release+0x10/0x10 [ 38.839001][ T355] kvm_vm_release+0x47/0x70 [ 38.843544][ T355] __fput+0x1fb/0xa00 [ 38.847635][ T355] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.853318][ T355] ____fput+0x20/0x30 [ 38.857426][ T355] task_work_run+0x1e3/0x250 [ 38.862159][ T355] ? __cfi_task_work_run+0x10/0x10 [ 38.867366][ T355] ? __kasan_check_write+0x18/0x20 [ 38.872604][ T355] do_exit+0x9b4/0x2630 [ 38.876827][ T355] ? __cfi_do_exit+0x10/0x10 [ 38.881442][ T355] ? __kasan_check_write+0x18/0x20 [ 38.886611][ T355] ? _raw_spin_lock_irq+0x8d/0x120 [ 38.891880][ T355] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 38.897595][ T355] ? zap_other_threads+0x334/0x370 [ 38.902747][ T355] do_group_exit+0x22a/0x300 [ 38.907402][ T355] __x64_sys_exit_group+0x43/0x50 [ 38.912477][ T355] x64_sys_call+0x2ed2/0x2ee0 [ 38.917410][ T355] do_syscall_64+0x58/0xf0 [ 38.921864][ T355] ? clear_bhb_loop+0x50/0xa0 [ 38.926655][ T355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.932617][ T355] RIP: 0033:0x7f8fda72ac09 [ 38.937127][ T355] Code: Unable to access opcode bytes at 0x7f8fda72abdf. [ 38.944265][ T355] RSP: 002b:00007ffd326a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [pid 355] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=355, si_uid=0, si_status=0, si_utime=0, si_stime=33} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 356 attached , child_tidptr=0x555566471650) = 356 [pid 356] set_robust_list(0x555566471660, 24) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] write(1, "executing program\n", 18executing program ) = 18 [pid 356] openat(AT_FDCWD, "/dev/kvm", O_RDONLY|O_CREAT|O_NOFOLLOW, 000) = 3 [pid 356] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 356] eventfd(127) = 5 [pid 356] ioctl(4, KVM_IOEVENTFD, 0x200000000000) = 0 [pid 356] exit_group(0) = ? [ 38.952782][ T355] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fda72ac09 [ 38.960883][ T355] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 38.968922][ T355] RBP: 00007f8fda7a52b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 38.976978][ T355] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8fda7a52b0 [ 38.985028][ T355] R13: 0000000000000000 R14: 00007f8fda7a5d00 R15: 00007f8fda6fbe70 [ 38.993278][ T355] [ 38.996349][ T355] ---[ end trace 0000000000000000 ]--- [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 357 attached , child_tidptr=0x555566471650) = 357