./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor623528662 <...> Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. execve("./syz-executor623528662", ["./syz-executor623528662"], 0x7ffcc4fd6af0 /* 10 vars */) = 0 brk(NULL) = 0x55556e39b000 brk(0x55556e39bd00) = 0x55556e39bd00 arch_prctl(ARCH_SET_FS, 0x55556e39b380) = 0 set_tid_address(0x55556e39b650) = 296 set_robust_list(0x55556e39b660, 24) = 0 rseq(0x55556e39bca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor623528662", 4096) = 27 getrandom("\x5d\x6a\x07\x85\xf2\x0a\x6d\x28", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556e39bd00 brk(0x55556e3bcd00) = 0x55556e3bcd00 brk(0x55556e3bd000) = 0x55556e3bd000 mprotect(0x7fe515c8f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 297 ./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x55556e39b660, 24) = 0 [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 297] setpgid(0, 0) = 0 [pid 297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "1000", 4) = 4 [pid 297] close(3) = 0 [pid 297] write(1, "executing program\n", 18executing program ) = 18 [pid 297] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [ 28.007185][ T36] audit: type=1400 audit(1753589674.060:64): avc: denied { execmem } for pid=296 comm="syz-executor623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.029831][ T36] audit: type=1400 audit(1753589674.080:65): avc: denied { read write } for pid=297 comm="syz-executor623" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.030734][ T297] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.053679][ T36] audit: type=1400 audit(1753589674.080:66): avc: denied { open } for pid=297 comm="syz-executor623" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [pid 297] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 297] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 297] exit_group(0) = ? [ 28.093450][ T36] audit: type=1400 audit(1753589674.080:67): avc: denied { ioctl } for pid=297 comm="syz-executor623" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [pid 297] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 299 attached , child_tidptr=0x55556e39b650) = 299 [pid 299] set_robust_list(0x55556e39b660, 24) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] write(1, "executing program\n", 18executing program ) = 18 [pid 299] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 299] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 299] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 299] exit_group(0) = ? [ 28.197068][ T299] ------------[ cut here ]------------ [ 28.202571][ T299] WARNING: CPU: 1 PID: 299 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 28.212429][ T299] Modules linked in: [ 28.216428][ T299] CPU: 1 UID: 0 PID: 299 Comm: syz-executor623 Not tainted 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 28.230297][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.240415][ T299] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 28.246328][ T299] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 28.267422][ T299] RSP: 0018:ffffc9000123faa8 EFLAGS: 00010202 [ 28.273511][ T299] RAX: 1ffffd1ffff80df2 RBX: ffffc9000124a8e8 RCX: ffffffff816dadc9 [ 28.281529][ T299] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc06f90 [ 28.289560][ T299] RBP: ffffc9000123fb10 R08: ffffe8ffffc06f97 R09: 1ffffd1ffff80df2 [ 28.297617][ T299] R10: dffffc0000000000 R11: fffff91ffff80df3 R12: dffffc0000000000 [ 28.305628][ T299] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc06f90 [ 28.313812][ T299] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.322880][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.329567][ T299] CR2: 0000565390733e70 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 28.337616][ T299] Call Trace: [ 28.340948][ T299] [ 28.343883][ T299] kvm_put_kvm+0x1100/0x12b0 [ 28.348522][ T299] ? __cfi_kvm_vm_release+0x10/0x10 [ 28.353753][ T299] kvm_vm_release+0x47/0x70 [ 28.358307][ T299] __fput+0x1fe/0xa00 [ 28.362318][ T299] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.367906][ T299] ____fput+0x20/0x30 [ 28.371915][ T299] task_work_run+0x1e0/0x250 [ 28.376556][ T299] ? __cfi_task_work_run+0x10/0x10 [ 28.381696][ T299] ? __kasan_check_write+0x18/0x20 [ 28.386906][ T299] do_exit+0x9bc/0x2630 [ 28.391104][ T299] ? __cfi_do_exit+0x10/0x10 [ 28.395705][ T299] ? __kasan_check_write+0x18/0x20 [ 28.400874][ T299] ? _raw_spin_lock_irq+0x8d/0x120 [ 28.406022][ T299] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.411613][ T299] ? zap_other_threads+0x334/0x370 [ 28.416800][ T299] do_group_exit+0x22a/0x300 [ 28.421419][ T299] __x64_sys_exit_group+0x43/0x50 [ 28.426495][ T299] x64_sys_call+0x2ed2/0x2ee0 [ 28.431215][ T299] do_syscall_64+0x58/0xf0 [ 28.435650][ T299] ? clear_bhb_loop+0x50/0xa0 [ 28.440382][ T299] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.446311][ T299] RIP: 0033:0x7fe515c1ab89 [ 28.450812][ T299] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 28.457883][ T299] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.466331][ T299] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 28.474364][ T299] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 28.482370][ T299] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 28.490403][ T299] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [pid 299] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 300 attached , child_tidptr=0x55556e39b650) = 300 [pid 300] set_robust_list(0x55556e39b660, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 executing program [pid 300] write(1, "executing program\n", 18) = 18 [pid 300] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 300] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 300] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 300] exit_group(0) = ? [ 28.498440][ T299] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 28.506517][ T299] [ 28.509561][ T299] ---[ end trace 0000000000000000 ]--- [ 28.557111][ T300] ------------[ cut here ]------------ [ 28.562625][ T300] WARNING: CPU: 1 PID: 300 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 28.572433][ T300] Modules linked in: [ 28.576399][ T300] CPU: 1 UID: 0 PID: 300 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 28.591764][ T300] Tainted: [W]=WARN [ 28.595617][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.605717][ T300] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 28.611675][ T300] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 28.631343][ T300] RSP: 0018:ffffc9000123faa8 EFLAGS: 00010202 [ 28.637470][ T300] RAX: 1ffffd1ffff80e22 RBX: ffffc900012558e8 RCX: ffffffff816dadc9 [ 28.645467][ T300] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07110 [ 28.653509][ T300] RBP: ffffc9000123fb10 R08: ffffe8ffffc07117 R09: 1ffffd1ffff80e22 [ 28.661627][ T300] R10: dffffc0000000000 R11: fffff91ffff80e23 R12: dffffc0000000000 [ 28.669676][ T300] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07110 [ 28.677718][ T300] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.686750][ T300] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.693358][ T300] CR2: 0000565390733e70 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 28.701415][ T300] Call Trace: [ 28.704714][ T300] [ 28.707685][ T300] kvm_put_kvm+0x1100/0x12b0 [ 28.712310][ T300] ? __cfi_kvm_vm_release+0x10/0x10 [ 28.717570][ T300] kvm_vm_release+0x47/0x70 [ 28.722106][ T300] __fput+0x1fe/0xa00 [ 28.726098][ T300] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.731687][ T300] ____fput+0x20/0x30 [ 28.735695][ T300] task_work_run+0x1e0/0x250 [ 28.740323][ T300] ? __cfi_task_work_run+0x10/0x10 [ 28.745463][ T300] ? __kasan_check_write+0x18/0x20 [ 28.750621][ T300] do_exit+0x9bc/0x2630 [ 28.754806][ T300] ? __cfi_do_exit+0x10/0x10 [ 28.759446][ T300] ? __kasan_check_write+0x18/0x20 [ 28.764586][ T300] ? _raw_spin_lock_irq+0x8d/0x120 [ 28.769748][ T300] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.775320][ T300] ? zap_other_threads+0x334/0x370 [ 28.780485][ T300] do_group_exit+0x22a/0x300 [ 28.785101][ T300] __x64_sys_exit_group+0x43/0x50 [ 28.790173][ T300] x64_sys_call+0x2ed2/0x2ee0 [ 28.794881][ T300] do_syscall_64+0x58/0xf0 [ 28.799347][ T300] ? clear_bhb_loop+0x50/0xa0 [ 28.804057][ T300] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.810002][ T300] RIP: 0033:0x7fe515c1ab89 [ 28.814523][ T300] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 28.821591][ T300] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.830063][ T300] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 28.838079][ T300] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 28.846073][ T300] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 300] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 301 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x55556e39b660, 24) = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3) = 0 [pid 301] write(1, "executing program\n", 18executing program ) = 18 [pid 301] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 301] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 301] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 301] exit_group(0) = ? [ 28.854085][ T300] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 28.862103][ T300] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 28.870121][ T300] [ 28.873169][ T300] ---[ end trace 0000000000000000 ]--- [ 28.917055][ T301] ------------[ cut here ]------------ [ 28.922574][ T301] WARNING: CPU: 1 PID: 301 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 28.932456][ T301] Modules linked in: [ 28.936438][ T301] CPU: 1 UID: 0 PID: 301 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 28.951790][ T301] Tainted: [W]=WARN [ 28.955699][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 28.965799][ T301] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 28.971763][ T301] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 28.991414][ T301] RSP: 0018:ffffc9000125faa8 EFLAGS: 00010202 [ 28.997531][ T301] RAX: 1ffffd1ffff80e52 RBX: ffffc9000126a8e8 RCX: ffffffff816dadc9 [ 29.005528][ T301] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07290 [ 29.013540][ T301] RBP: ffffc9000125fb10 R08: ffffe8ffffc07297 R09: 1ffffd1ffff80e52 [ 29.021561][ T301] R10: dffffc0000000000 R11: fffff91ffff80e53 R12: dffffc0000000000 [ 29.029583][ T301] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07290 [ 29.037596][ T301] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.046567][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.053173][ T301] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 29.061186][ T301] Call Trace: [ 29.064495][ T301] [ 29.067465][ T301] kvm_put_kvm+0x1100/0x12b0 [ 29.072092][ T301] ? __cfi_kvm_vm_release+0x10/0x10 [ 29.077342][ T301] kvm_vm_release+0x47/0x70 [ 29.081879][ T301] __fput+0x1fe/0xa00 [ 29.085865][ T301] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.091463][ T301] ____fput+0x20/0x30 [ 29.095478][ T301] task_work_run+0x1e0/0x250 [ 29.100105][ T301] ? __cfi_task_work_run+0x10/0x10 [ 29.105247][ T301] ? __kasan_check_write+0x18/0x20 [ 29.110413][ T301] do_exit+0x9bc/0x2630 [ 29.114595][ T301] ? __cfi_do_exit+0x10/0x10 [ 29.119244][ T301] ? __kasan_check_write+0x18/0x20 [ 29.124391][ T301] ? _raw_spin_lock_irq+0x8d/0x120 [ 29.129545][ T301] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.135122][ T301] ? zap_other_threads+0x334/0x370 [ 29.140270][ T301] do_group_exit+0x22a/0x300 [ 29.144889][ T301] __x64_sys_exit_group+0x43/0x50 [ 29.149962][ T301] x64_sys_call+0x2ed2/0x2ee0 [ 29.154680][ T301] do_syscall_64+0x58/0xf0 [ 29.159148][ T301] ? clear_bhb_loop+0x50/0xa0 [ 29.163859][ T301] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.169812][ T301] RIP: 0033:0x7fe515c1ab89 [ 29.174258][ T301] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 29.181308][ T301] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.189783][ T301] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 29.197818][ T301] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 29.205814][ T301] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 301] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 302 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x55556e39b660, 24) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 302] write(1, "executing program\n", 18executing program ) = 18 [pid 302] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 302] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 302] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 302] exit_group(0) = ? [ 29.213829][ T301] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 29.221862][ T301] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 29.229893][ T301] [ 29.232933][ T301] ---[ end trace 0000000000000000 ]--- [ 29.276991][ T302] ------------[ cut here ]------------ [ 29.282519][ T302] WARNING: CPU: 1 PID: 302 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 29.292327][ T302] Modules linked in: [ 29.296256][ T302] CPU: 1 UID: 0 PID: 302 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 29.311586][ T302] Tainted: [W]=WARN [ 29.315413][ T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.325803][ T302] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 29.331782][ T302] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 29.351486][ T302] RSP: 0018:ffffc90001277aa8 EFLAGS: 00010202 [ 29.357602][ T302] RAX: 1ffffd1ffff80e82 RBX: ffffc900012828e8 RCX: ffffffff816dadc9 [ 29.365578][ T302] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07410 [ 29.373591][ T302] RBP: ffffc90001277b10 R08: ffffe8ffffc07417 R09: 1ffffd1ffff80e82 [ 29.381615][ T302] R10: dffffc0000000000 R11: fffff91ffff80e83 R12: dffffc0000000000 [ 29.389645][ T302] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07410 [ 29.397666][ T302] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.406644][ T302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.413262][ T302] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 29.421290][ T302] Call Trace: [ 29.424593][ T302] [ 29.427560][ T302] kvm_put_kvm+0x1100/0x12b0 [ 29.432182][ T302] ? __cfi_kvm_vm_release+0x10/0x10 [ 29.437431][ T302] kvm_vm_release+0x47/0x70 [ 29.441960][ T302] __fput+0x1fe/0xa00 [ 29.445954][ T302] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.451610][ T302] ____fput+0x20/0x30 [ 29.455638][ T302] task_work_run+0x1e0/0x250 [ 29.460285][ T302] ? __cfi_task_work_run+0x10/0x10 [ 29.465427][ T302] ? __kasan_check_write+0x18/0x20 [ 29.470596][ T302] do_exit+0x9bc/0x2630 [ 29.474783][ T302] ? __cfi_do_exit+0x10/0x10 [ 29.479425][ T302] ? __kasan_check_write+0x18/0x20 [ 29.484623][ T302] ? _raw_spin_lock_irq+0x8d/0x120 [ 29.489778][ T302] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.495361][ T302] ? zap_other_threads+0x334/0x370 [ 29.500526][ T302] do_group_exit+0x22a/0x300 [ 29.505143][ T302] __x64_sys_exit_group+0x43/0x50 [ 29.510205][ T302] x64_sys_call+0x2ed2/0x2ee0 [ 29.514911][ T302] do_syscall_64+0x58/0xf0 [ 29.519379][ T302] ? clear_bhb_loop+0x50/0xa0 [ 29.524097][ T302] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.530086][ T302] RIP: 0033:0x7fe515c1ab89 [ 29.534522][ T302] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 29.541573][ T302] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.550047][ T302] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 29.558069][ T302] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 29.566066][ T302] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 302] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 303 attached , child_tidptr=0x55556e39b650) = 303 [pid 303] set_robust_list(0x55556e39b660, 24) = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] write(1, "executing program\n", 18executing program ) = 18 [pid 303] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 303] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 303] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 303] exit_group(0) = ? [ 29.574081][ T302] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 29.582103][ T302] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 29.590151][ T302] [ 29.593205][ T302] ---[ end trace 0000000000000000 ]--- [pid 303] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 304 attached , child_tidptr=0x55556e39b650) = 304 [pid 304] set_robust_list(0x55556e39b660, 24) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 executing program [pid 304] write(1, "executing program\n", 18) = 18 [pid 304] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 304] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 304] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 304] exit_group(0) = ? [ 29.687068][ T304] ------------[ cut here ]------------ [ 29.692654][ T304] WARNING: CPU: 1 PID: 304 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 29.702471][ T304] Modules linked in: [ 29.706498][ T304] CPU: 1 UID: 0 PID: 304 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 29.721984][ T304] Tainted: [W]=WARN [ 29.725838][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 29.736061][ T304] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 29.742033][ T304] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 29.761707][ T304] RSP: 0018:ffffc900012a7aa8 EFLAGS: 00010202 [ 29.767829][ T304] RAX: 1ffffd1ffff80eb2 RBX: ffffc900012b28e8 RCX: ffffffff816dadc9 [ 29.775899][ T304] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07590 [ 29.783906][ T304] RBP: ffffc900012a7b10 R08: ffffe8ffffc07597 R09: 1ffffd1ffff80eb2 [ 29.791939][ T304] R10: dffffc0000000000 R11: fffff91ffff80eb3 R12: dffffc0000000000 [ 29.799964][ T304] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07590 [ 29.808006][ T304] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.817014][ T304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.823669][ T304] CR2: 00007fe515c1ab03 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 29.831701][ T304] Call Trace: [ 29.835006][ T304] [ 29.837984][ T304] kvm_put_kvm+0x1100/0x12b0 [ 29.842610][ T304] ? __cfi_kvm_vm_release+0x10/0x10 [ 29.847874][ T304] kvm_vm_release+0x47/0x70 [ 29.852415][ T304] __fput+0x1fe/0xa00 [ 29.856443][ T304] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.862021][ T304] ____fput+0x20/0x30 [ 29.866015][ T304] task_work_run+0x1e0/0x250 [ 29.870652][ T304] ? __cfi_task_work_run+0x10/0x10 [ 29.875892][ T304] ? __kasan_check_write+0x18/0x20 [ 29.881064][ T304] do_exit+0x9bc/0x2630 [ 29.885258][ T304] ? __cfi_do_exit+0x10/0x10 [ 29.889897][ T304] ? __kasan_check_write+0x18/0x20 [ 29.895047][ T304] ? _raw_spin_lock_irq+0x8d/0x120 [ 29.900208][ T304] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.905785][ T304] ? zap_other_threads+0x334/0x370 [ 29.910963][ T304] do_group_exit+0x22a/0x300 [ 29.915587][ T304] __x64_sys_exit_group+0x43/0x50 [ 29.920855][ T304] x64_sys_call+0x2ed2/0x2ee0 [ 29.925575][ T304] do_syscall_64+0x58/0xf0 [ 29.930068][ T304] ? clear_bhb_loop+0x50/0xa0 [ 29.934793][ T304] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.940748][ T304] RIP: 0033:0x7fe515c1ab89 [ 29.945201][ T304] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 29.952288][ T304] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 29.960769][ T304] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 29.968855][ T304] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 29.976883][ T304] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 304] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=304, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 305 ./strace-static-x86_64: Process 305 attached [pid 305] set_robust_list(0x55556e39b660, 24) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 executing program [pid 305] write(1, "executing program\n", 18) = 18 [pid 305] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 305] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 305] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 305] exit_group(0) = ? [ 29.984862][ T304] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 29.992875][ T304] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 30.000891][ T304] [ 30.003915][ T304] ---[ end trace 0000000000000000 ]--- [ 30.037096][ T305] ------------[ cut here ]------------ [ 30.042587][ T305] WARNING: CPU: 1 PID: 305 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 30.052400][ T305] Modules linked in: [ 30.056324][ T305] CPU: 1 UID: 0 PID: 305 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 30.071712][ T305] Tainted: [W]=WARN [ 30.075530][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.085619][ T305] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 30.091579][ T305] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 30.111253][ T305] RSP: 0018:ffffc900012bfaa8 EFLAGS: 00010202 [ 30.117380][ T305] RAX: 1ffffd1ffff80ee2 RBX: ffffc900012ca8e8 RCX: ffffffff816dadc9 [ 30.125379][ T305] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07710 [ 30.133423][ T305] RBP: ffffc900012bfb10 R08: ffffe8ffffc07717 R09: 1ffffd1ffff80ee2 [ 30.141451][ T305] R10: dffffc0000000000 R11: fffff91ffff80ee3 R12: dffffc0000000000 [ 30.149483][ T305] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07710 [ 30.157554][ T305] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.166543][ T305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.173152][ T305] CR2: 000055556e39b650 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 30.181167][ T305] Call Trace: [ 30.184469][ T305] [ 30.187442][ T305] kvm_put_kvm+0x1100/0x12b0 [ 30.192070][ T305] ? __cfi_kvm_vm_release+0x10/0x10 [ 30.197324][ T305] kvm_vm_release+0x47/0x70 [ 30.201855][ T305] __fput+0x1fe/0xa00 [ 30.205846][ T305] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.211439][ T305] ____fput+0x20/0x30 [ 30.215491][ T305] task_work_run+0x1e0/0x250 [ 30.220121][ T305] ? __cfi_task_work_run+0x10/0x10 [ 30.225257][ T305] ? __kasan_check_write+0x18/0x20 [ 30.230415][ T305] do_exit+0x9bc/0x2630 [ 30.234596][ T305] ? __cfi_do_exit+0x10/0x10 [ 30.239256][ T305] ? __kasan_check_write+0x18/0x20 [ 30.244485][ T305] ? _raw_spin_lock_irq+0x8d/0x120 [ 30.249646][ T305] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.255222][ T305] ? zap_other_threads+0x334/0x370 [ 30.260371][ T305] do_group_exit+0x22a/0x300 [ 30.264985][ T305] __x64_sys_exit_group+0x43/0x50 [ 30.270055][ T305] x64_sys_call+0x2ed2/0x2ee0 [ 30.274763][ T305] do_syscall_64+0x58/0xf0 [ 30.279222][ T305] ? clear_bhb_loop+0x50/0xa0 [ 30.283930][ T305] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.289896][ T305] RIP: 0033:0x7fe515c1ab89 [ 30.294336][ T305] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 30.301386][ T305] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.309858][ T305] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 30.317878][ T305] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 30.325875][ T305] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 305] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x55556e39b660, 24) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 296] <... clone resumed>, child_tidptr=0x55556e39b650) = 306 [pid 306] <... prctl resumed>) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] write(1, "executing program\n", 18executing program ) = 18 [pid 306] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 306] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 306] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 306] exit_group(0) = ? [ 30.333880][ T305] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 30.341909][ T305] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 30.349976][ T305] [ 30.353015][ T305] ---[ end trace 0000000000000000 ]--- [pid 306] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x55556e39b660, 24) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 296] <... clone resumed>, child_tidptr=0x55556e39b650) = 307 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 executing program [pid 307] write(1, "executing program\n", 18) = 18 [pid 307] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 307] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 307] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 307] exit_group(0) = ? [pid 307] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 308 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x55556e39b660, 24) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] write(1, "executing program\n", 18executing program ) = 18 [pid 308] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 308] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 308] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 308] exit_group(0) = ? [ 30.507108][ T308] ------------[ cut here ]------------ [ 30.512627][ T308] WARNING: CPU: 0 PID: 308 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 30.522438][ T308] Modules linked in: [ 30.526399][ T308] CPU: 0 UID: 0 PID: 308 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 30.541747][ T308] Tainted: [W]=WARN [ 30.545565][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.555658][ T308] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 30.561617][ T308] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 30.581272][ T308] RSP: 0018:ffffc900012efaa8 EFLAGS: 00010202 [ 30.587480][ T308] RAX: 1ffffd1ffff80f12 RBX: ffffc900012fa8e8 RCX: ffffffff816dadc9 [ 30.595489][ T308] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07890 [ 30.603531][ T308] RBP: ffffc900012efb10 R08: ffffe8ffffc07897 R09: 1ffffd1ffff80f12 [ 30.611565][ T308] R10: dffffc0000000000 R11: fffff91ffff80f13 R12: dffffc0000000000 [ 30.619596][ T308] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07890 [ 30.627631][ T308] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.636624][ T308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.643231][ T308] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 30.651246][ T308] Call Trace: [ 30.654546][ T308] [ 30.657525][ T308] kvm_put_kvm+0x1100/0x12b0 [ 30.662184][ T308] ? __cfi_kvm_vm_release+0x10/0x10 [ 30.667441][ T308] kvm_vm_release+0x47/0x70 [ 30.671970][ T308] __fput+0x1fe/0xa00 [ 30.675955][ T308] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.681536][ T308] ____fput+0x20/0x30 [ 30.685544][ T308] task_work_run+0x1e0/0x250 [ 30.690175][ T308] ? __cfi_task_work_run+0x10/0x10 [ 30.695312][ T308] ? __kasan_check_write+0x18/0x20 [ 30.700465][ T308] do_exit+0x9bc/0x2630 [ 30.704653][ T308] ? __cfi_do_exit+0x10/0x10 [ 30.709288][ T308] ? __kasan_check_write+0x18/0x20 [ 30.714429][ T308] ? _raw_spin_lock_irq+0x8d/0x120 [ 30.719601][ T308] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.725180][ T308] ? zap_other_threads+0x334/0x370 [ 30.730329][ T308] do_group_exit+0x22a/0x300 [ 30.734943][ T308] __x64_sys_exit_group+0x43/0x50 [ 30.740011][ T308] x64_sys_call+0x2ed2/0x2ee0 [ 30.744720][ T308] do_syscall_64+0x58/0xf0 [ 30.749187][ T308] ? clear_bhb_loop+0x50/0xa0 [ 30.753988][ T308] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.759941][ T308] RIP: 0033:0x7fe515c1ab89 [ 30.764375][ T308] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 30.771433][ T308] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 30.780004][ T308] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 30.788043][ T308] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 30.796040][ T308] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 308] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 309 attached , child_tidptr=0x55556e39b650) = 309 [pid 309] set_robust_list(0x55556e39b660, 24) = 0 executing program [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 309] setpgid(0, 0) = 0 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] write(3, "1000", 4) = 4 [pid 309] close(3) = 0 [pid 309] write(1, "executing program\n", 18) = 18 [pid 309] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 309] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 309] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 309] exit_group(0) = ? [ 30.804052][ T308] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 30.812099][ T308] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 30.820281][ T308] [ 30.823332][ T308] ---[ end trace 0000000000000000 ]--- [ 30.867120][ T309] ------------[ cut here ]------------ [ 30.872712][ T309] WARNING: CPU: 1 PID: 309 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 30.882509][ T309] Modules linked in: [ 30.886490][ T309] CPU: 1 UID: 0 PID: 309 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 30.901926][ T309] Tainted: [W]=WARN [ 30.905751][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.915847][ T309] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 30.921815][ T309] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 30.941481][ T309] RSP: 0018:ffffc900012efaa8 EFLAGS: 00010202 [ 30.947616][ T309] RAX: 1ffffd1ffff80f42 RBX: ffffc900013058e8 RCX: ffffffff816dadc9 [ 30.955605][ T309] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07a10 [ 30.963653][ T309] RBP: ffffc900012efb10 R08: ffffe8ffffc07a17 R09: 1ffffd1ffff80f42 [ 30.971797][ T309] R10: dffffc0000000000 R11: fffff91ffff80f43 R12: dffffc0000000000 [ 30.979830][ T309] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07a10 [ 30.987861][ T309] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.996873][ T309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.003487][ T309] CR2: 00007fe515beb65e CR3: 0000000103f16000 CR4: 00000000003526b0 [ 31.011511][ T309] Call Trace: [ 31.014806][ T309] [ 31.017786][ T309] kvm_put_kvm+0x1100/0x12b0 [ 31.022405][ T309] ? __cfi_kvm_vm_release+0x10/0x10 [ 31.027649][ T309] kvm_vm_release+0x47/0x70 [ 31.032179][ T309] __fput+0x1fe/0xa00 [ 31.036173][ T309] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.041769][ T309] ____fput+0x20/0x30 [ 31.045770][ T309] task_work_run+0x1e0/0x250 [ 31.050408][ T309] ? __cfi_task_work_run+0x10/0x10 [ 31.055541][ T309] ? __kasan_check_write+0x18/0x20 [ 31.060703][ T309] do_exit+0x9bc/0x2630 [ 31.064890][ T309] ? __cfi_do_exit+0x10/0x10 [ 31.069527][ T309] ? __kasan_check_write+0x18/0x20 [ 31.075012][ T309] ? _raw_spin_lock_irq+0x8d/0x120 [ 31.080188][ T309] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.085765][ T309] ? zap_other_threads+0x334/0x370 [ 31.090924][ T309] do_group_exit+0x22a/0x300 [ 31.095549][ T309] __x64_sys_exit_group+0x43/0x50 [ 31.100709][ T309] x64_sys_call+0x2ed2/0x2ee0 [ 31.105414][ T309] do_syscall_64+0x58/0xf0 [ 31.109871][ T309] ? clear_bhb_loop+0x50/0xa0 [ 31.114585][ T309] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.120535][ T309] RIP: 0033:0x7fe515c1ab89 [ 31.124975][ T309] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 31.132051][ T309] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.140529][ T309] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 31.148546][ T309] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.156580][ T309] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 309] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x55556e39b660, 24) = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 executing program [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 310] ioctl(3, KVM_CREATE_VM, 0 [pid 296] <... clone resumed>, child_tidptr=0x55556e39b650) = 310 [pid 310] <... ioctl resumed>) = 4 [pid 310] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 310] exit_group(0) = ? [ 31.164579][ T309] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 31.172676][ T309] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 31.180792][ T309] [ 31.183826][ T309] ---[ end trace 0000000000000000 ]--- [ 31.226977][ T310] ------------[ cut here ]------------ [ 31.232495][ T310] WARNING: CPU: 1 PID: 310 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 31.242276][ T310] Modules linked in: [ 31.246193][ T310] CPU: 1 UID: 0 PID: 310 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 31.261549][ T310] Tainted: [W]=WARN [ 31.265370][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.275467][ T310] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 31.281437][ T310] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 31.301115][ T310] RSP: 0018:ffffc900012bfaa8 EFLAGS: 00010202 [ 31.307225][ T310] RAX: 1ffffd1ffff80f72 RBX: ffffc900013108e8 RCX: ffffffff816dadc9 [ 31.315206][ T310] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07b90 [ 31.323223][ T310] RBP: ffffc900012bfb10 R08: ffffe8ffffc07b97 R09: 1ffffd1ffff80f72 [ 31.331239][ T310] R10: dffffc0000000000 R11: fffff91ffff80f73 R12: dffffc0000000000 [ 31.339256][ T310] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07b90 [ 31.347275][ T310] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.356209][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.362847][ T310] CR2: 00007ffdaae9a308 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 31.370887][ T310] Call Trace: [ 31.374188][ T310] [ 31.377182][ T310] kvm_put_kvm+0x1100/0x12b0 [ 31.382069][ T310] ? __cfi_kvm_vm_release+0x10/0x10 [ 31.387310][ T310] kvm_vm_release+0x47/0x70 [ 31.391843][ T310] __fput+0x1fe/0xa00 [ 31.395831][ T310] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.401440][ T310] ____fput+0x20/0x30 [ 31.405452][ T310] task_work_run+0x1e0/0x250 [ 31.410084][ T310] ? __cfi_task_work_run+0x10/0x10 [ 31.415226][ T310] ? __kasan_check_write+0x18/0x20 [ 31.420398][ T310] do_exit+0x9bc/0x2630 [ 31.424847][ T310] ? __cfi_do_exit+0x10/0x10 [ 31.429511][ T310] ? __kasan_check_write+0x18/0x20 [ 31.434660][ T310] ? _raw_spin_lock_irq+0x8d/0x120 [ 31.439811][ T310] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.445395][ T310] ? zap_other_threads+0x334/0x370 [ 31.450542][ T310] do_group_exit+0x22a/0x300 [ 31.455157][ T310] __x64_sys_exit_group+0x43/0x50 [ 31.460228][ T310] x64_sys_call+0x2ed2/0x2ee0 [ 31.465890][ T310] do_syscall_64+0x58/0xf0 [ 31.470385][ T310] ? clear_bhb_loop+0x50/0xa0 [ 31.475106][ T310] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.481064][ T310] RIP: 0033:0x7fe515c1ab89 [ 31.485503][ T310] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 31.492551][ T310] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.501054][ T310] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 31.509081][ T310] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.517097][ T310] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 310] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=310, si_uid=0, si_status=0, si_utime=0, si_stime=29} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 311 attached , child_tidptr=0x55556e39b650) = 311 [pid 311] set_robust_list(0x55556e39b660, 24) = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 executing program [pid 311] write(1, "executing program\n", 18) = 18 [pid 311] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 311] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 311] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 311] exit_group(0) = ? [ 31.525096][ T310] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 31.533200][ T310] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 31.541269][ T310] [ 31.544300][ T310] ---[ end trace 0000000000000000 ]--- [ 31.577154][ T311] ------------[ cut here ]------------ [ 31.582651][ T311] WARNING: CPU: 0 PID: 311 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 31.592461][ T311] Modules linked in: [ 31.596451][ T311] CPU: 0 UID: 0 PID: 311 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 31.611939][ T311] Tainted: [W]=WARN [ 31.615771][ T311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.625872][ T311] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 31.631838][ T311] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 31.651682][ T311] RSP: 0018:ffffc9000131faa8 EFLAGS: 00010202 [ 31.657803][ T311] RAX: 1ffffd1ffff80fa2 RBX: ffffc9000132a8e8 RCX: ffffffff816dadc9 [ 31.665787][ T311] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07d10 [ 31.673805][ T311] RBP: ffffc9000131fb10 R08: ffffe8ffffc07d17 R09: 1ffffd1ffff80fa2 [ 31.681839][ T311] R10: dffffc0000000000 R11: fffff91ffff80fa3 R12: dffffc0000000000 [ 31.689869][ T311] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07d10 [ 31.697890][ T311] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.706868][ T311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.713470][ T311] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 31.721517][ T311] Call Trace: [ 31.724814][ T311] [ 31.727779][ T311] kvm_put_kvm+0x1100/0x12b0 [ 31.732401][ T311] ? __cfi_kvm_vm_release+0x10/0x10 [ 31.737643][ T311] kvm_vm_release+0x47/0x70 [ 31.742180][ T311] __fput+0x1fe/0xa00 [ 31.746169][ T311] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.751764][ T311] ____fput+0x20/0x30 [ 31.755767][ T311] task_work_run+0x1e0/0x250 [ 31.760401][ T311] ? __cfi_task_work_run+0x10/0x10 [ 31.765540][ T311] ? __kasan_check_write+0x18/0x20 [ 31.770698][ T311] do_exit+0x9bc/0x2630 [ 31.774905][ T311] ? __cfi_do_exit+0x10/0x10 [ 31.779563][ T311] ? __kasan_check_write+0x18/0x20 [ 31.784709][ T311] ? _raw_spin_lock_irq+0x8d/0x120 [ 31.789876][ T311] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.795454][ T311] ? zap_other_threads+0x334/0x370 [ 31.800618][ T311] do_group_exit+0x22a/0x300 [ 31.805242][ T311] __x64_sys_exit_group+0x43/0x50 [ 31.810307][ T311] x64_sys_call+0x2ed2/0x2ee0 [ 31.815025][ T311] do_syscall_64+0x58/0xf0 [ 31.819503][ T311] ? clear_bhb_loop+0x50/0xa0 [ 31.824223][ T311] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.830162][ T311] RIP: 0033:0x7fe515c1ab89 [ 31.834601][ T311] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 31.841676][ T311] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 31.850145][ T311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 31.858166][ T311] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 31.866158][ T311] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 311] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 312 ./strace-static-x86_64: Process 312 attached [pid 312] set_robust_list(0x55556e39b660, 24) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 312] setpgid(0, 0) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 312] write(3, "1000", 4) = 4 [pid 312] close(3) = 0 executing program [pid 312] write(1, "executing program\n", 18) = 18 [pid 312] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 312] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 312] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 312] exit_group(0) = ? [ 31.874168][ T311] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 31.882185][ T311] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 31.890190][ T311] [ 31.893227][ T311] ---[ end trace 0000000000000000 ]--- [pid 312] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=312, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 313 ./strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55556e39b660, 24) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 executing program [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 313] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 313] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 313] exit_group(0) = ? [pid 313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 314 ./strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55556e39b660, 24) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 executing program [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 314] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 314] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 314] exit_group(0) = ? [ 32.027093][ T314] ------------[ cut here ]------------ [ 32.032620][ T314] WARNING: CPU: 1 PID: 314 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 32.042431][ T314] Modules linked in: [ 32.046388][ T314] CPU: 1 UID: 0 PID: 314 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 32.061725][ T314] Tainted: [W]=WARN [ 32.065543][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.075638][ T314] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 32.081589][ T314] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 32.101246][ T314] RSP: 0018:ffffc900012efaa8 EFLAGS: 00010202 [ 32.107361][ T314] RAX: 1ffffd1ffff80fd2 RBX: ffffc9000134b8e8 RCX: ffffffff816dadc9 [ 32.115344][ T314] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc07e90 [ 32.123360][ T314] RBP: ffffc900012efb10 R08: ffffe8ffffc07e97 R09: 1ffffd1ffff80fd2 [ 32.131386][ T314] R10: dffffc0000000000 R11: fffff91ffff80fd3 R12: dffffc0000000000 [ 32.139411][ T314] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc07e90 [ 32.147435][ T314] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.156432][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.163038][ T314] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 32.171056][ T314] Call Trace: [ 32.174367][ T314] [ 32.177343][ T314] kvm_put_kvm+0x1100/0x12b0 [ 32.181972][ T314] ? __cfi_kvm_vm_release+0x10/0x10 [ 32.187236][ T314] kvm_vm_release+0x47/0x70 [ 32.191766][ T314] __fput+0x1fe/0xa00 [ 32.195754][ T314] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.201343][ T314] ____fput+0x20/0x30 [ 32.205353][ T314] task_work_run+0x1e0/0x250 [ 32.209990][ T314] ? __cfi_task_work_run+0x10/0x10 [ 32.215131][ T314] ? __kasan_check_write+0x18/0x20 [ 32.220290][ T314] do_exit+0x9bc/0x2630 [ 32.224473][ T314] ? __cfi_do_exit+0x10/0x10 [ 32.229116][ T314] ? __kasan_check_write+0x18/0x20 [ 32.234264][ T314] ? _raw_spin_lock_irq+0x8d/0x120 [ 32.239426][ T314] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.244998][ T314] ? zap_other_threads+0x334/0x370 [ 32.250166][ T314] do_group_exit+0x22a/0x300 [ 32.254782][ T314] __x64_sys_exit_group+0x43/0x50 [ 32.259849][ T314] x64_sys_call+0x2ed2/0x2ee0 [ 32.264559][ T314] do_syscall_64+0x58/0xf0 [ 32.269014][ T314] ? clear_bhb_loop+0x50/0xa0 [ 32.273734][ T314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.279708][ T314] RIP: 0033:0x7fe515c1ab89 [ 32.284142][ T314] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 32.291196][ T314] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.299672][ T314] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 32.307703][ T314] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 32.315700][ T314] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 315 attached , child_tidptr=0x55556e39b650) = 315 [pid 315] set_robust_list(0x55556e39b660, 24) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3executing program ) = 0 [pid 315] write(1, "executing program\n", 18) = 18 [pid 315] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 315] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 315] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 315] exit_group(0) = ? [ 32.323721][ T314] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 32.331808][ T314] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 32.339864][ T314] [ 32.342906][ T314] ---[ end trace 0000000000000000 ]--- [ 32.387018][ T315] ------------[ cut here ]------------ [ 32.392526][ T315] WARNING: CPU: 1 PID: 315 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 32.402319][ T315] Modules linked in: [ 32.406248][ T315] CPU: 1 UID: 0 PID: 315 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 32.421579][ T315] Tainted: [W]=WARN [ 32.425398][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.435491][ T315] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 32.441453][ T315] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 32.461302][ T315] RSP: 0018:ffffc900012bfaa8 EFLAGS: 00010202 [ 32.467415][ T315] RAX: 1ffffd1ffff81002 RBX: ffffc900013568e8 RCX: ffffffff816dadc9 [ 32.475391][ T315] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08010 [ 32.483405][ T315] RBP: ffffc900012bfb10 R08: ffffe8ffffc08017 R09: 1ffffd1ffff81002 [ 32.491433][ T315] R10: dffffc0000000000 R11: fffff91ffff81003 R12: dffffc0000000000 [ 32.499466][ T315] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08010 [ 32.507497][ T315] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.516507][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.523121][ T315] CR2: 0000565390804178 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 32.531149][ T315] Call Trace: [ 32.534452][ T315] [ 32.537527][ T315] kvm_put_kvm+0x1100/0x12b0 [ 32.542335][ T315] ? __cfi_kvm_vm_release+0x10/0x10 [ 32.547610][ T315] kvm_vm_release+0x47/0x70 [ 32.552141][ T315] __fput+0x1fe/0xa00 [ 32.556132][ T315] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.561753][ T315] ____fput+0x20/0x30 [ 32.565771][ T315] task_work_run+0x1e0/0x250 [ 32.570463][ T315] ? __cfi_task_work_run+0x10/0x10 [ 32.575608][ T315] ? __kasan_check_write+0x18/0x20 [ 32.580777][ T315] do_exit+0x9bc/0x2630 [ 32.585013][ T315] ? __cfi_do_exit+0x10/0x10 [ 32.589663][ T315] ? __kasan_check_write+0x18/0x20 [ 32.594803][ T315] ? _raw_spin_lock_irq+0x8d/0x120 [ 32.599973][ T315] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.605547][ T315] ? zap_other_threads+0x334/0x370 [ 32.610704][ T315] do_group_exit+0x22a/0x300 [ 32.615433][ T315] __x64_sys_exit_group+0x43/0x50 [ 32.620526][ T315] x64_sys_call+0x2ed2/0x2ee0 [ 32.625509][ T315] do_syscall_64+0x58/0xf0 [ 32.630006][ T315] ? clear_bhb_loop+0x50/0xa0 [ 32.634731][ T315] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.640735][ T315] RIP: 0033:0x7fe515c1ab89 [ 32.645178][ T315] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 32.652235][ T315] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 32.660704][ T315] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 32.668719][ T315] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 32.676737][ T315] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=29} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 316 ./strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x55556e39b660, 24) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] write(1, "executing program\n", 18executing program ) = 18 [pid 316] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 316] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 316] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 316] exit_group(0) = ? [ 32.684723][ T315] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 32.692764][ T315] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 32.700811][ T315] [ 32.704019][ T315] ---[ end trace 0000000000000000 ]--- [ 32.737161][ T316] ------------[ cut here ]------------ [ 32.742657][ T316] WARNING: CPU: 1 PID: 316 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 32.752459][ T316] Modules linked in: [ 32.756415][ T316] CPU: 1 UID: 0 PID: 316 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 32.771784][ T316] Tainted: [W]=WARN [ 32.775612][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.785713][ T316] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 32.791670][ T316] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 32.811335][ T316] RSP: 0018:ffffc900012bfaa8 EFLAGS: 00010202 [ 32.817547][ T316] RAX: 1ffffd1ffff81032 RBX: ffffc900013618e8 RCX: ffffffff816dadc9 [ 32.825529][ T316] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08190 [ 32.833544][ T316] RBP: ffffc900012bfb10 R08: ffffe8ffffc08197 R09: 1ffffd1ffff81032 [ 32.841582][ T316] R10: dffffc0000000000 R11: fffff91ffff81033 R12: dffffc0000000000 [ 32.849609][ T316] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08190 [ 32.857629][ T316] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.866606][ T316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.873210][ T316] CR2: 00007fe515c930d0 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 32.881235][ T316] Call Trace: [ 32.884555][ T316] [ 32.887524][ T316] kvm_put_kvm+0x1100/0x12b0 [ 32.892149][ T316] ? __cfi_kvm_vm_release+0x10/0x10 [ 32.897403][ T316] kvm_vm_release+0x47/0x70 [ 32.901937][ T316] __fput+0x1fe/0xa00 [ 32.905925][ T316] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.911540][ T316] ____fput+0x20/0x30 [ 32.915555][ T316] task_work_run+0x1e0/0x250 [ 32.920189][ T316] ? __cfi_task_work_run+0x10/0x10 [ 32.925333][ T316] ? __kasan_check_write+0x18/0x20 [ 32.930497][ T316] do_exit+0x9bc/0x2630 [ 32.934678][ T316] ? __cfi_do_exit+0x10/0x10 [ 32.939323][ T316] ? __kasan_check_write+0x18/0x20 [ 32.944469][ T316] ? _raw_spin_lock_irq+0x8d/0x120 [ 32.949622][ T316] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.955203][ T316] ? zap_other_threads+0x334/0x370 [ 32.960360][ T316] do_group_exit+0x22a/0x300 [ 32.964978][ T316] __x64_sys_exit_group+0x43/0x50 [ 32.970052][ T316] x64_sys_call+0x2ed2/0x2ee0 [ 32.974764][ T316] do_syscall_64+0x58/0xf0 [ 32.979247][ T316] ? clear_bhb_loop+0x50/0xa0 [ 32.983957][ T316] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.989905][ T316] RIP: 0033:0x7fe515c1ab89 [ 32.994373][ T316] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 33.001443][ T316] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.009916][ T316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 33.017935][ T316] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 33.025933][ T316] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 317 attached , child_tidptr=0x55556e39b650) = 317 [pid 317] set_robust_list(0x55556e39b660, 24) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18) = 18 executing program [pid 317] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 317] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 317] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 317] exit_group(0) = ? [ 33.033949][ T316] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 33.042069][ T316] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 33.050097][ T316] [ 33.053135][ T316] ---[ end trace 0000000000000000 ]--- [pid 317] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 318 ./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x55556e39b660, 24) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] write(1, "executing program\n", 18executing program ) = 18 [pid 318] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 318] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 318] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 318] exit_group(0) = ? [ 33.147186][ T318] ------------[ cut here ]------------ [ 33.152711][ T318] WARNING: CPU: 1 PID: 318 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 33.162491][ T318] Modules linked in: [ 33.166444][ T318] CPU: 1 UID: 0 PID: 318 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 33.181778][ T318] Tainted: [W]=WARN [ 33.185597][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.195696][ T318] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 33.201759][ T318] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 33.221484][ T318] RSP: 0018:ffffc9000131faa8 EFLAGS: 00010202 [ 33.227629][ T318] RAX: 1ffffd1ffff81062 RBX: ffffc900013778e8 RCX: ffffffff816dadc9 [ 33.235633][ T318] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08310 [ 33.243642][ T318] RBP: ffffc9000131fb10 R08: ffffe8ffffc08317 R09: 1ffffd1ffff81062 [ 33.251676][ T318] R10: dffffc0000000000 R11: fffff91ffff81063 R12: dffffc0000000000 [ 33.259711][ T318] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08310 [ 33.267743][ T318] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.276853][ T318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.283466][ T318] CR2: 000055556e39b650 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 33.291489][ T318] Call Trace: [ 33.294791][ T318] [ 33.297766][ T318] kvm_put_kvm+0x1100/0x12b0 [ 33.302387][ T318] ? __cfi_kvm_vm_release+0x10/0x10 [ 33.307640][ T318] kvm_vm_release+0x47/0x70 [ 33.312175][ T318] __fput+0x1fe/0xa00 [ 33.316179][ T318] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.321796][ T318] ____fput+0x20/0x30 [ 33.325803][ T318] task_work_run+0x1e0/0x250 [ 33.330440][ T318] ? __cfi_task_work_run+0x10/0x10 [ 33.335584][ T318] ? __kasan_check_write+0x18/0x20 [ 33.340765][ T318] do_exit+0x9bc/0x2630 [ 33.344950][ T318] ? __cfi_do_exit+0x10/0x10 [ 33.349590][ T318] ? __kasan_check_write+0x18/0x20 [ 33.354733][ T318] ? _raw_spin_lock_irq+0x8d/0x120 [ 33.359898][ T318] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.365474][ T318] ? zap_other_threads+0x334/0x370 [ 33.370627][ T318] do_group_exit+0x22a/0x300 [ 33.375244][ T318] __x64_sys_exit_group+0x43/0x50 [ 33.380307][ T318] x64_sys_call+0x2ed2/0x2ee0 [ 33.385113][ T318] do_syscall_64+0x58/0xf0 [ 33.389570][ T318] ? clear_bhb_loop+0x50/0xa0 [ 33.394282][ T318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.400224][ T318] RIP: 0033:0x7fe515c1ab89 [ 33.404660][ T318] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 33.411717][ T318] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.420193][ T318] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 33.428220][ T318] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 33.436216][ T318] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 319 attached , child_tidptr=0x55556e39b650) = 319 [pid 319] set_robust_list(0x55556e39b660, 24) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] write(1, "executing program\n", 18executing program ) = 18 [pid 319] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 319] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 319] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 319] exit_group(0) = ? [ 33.444232][ T318] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 33.452268][ T318] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 33.460301][ T318] [ 33.463338][ T318] ---[ end trace 0000000000000000 ]--- [pid 319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 320 attached , child_tidptr=0x55556e39b650) = 320 [pid 320] set_robust_list(0x55556e39b660, 24) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 executing program [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 320] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 320] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 321 attached , child_tidptr=0x55556e39b650) = 321 [pid 321] set_robust_list(0x55556e39b660, 24) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 executing program [pid 321] write(1, "executing program\n", 18) = 18 [pid 321] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 321] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 321] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 322 ./strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x55556e39b660, 24) = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 executing program [pid 322] write(1, "executing program\n", 18) = 18 [pid 322] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 322] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 322] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 322] exit_group(0) = ? [ 33.657134][ T322] ------------[ cut here ]------------ [ 33.662632][ T322] WARNING: CPU: 1 PID: 322 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 33.672463][ T322] Modules linked in: [ 33.676458][ T322] CPU: 1 UID: 0 PID: 322 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 33.691829][ T322] Tainted: [W]=WARN [ 33.695661][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.705842][ T322] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 33.711806][ T322] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 33.731469][ T322] RSP: 0018:ffffc900012bfaa8 EFLAGS: 00010202 [ 33.737583][ T322] RAX: 1ffffd1ffff81092 RBX: ffffc900013a38e8 RCX: ffffffff816dadc9 [ 33.745559][ T322] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08490 [ 33.753590][ T322] RBP: ffffc900012bfb10 R08: ffffe8ffffc08497 R09: 1ffffd1ffff81092 [ 33.761613][ T322] R10: dffffc0000000000 R11: fffff91ffff81093 R12: dffffc0000000000 [ 33.769629][ T322] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08490 [ 33.777648][ T322] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.786638][ T322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.793329][ T322] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 33.801360][ T322] Call Trace: [ 33.804685][ T322] [ 33.807679][ T322] kvm_put_kvm+0x1100/0x12b0 [ 33.812316][ T322] ? __cfi_kvm_vm_release+0x10/0x10 [ 33.817577][ T322] kvm_vm_release+0x47/0x70 [ 33.822113][ T322] __fput+0x1fe/0xa00 [ 33.826110][ T322] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.831736][ T322] ____fput+0x20/0x30 [ 33.835882][ T322] task_work_run+0x1e0/0x250 [ 33.840527][ T322] ? __cfi_task_work_run+0x10/0x10 [ 33.845669][ T322] ? __kasan_check_write+0x18/0x20 [ 33.850864][ T322] do_exit+0x9bc/0x2630 [ 33.855057][ T322] ? __cfi_do_exit+0x10/0x10 [ 33.859710][ T322] ? __kasan_check_write+0x18/0x20 [ 33.864853][ T322] ? _raw_spin_lock_irq+0x8d/0x120 [ 33.870004][ T322] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.875578][ T322] ? zap_other_threads+0x334/0x370 [ 33.880733][ T322] do_group_exit+0x22a/0x300 [ 33.885369][ T322] __x64_sys_exit_group+0x43/0x50 [ 33.890433][ T322] x64_sys_call+0x2ed2/0x2ee0 [ 33.895236][ T322] do_syscall_64+0x58/0xf0 [ 33.899708][ T322] ? clear_bhb_loop+0x50/0xa0 [ 33.904425][ T322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.910423][ T322] RIP: 0033:0x7fe515c1ab89 [ 33.914943][ T322] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 33.921998][ T322] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 33.930470][ T322] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 33.938494][ T322] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 33.946506][ T322] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 323 ./strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x55556e39b660, 24) = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3executing program ) = 0 [pid 323] write(1, "executing program\n", 18) = 18 [pid 323] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 323] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 323] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 323] exit_group(0) = ? [ 33.954484][ T322] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 33.962499][ T322] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 33.970526][ T322] [ 33.973581][ T322] ---[ end trace 0000000000000000 ]--- [ 34.017091][ T323] ------------[ cut here ]------------ [ 34.022625][ T323] WARNING: CPU: 1 PID: 323 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 34.032450][ T323] Modules linked in: [ 34.036407][ T323] CPU: 1 UID: 0 PID: 323 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 34.051782][ T323] Tainted: [W]=WARN [ 34.055604][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.065709][ T323] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 34.071694][ T323] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 34.091362][ T323] RSP: 0018:ffffc900012efaa8 EFLAGS: 00010202 [ 34.097475][ T323] RAX: 1ffffd1ffff810c2 RBX: ffffc900013ae8e8 RCX: ffffffff816dadc9 [ 34.105455][ T323] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08610 [ 34.113470][ T323] RBP: ffffc900012efb10 R08: ffffe8ffffc08617 R09: 1ffffd1ffff810c2 [ 34.121517][ T323] R10: dffffc0000000000 R11: fffff91ffff810c3 R12: dffffc0000000000 [ 34.129537][ T323] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08610 [ 34.137663][ T323] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.146644][ T323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.153256][ T323] CR2: 000055556e39b650 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 34.161271][ T323] Call Trace: [ 34.164569][ T323] [ 34.167546][ T323] kvm_put_kvm+0x1100/0x12b0 [ 34.172171][ T323] ? __cfi_kvm_vm_release+0x10/0x10 [ 34.177417][ T323] kvm_vm_release+0x47/0x70 [ 34.181948][ T323] __fput+0x1fe/0xa00 [ 34.185939][ T323] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.191529][ T323] ____fput+0x20/0x30 [ 34.195534][ T323] task_work_run+0x1e0/0x250 [ 34.200214][ T323] ? __cfi_task_work_run+0x10/0x10 [ 34.205352][ T323] ? __kasan_check_write+0x18/0x20 [ 34.210539][ T323] do_exit+0x9bc/0x2630 [ 34.214730][ T323] ? __cfi_do_exit+0x10/0x10 [ 34.219373][ T323] ? __kasan_check_write+0x18/0x20 [ 34.224687][ T323] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.229838][ T323] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.235412][ T323] ? zap_other_threads+0x334/0x370 [ 34.240573][ T323] do_group_exit+0x22a/0x300 [ 34.245199][ T323] __x64_sys_exit_group+0x43/0x50 [ 34.250265][ T323] x64_sys_call+0x2ed2/0x2ee0 [ 34.254976][ T323] do_syscall_64+0x58/0xf0 [ 34.259437][ T323] ? clear_bhb_loop+0x50/0xa0 [ 34.264150][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.270112][ T323] RIP: 0033:0x7fe515c1ab89 [ 34.274549][ T323] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 34.281606][ T323] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.290070][ T323] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 34.298084][ T323] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 34.306082][ T323] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 323] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 324 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x55556e39b660, 24) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 executing program [pid 324] write(1, "executing program\n", 18) = 18 [pid 324] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 324] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 324] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 324] exit_group(0) = ? [ 34.314097][ T323] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 34.322127][ T323] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 34.330178][ T323] [ 34.333220][ T323] ---[ end trace 0000000000000000 ]--- [pid 324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 325 attached , child_tidptr=0x55556e39b650) = 325 [pid 325] set_robust_list(0x55556e39b660, 24) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] write(1, "executing program\n", 18) = 18 [pid 325] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 325] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 325] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 325] exit_group(0) = ? [ 34.427150][ T325] ------------[ cut here ]------------ [ 34.432660][ T325] WARNING: CPU: 1 PID: 325 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 34.442464][ T325] Modules linked in: [ 34.446416][ T325] CPU: 1 UID: 0 PID: 325 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 34.461748][ T325] Tainted: [W]=WARN [ 34.465832][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.475941][ T325] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 34.481990][ T325] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 34.501741][ T325] RSP: 0018:ffffc900012bfaa8 EFLAGS: 00010202 [ 34.507878][ T325] RAX: 1ffffd1ffff810f2 RBX: ffffc900013c48e8 RCX: ffffffff816dadc9 [ 34.515873][ T325] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08790 [ 34.523886][ T325] RBP: ffffc900012bfb10 R08: ffffe8ffffc08797 R09: 1ffffd1ffff810f2 [ 34.531921][ T325] R10: dffffc0000000000 R11: fffff91ffff810f3 R12: dffffc0000000000 [ 34.539939][ T325] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08790 [ 34.547983][ T325] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.556973][ T325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.563575][ T325] CR2: 00007ffdaae9a308 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 34.571631][ T325] Call Trace: [ 34.574958][ T325] [ 34.577931][ T325] kvm_put_kvm+0x1100/0x12b0 [ 34.582553][ T325] ? __cfi_kvm_vm_release+0x10/0x10 [ 34.587813][ T325] kvm_vm_release+0x47/0x70 [ 34.592345][ T325] __fput+0x1fe/0xa00 [ 34.596336][ T325] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.601945][ T325] ____fput+0x20/0x30 [ 34.605935][ T325] task_work_run+0x1e0/0x250 [ 34.610574][ T325] ? __cfi_task_work_run+0x10/0x10 [ 34.615725][ T325] ? __kasan_check_write+0x18/0x20 [ 34.620945][ T325] do_exit+0x9bc/0x2630 [ 34.625184][ T325] ? __cfi_do_exit+0x10/0x10 [ 34.629820][ T325] ? _raw_spin_unlock_irq+0x4e/0x70 [ 34.635068][ T325] ? __kasan_check_write+0x18/0x20 [ 34.640251][ T325] ? _raw_spin_lock_irq+0x8d/0x120 [ 34.645396][ T325] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.651030][ T325] ? zap_other_threads+0x334/0x370 [ 34.656269][ T325] do_group_exit+0x22a/0x300 [ 34.660948][ T325] __x64_sys_exit_group+0x43/0x50 [ 34.666015][ T325] x64_sys_call+0x2ed2/0x2ee0 [ 34.670778][ T325] do_syscall_64+0x58/0xf0 [ 34.675229][ T325] ? clear_bhb_loop+0x50/0xa0 [ 34.679970][ T325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.685906][ T325] RIP: 0033:0x7fe515c1ab89 [ 34.690374][ T325] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 34.697461][ T325] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 34.705983][ T325] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 34.714009][ T325] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 326 ./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x55556e39b660, 24) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 executing program [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] write(1, "executing program\n", 18) = 18 [pid 326] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 326] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 326] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 326] exit_group(0) = ? [pid 326] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 34.722026][ T325] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [ 34.730065][ T325] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 34.738081][ T325] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 34.746066][ T325] [ 34.749128][ T325] ---[ end trace 0000000000000000 ]--- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 327 ./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x55556e39b660, 24) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] write(1, "executing program\n", 18executing program ) = 18 [pid 327] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 327] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 327] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 327] exit_group(0) = ? [pid 327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x55556e39b660, 24 [pid 296] <... clone resumed>, child_tidptr=0x55556e39b650) = 328 [pid 328] <... set_robust_list resumed>) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 executing program [pid 328] write(1, "executing program\n", 18) = 18 [pid 328] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 328] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 328] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 328] exit_group(0) = ? [ 34.917197][ T328] ------------[ cut here ]------------ [ 34.922693][ T328] WARNING: CPU: 1 PID: 328 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 34.932558][ T328] Modules linked in: [ 34.936512][ T328] CPU: 1 UID: 0 PID: 328 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 34.951867][ T328] Tainted: [W]=WARN [ 34.955692][ T328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.965785][ T328] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 34.971736][ T328] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 34.991477][ T328] RSP: 0018:ffffc9000121faa8 EFLAGS: 00010202 [ 34.997592][ T328] RAX: 1ffffd1ffff81122 RBX: ffffc900013e58e8 RCX: ffffffff816dadc9 [ 35.005669][ T328] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08910 [ 35.013777][ T328] RBP: ffffc9000121fb10 R08: ffffe8ffffc08917 R09: 1ffffd1ffff81122 [ 35.021827][ T328] R10: dffffc0000000000 R11: fffff91ffff81123 R12: dffffc0000000000 [ 35.029861][ T328] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08910 [ 35.037975][ T328] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.046952][ T328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.053554][ T328] CR2: 00007fe515c441d0 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 35.061574][ T328] Call Trace: [ 35.064870][ T328] [ 35.067840][ T328] kvm_put_kvm+0x1100/0x12b0 [ 35.072466][ T328] ? __cfi_kvm_vm_release+0x10/0x10 [ 35.077714][ T328] kvm_vm_release+0x47/0x70 [ 35.082242][ T328] __fput+0x1fe/0xa00 [ 35.086227][ T328] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.091826][ T328] ____fput+0x20/0x30 [ 35.095831][ T328] task_work_run+0x1e0/0x250 [ 35.100462][ T328] ? __cfi_task_work_run+0x10/0x10 [ 35.105605][ T328] ? __kasan_check_write+0x18/0x20 [ 35.110778][ T328] do_exit+0x9bc/0x2630 [ 35.114968][ T328] ? __cfi_do_exit+0x10/0x10 [ 35.119628][ T328] ? __kasan_check_write+0x18/0x20 [ 35.124784][ T328] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.130045][ T328] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.135713][ T328] ? zap_other_threads+0x334/0x370 [ 35.140954][ T328] do_group_exit+0x22a/0x300 [ 35.145664][ T328] __x64_sys_exit_group+0x43/0x50 [ 35.150741][ T328] x64_sys_call+0x2ed2/0x2ee0 [ 35.155452][ T328] do_syscall_64+0x58/0xf0 [ 35.159994][ T328] ? clear_bhb_loop+0x50/0xa0 [ 35.164718][ T328] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.170682][ T328] RIP: 0033:0x7fe515c1ab89 [ 35.175117][ T328] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 35.182259][ T328] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.190715][ T328] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 35.198737][ T328] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 35.206760][ T328] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 329 ./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x55556e39b660, 24) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 executing program [pid 329] write(1, "executing program\n", 18) = 18 [pid 329] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 329] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 329] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 329] exit_group(0) = ? [ 35.214745][ T328] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 35.222751][ T328] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 35.230774][ T328] [ 35.233815][ T328] ---[ end trace 0000000000000000 ]--- [ 35.277125][ T329] ------------[ cut here ]------------ [ 35.282628][ T329] WARNING: CPU: 1 PID: 329 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 35.292449][ T329] Modules linked in: [ 35.296411][ T329] CPU: 1 UID: 0 PID: 329 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 35.311956][ T329] Tainted: [W]=WARN [ 35.315784][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.325895][ T329] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 35.331868][ T329] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 35.351554][ T329] RSP: 0018:ffffc900012efaa8 EFLAGS: 00010202 [ 35.357692][ T329] RAX: 1ffffd1ffff81152 RBX: ffffc900013f08e8 RCX: ffffffff816dadc9 [ 35.365681][ T329] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08a90 [ 35.373740][ T329] RBP: ffffc900012efb10 R08: ffffe8ffffc08a97 R09: 1ffffd1ffff81152 [ 35.381776][ T329] R10: dffffc0000000000 R11: fffff91ffff81153 R12: dffffc0000000000 [ 35.389801][ T329] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08a90 [ 35.397812][ T329] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.406791][ T329] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.413398][ T329] CR2: 00007fe515c930d0 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 35.421412][ T329] Call Trace: [ 35.424880][ T329] [ 35.428211][ T329] kvm_put_kvm+0x1100/0x12b0 [ 35.432841][ T329] ? __cfi_kvm_vm_release+0x10/0x10 [ 35.438088][ T329] kvm_vm_release+0x47/0x70 [ 35.442653][ T329] __fput+0x1fe/0xa00 [ 35.446719][ T329] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.452295][ T329] ____fput+0x20/0x30 [ 35.456287][ T329] task_work_run+0x1e0/0x250 [ 35.460957][ T329] ? __cfi_task_work_run+0x10/0x10 [ 35.466107][ T329] ? __kasan_check_write+0x18/0x20 [ 35.471266][ T329] do_exit+0x9bc/0x2630 [ 35.475452][ T329] ? __cfi_do_exit+0x10/0x10 [ 35.480088][ T329] ? __kasan_check_write+0x18/0x20 [ 35.485238][ T329] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.490399][ T329] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.496004][ T329] ? zap_other_threads+0x334/0x370 [ 35.501214][ T329] do_group_exit+0x22a/0x300 [ 35.505835][ T329] __x64_sys_exit_group+0x43/0x50 [ 35.510910][ T329] x64_sys_call+0x2ed2/0x2ee0 [ 35.515643][ T329] do_syscall_64+0x58/0xf0 [ 35.520144][ T329] ? clear_bhb_loop+0x50/0xa0 [ 35.524867][ T329] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.530819][ T329] RIP: 0033:0x7fe515c1ab89 [ 35.535267][ T329] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 35.542337][ T329] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.550807][ T329] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 35.558824][ T329] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 35.566839][ T329] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 329] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 330 ./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x55556e39b660, 24) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3executing program ) = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 330] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 330] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 330] exit_group(0) = ? [ 35.574827][ T329] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 35.582848][ T329] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 35.590917][ T329] [ 35.593943][ T329] ---[ end trace 0000000000000000 ]--- [ 35.627051][ T330] ------------[ cut here ]------------ [ 35.632551][ T330] WARNING: CPU: 1 PID: 330 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 35.642336][ T330] Modules linked in: [ 35.646251][ T330] CPU: 1 UID: 0 PID: 330 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 35.661578][ T330] Tainted: [W]=WARN [ 35.665403][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.675520][ T330] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 35.681489][ T330] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 35.701260][ T330] RSP: 0018:ffffc9000121faa8 EFLAGS: 00010202 [ 35.707376][ T330] RAX: 1ffffd1ffff81182 RBX: ffffc900013fb8e8 RCX: ffffffff816dadc9 [ 35.715353][ T330] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08c10 [ 35.723368][ T330] RBP: ffffc9000121fb10 R08: ffffe8ffffc08c17 R09: 1ffffd1ffff81182 [ 35.731389][ T330] R10: dffffc0000000000 R11: fffff91ffff81183 R12: dffffc0000000000 [ 35.739447][ T330] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08c10 [ 35.747461][ T330] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.756447][ T330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.763052][ T330] CR2: 00007fe515c96110 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 35.771064][ T330] Call Trace: [ 35.774361][ T330] [ 35.777343][ T330] kvm_put_kvm+0x1100/0x12b0 [ 35.782053][ T330] ? __cfi_kvm_vm_release+0x10/0x10 [ 35.787303][ T330] kvm_vm_release+0x47/0x70 [ 35.791833][ T330] __fput+0x1fe/0xa00 [ 35.795827][ T330] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.801442][ T330] ____fput+0x20/0x30 [ 35.805447][ T330] task_work_run+0x1e0/0x250 [ 35.810089][ T330] ? __cfi_task_work_run+0x10/0x10 [ 35.815225][ T330] ? __kasan_check_write+0x18/0x20 [ 35.820400][ T330] do_exit+0x9bc/0x2630 [ 35.824580][ T330] ? __cfi_do_exit+0x10/0x10 [ 35.829230][ T330] ? __kasan_check_write+0x18/0x20 [ 35.834369][ T330] ? _raw_spin_lock_irq+0x8d/0x120 [ 35.839535][ T330] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.845119][ T330] ? zap_other_threads+0x334/0x370 [ 35.850311][ T330] do_group_exit+0x22a/0x300 [ 35.854931][ T330] __x64_sys_exit_group+0x43/0x50 [ 35.860013][ T330] x64_sys_call+0x2ed2/0x2ee0 [ 35.864728][ T330] do_syscall_64+0x58/0xf0 [ 35.869198][ T330] ? clear_bhb_loop+0x50/0xa0 [ 35.873918][ T330] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.879924][ T330] RIP: 0033:0x7fe515c1ab89 [ 35.884368][ T330] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 35.891454][ T330] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 35.900105][ T330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 35.908124][ T330] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 35.916173][ T330] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 330] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=29} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 331 ./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x55556e39b660, 24) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] write(1, "executing program\n", 18executing program ) = 18 [pid 331] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 331] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 331] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 331] exit_group(0) = ? [ 35.924196][ T330] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 35.932248][ T330] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 35.940276][ T330] [ 35.943318][ T330] ---[ end trace 0000000000000000 ]--- [ 35.987239][ T331] ------------[ cut here ]------------ [ 35.992753][ T331] WARNING: CPU: 1 PID: 331 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 36.002660][ T331] Modules linked in: [ 36.006621][ T331] CPU: 1 UID: 0 PID: 331 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 36.021967][ T331] Tainted: [W]=WARN [ 36.025788][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.035881][ T331] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 36.041844][ T331] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 36.061508][ T331] RSP: 0018:ffffc9000121faa8 EFLAGS: 00010202 [ 36.067620][ T331] RAX: 1ffffd1ffff811b2 RBX: ffffc900014068e8 RCX: ffffffff816dadc9 [ 36.075603][ T331] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08d90 [ 36.083639][ T331] RBP: ffffc9000121fb10 R08: ffffe8ffffc08d97 R09: 1ffffd1ffff811b2 [ 36.091670][ T331] R10: dffffc0000000000 R11: fffff91ffff811b3 R12: dffffc0000000000 [ 36.099688][ T331] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08d90 [ 36.107712][ T331] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.116700][ T331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.123306][ T331] CR2: 00007fe515c96110 CR3: 000000012df8a000 CR4: 00000000003526b0 [ 36.131324][ T331] Call Trace: [ 36.134625][ T331] [ 36.137601][ T331] kvm_put_kvm+0x1100/0x12b0 [ 36.142314][ T331] ? __cfi_kvm_vm_release+0x10/0x10 [ 36.147559][ T331] kvm_vm_release+0x47/0x70 [ 36.152090][ T331] __fput+0x1fe/0xa00 [ 36.156080][ T331] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.161695][ T331] ____fput+0x20/0x30 [ 36.165702][ T331] task_work_run+0x1e0/0x250 [ 36.170330][ T331] ? __cfi_task_work_run+0x10/0x10 [ 36.175466][ T331] ? __kasan_check_write+0x18/0x20 [ 36.180629][ T331] do_exit+0x9bc/0x2630 [ 36.184829][ T331] ? __cfi_do_exit+0x10/0x10 [ 36.189461][ T331] ? __kasan_check_write+0x18/0x20 [ 36.194602][ T331] ? _raw_spin_lock_irq+0x8d/0x120 [ 36.199761][ T331] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.205336][ T331] ? zap_other_threads+0x334/0x370 [ 36.210488][ T331] do_group_exit+0x22a/0x300 [ 36.215125][ T331] __x64_sys_exit_group+0x43/0x50 [ 36.220188][ T331] x64_sys_call+0x2ed2/0x2ee0 [ 36.224901][ T331] do_syscall_64+0x58/0xf0 [ 36.229366][ T331] ? clear_bhb_loop+0x50/0xa0 [ 36.234075][ T331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.240023][ T331] RIP: 0033:0x7fe515c1ab89 [ 36.244462][ T331] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 36.251515][ T331] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.259990][ T331] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 36.268019][ T331] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 36.276108][ T331] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 332 ./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x55556e39b660, 24) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 executing program [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 332] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 332] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 332] exit_group(0) = ? [ 36.284117][ T331] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 36.292148][ T331] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 36.300371][ T331] [ 36.303406][ T331] ---[ end trace 0000000000000000 ]--- [pid 332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 333 attached , child_tidptr=0x55556e39b650) = 333 [pid 333] set_robust_list(0x55556e39b660, 24) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 executing program [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 333] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 333] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 333] exit_group(0) = ? [ 36.417137][ T333] ------------[ cut here ]------------ [ 36.422641][ T333] WARNING: CPU: 1 PID: 333 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 36.432510][ T333] Modules linked in: [ 36.436461][ T333] CPU: 1 UID: 0 PID: 333 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 36.451865][ T333] Tainted: [W]=WARN [ 36.455714][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.465820][ T333] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 36.471782][ T333] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 36.491468][ T333] RSP: 0018:ffffc9000131faa8 EFLAGS: 00010202 [ 36.497586][ T333] RAX: 1ffffd1ffff811e2 RBX: ffffc9000141c8e8 RCX: ffffffff816dadc9 [ 36.505571][ T333] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc08f10 [ 36.513628][ T333] RBP: ffffc9000131fb10 R08: ffffe8ffffc08f17 R09: 1ffffd1ffff811e2 [ 36.521675][ T333] R10: dffffc0000000000 R11: fffff91ffff811e3 R12: dffffc0000000000 [ 36.529703][ T333] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc08f10 [ 36.537829][ T333] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.546833][ T333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.553440][ T333] CR2: 00007fe515c6501d CR3: 0000000103f16000 CR4: 00000000003526b0 [ 36.561464][ T333] Call Trace: [ 36.564765][ T333] [ 36.567743][ T333] kvm_put_kvm+0x1100/0x12b0 [ 36.572367][ T333] ? __cfi_kvm_vm_release+0x10/0x10 [ 36.577679][ T333] kvm_vm_release+0x47/0x70 [ 36.582221][ T333] __fput+0x1fe/0xa00 [ 36.586216][ T333] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.591817][ T333] ____fput+0x20/0x30 [ 36.595829][ T333] task_work_run+0x1e0/0x250 [ 36.600476][ T333] ? __cfi_task_work_run+0x10/0x10 [ 36.605670][ T333] ? __kasan_check_write+0x18/0x20 [ 36.610903][ T333] do_exit+0x9bc/0x2630 [ 36.615092][ T333] ? __cfi_do_exit+0x10/0x10 [ 36.619727][ T333] ? __kasan_check_write+0x18/0x20 [ 36.624869][ T333] ? _raw_spin_lock_irq+0x8d/0x120 [ 36.630028][ T333] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 36.635625][ T333] ? zap_other_threads+0x334/0x370 [ 36.640863][ T333] do_group_exit+0x22a/0x300 [ 36.645502][ T333] __x64_sys_exit_group+0x43/0x50 [ 36.650601][ T333] x64_sys_call+0x2ed2/0x2ee0 [ 36.655314][ T333] do_syscall_64+0x58/0xf0 [ 36.659783][ T333] ? clear_bhb_loop+0x50/0xa0 [ 36.664512][ T333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.670664][ T333] RIP: 0033:0x7fe515c1ab89 [ 36.675111][ T333] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 36.682168][ T333] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 36.690635][ T333] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 36.698654][ T333] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 36.706770][ T333] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 333] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 334 ./strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x55556e39b660, 24) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] write(1, "executing program\n", 18executing program ) = 18 [pid 334] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 334] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 334] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 334] exit_group(0) = ? [ 36.714750][ T333] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 36.722761][ T333] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 36.730785][ T333] [ 36.733813][ T333] ---[ end trace 0000000000000000 ]--- [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 335 ./strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x55556e39b660, 24) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 executing program [pid 335] write(1, "executing program\n", 18) = 18 [pid 335] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 335] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 335] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 336 ./strace-static-x86_64: Process 336 attached [pid 336] set_robust_list(0x55556e39b660, 24) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 executing program [pid 336] write(1, "executing program\n", 18) = 18 [pid 336] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 336] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 336] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 336] exit_group(0) = ? [ 36.877114][ T336] ------------[ cut here ]------------ [ 36.882739][ T336] WARNING: CPU: 1 PID: 336 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 36.892557][ T336] Modules linked in: [ 36.896507][ T336] CPU: 1 UID: 0 PID: 336 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 36.911842][ T336] Tainted: [W]=WARN [ 36.915665][ T336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.925769][ T336] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 36.931724][ T336] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 36.951393][ T336] RSP: 0018:ffffc9000121faa8 EFLAGS: 00010202 [ 36.957522][ T336] RAX: 1ffffd1ffff81212 RBX: ffffc9000143d8e8 RCX: ffffffff816dadc9 [ 36.965530][ T336] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc09090 [ 36.973547][ T336] RBP: ffffc9000121fb10 R08: ffffe8ffffc09097 R09: 1ffffd1ffff81212 [ 36.981698][ T336] R10: dffffc0000000000 R11: fffff91ffff81213 R12: dffffc0000000000 [ 36.989837][ T336] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc09090 [ 36.997874][ T336] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.006905][ T336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.013525][ T336] CR2: 00007ffdaae9a308 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 37.021777][ T336] Call Trace: [ 37.025122][ T336] [ 37.028172][ T336] kvm_put_kvm+0x1100/0x12b0 [ 37.032822][ T336] ? __cfi_kvm_vm_release+0x10/0x10 [ 37.038729][ T336] kvm_vm_release+0x47/0x70 [ 37.043270][ T336] __fput+0x1fe/0xa00 [ 37.047324][ T336] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.052916][ T336] ____fput+0x20/0x30 [ 37.056959][ T336] task_work_run+0x1e0/0x250 [ 37.061607][ T336] ? __cfi_task_work_run+0x10/0x10 [ 37.066782][ T336] ? __kasan_check_write+0x18/0x20 [ 37.072062][ T336] do_exit+0x9bc/0x2630 [ 37.076325][ T336] ? __cfi_do_exit+0x10/0x10 [ 37.081077][ T336] ? __kasan_check_write+0x18/0x20 [ 37.086210][ T336] ? _raw_spin_lock_irq+0x8d/0x120 [ 37.091388][ T336] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.096996][ T336] ? zap_other_threads+0x334/0x370 [ 37.102153][ T336] do_group_exit+0x22a/0x300 [ 37.106795][ T336] __x64_sys_exit_group+0x43/0x50 [ 37.111853][ T336] x64_sys_call+0x2ed2/0x2ee0 [ 37.116637][ T336] do_syscall_64+0x58/0xf0 [ 37.121101][ T336] ? clear_bhb_loop+0x50/0xa0 [ 37.125794][ T336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.131749][ T336] RIP: 0033:0x7fe515c1ab89 [ 37.136227][ T336] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 37.143297][ T336] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.151805][ T336] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 37.159838][ T336] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 37.167889][ T336] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 336] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 337 ./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x55556e39b660, 24) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18executing program ) = 18 [pid 337] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 337] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 337] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 337] exit_group(0) = ? [ 37.175911][ T336] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 37.183927][ T336] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 37.191953][ T336] [ 37.195004][ T336] ---[ end trace 0000000000000000 ]--- [pid 337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 338 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x55556e39b660, 24) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] write(1, "executing program\n", 18executing program ) = 18 [pid 338] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 338] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 338] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 338] exit_group(0) = ? [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 339 ./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55556e39b660, 24) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3executing program ) = 0 [pid 339] write(1, "executing program\n", 18) = 18 [pid 339] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 339] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 339] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 339] exit_group(0) = ? [ 37.347119][ T339] ------------[ cut here ]------------ [ 37.352627][ T339] WARNING: CPU: 1 PID: 339 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 37.362419][ T339] Modules linked in: [ 37.366336][ T339] CPU: 1 UID: 0 PID: 339 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 37.381698][ T339] Tainted: [W]=WARN [ 37.385508][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.395595][ T339] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 37.401542][ T339] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 37.421382][ T339] RSP: 0018:ffffc9000131faa8 EFLAGS: 00010202 [ 37.427491][ T339] RAX: 1ffffd1ffff81242 RBX: ffffc9000145e8e8 RCX: ffffffff816dadc9 [ 37.435559][ T339] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc09210 [ 37.443568][ T339] RBP: ffffc9000131fb10 R08: ffffe8ffffc09217 R09: 1ffffd1ffff81242 [ 37.451589][ T339] R10: dffffc0000000000 R11: fffff91ffff81243 R12: dffffc0000000000 [ 37.459642][ T339] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc09210 [ 37.467658][ T339] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.476657][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.483265][ T339] CR2: 000055556e39b650 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 37.491288][ T339] Call Trace: [ 37.494593][ T339] [ 37.497564][ T339] kvm_put_kvm+0x1100/0x12b0 [ 37.502187][ T339] ? __cfi_kvm_vm_release+0x10/0x10 [ 37.507434][ T339] kvm_vm_release+0x47/0x70 [ 37.511968][ T339] __fput+0x1fe/0xa00 [ 37.516011][ T339] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.521615][ T339] ____fput+0x20/0x30 [ 37.525623][ T339] task_work_run+0x1e0/0x250 [ 37.530267][ T339] ? __cfi_task_work_run+0x10/0x10 [ 37.535402][ T339] ? __kasan_check_write+0x18/0x20 [ 37.540599][ T339] do_exit+0x9bc/0x2630 [ 37.544778][ T339] ? __cfi_do_exit+0x10/0x10 [ 37.549414][ T339] ? __kasan_check_write+0x18/0x20 [ 37.554559][ T339] ? _raw_spin_lock_irq+0x8d/0x120 [ 37.559916][ T339] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.565552][ T339] ? zap_other_threads+0x334/0x370 [ 37.570736][ T339] do_group_exit+0x22a/0x300 [ 37.575460][ T339] __x64_sys_exit_group+0x43/0x50 [ 37.580548][ T339] x64_sys_call+0x2ed2/0x2ee0 [ 37.585260][ T339] do_syscall_64+0x58/0xf0 [ 37.589750][ T339] ? clear_bhb_loop+0x50/0xa0 [ 37.594478][ T339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.600442][ T339] RIP: 0033:0x7fe515c1ab89 [ 37.604883][ T339] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 37.611942][ T339] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.620408][ T339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 37.628455][ T339] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 37.636473][ T339] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 339] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=30} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 340 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x55556e39b660, 24) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] write(1, "executing program\n", 18executing program ) = 18 [pid 340] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 340] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 340] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 340] exit_group(0) = ? [ 37.644457][ T339] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 37.652469][ T339] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 37.660496][ T339] [ 37.663522][ T339] ---[ end trace 0000000000000000 ]--- [ 37.697139][ T340] ------------[ cut here ]------------ [ 37.702641][ T340] WARNING: CPU: 1 PID: 340 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 37.712411][ T340] Modules linked in: [ 37.716336][ T340] CPU: 1 UID: 0 PID: 340 Comm: syz-executor623 Tainted: G W 6.12.38-syzkaller-ge9bbc29c066a #0 23782410f292bc05d82a7d68d5e797d6f188417b [ 37.731714][ T340] Tainted: [W]=WARN [ 37.735536][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.745805][ T340] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 37.751756][ T340] Code: 00 48 8b 5d a0 74 08 48 89 df e8 22 23 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 37.771409][ T340] RSP: 0018:ffffc9000121faa8 EFLAGS: 00010202 [ 37.777534][ T340] RAX: 1ffffd1ffff81272 RBX: ffffc900014698e8 RCX: ffffffff816dadc9 [ 37.785563][ T340] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc09390 [ 37.793613][ T340] RBP: ffffc9000121fb10 R08: ffffe8ffffc09397 R09: 1ffffd1ffff81272 [ 37.801665][ T340] R10: dffffc0000000000 R11: fffff91ffff81273 R12: dffffc0000000000 [ 37.809977][ T340] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc09390 [ 37.818001][ T340] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.826987][ T340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.833594][ T340] CR2: 00007fe515c96110 CR3: 0000000103f16000 CR4: 00000000003526b0 [ 37.841625][ T340] Call Trace: [ 37.844923][ T340] [ 37.847895][ T340] kvm_put_kvm+0x1100/0x12b0 [ 37.852531][ T340] ? __cfi_kvm_vm_release+0x10/0x10 [ 37.857790][ T340] kvm_vm_release+0x47/0x70 [ 37.862322][ T340] __fput+0x1fe/0xa00 [ 37.866341][ T340] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.871954][ T340] ____fput+0x20/0x30 [ 37.875947][ T340] task_work_run+0x1e0/0x250 [ 37.880574][ T340] ? __cfi_task_work_run+0x10/0x10 [ 37.885719][ T340] ? __kasan_check_write+0x18/0x20 [ 37.890941][ T340] do_exit+0x9bc/0x2630 [ 37.895128][ T340] ? __cfi_do_exit+0x10/0x10 [ 37.900022][ T340] ? __kasan_check_write+0x18/0x20 [ 37.905167][ T340] ? _raw_spin_lock_irq+0x8d/0x120 [ 37.910428][ T340] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 37.916056][ T340] ? zap_other_threads+0x334/0x370 [ 37.921210][ T340] do_group_exit+0x22a/0x300 [ 37.925831][ T340] __x64_sys_exit_group+0x43/0x50 [ 37.931069][ T340] x64_sys_call+0x2ed2/0x2ee0 [ 37.935779][ T340] do_syscall_64+0x58/0xf0 [ 37.940230][ T340] ? clear_bhb_loop+0x50/0xa0 [ 37.944975][ T340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.950914][ T340] RIP: 0033:0x7fe515c1ab89 [ 37.955347][ T340] Code: Unable to access opcode bytes at 0x7fe515c1ab5f. [ 37.962405][ T340] RSP: 002b:00007ffdaae9a3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 37.970958][ T340] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe515c1ab89 [ 37.979043][ T340] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 37.987159][ T340] RBP: 00007fe515c952b0 R08: ffffffffffffffb8 R09: 0000000000000006 [pid 340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=31} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 341 ./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x55556e39b660, 24) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] write(1, "executing program\n", 18executing program ) = 18 [pid 341] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 341] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 341] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 341] exit_group(0) = ? [ 37.995141][ T340] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fe515c952b0 [ 38.003241][ T340] R13: 0000000000000000 R14: 00007fe515c95d00 R15: 00007fe515bebde0 [ 38.011267][ T340] [ 38.014294][ T340] ---[ end trace 0000000000000000 ]--- [pid 341] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 342 ./strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x55556e39b660, 24) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] write(1, "executing program\n", 18executing program ) = 18 [pid 342] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 342] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 342] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556e39b650) = 343 ./strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x55556e39b660, 24) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 executing program [pid 343] write(1, "executing program\n", 18) = 18 [pid 343] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 343] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 343] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 343] exit_group(0) = ? [pid 343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 344 attached , child_tidptr=0x55556e39b650) = 344 [pid 344] set_robust_list(0x55556e39b660, 24) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 executing program [pid 344] write(1, "executing program\n", 18) = 18 [pid 344] openat(AT_FDCWD, "/dev/kvm", O_RDWR) = 3 [pid 344] ioctl(3, KVM_CREATE_VM, 0) = 4 [pid 344] ioctl(4, KVM_CREATE_IRQCHIP, 0) = 0 [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 345 attached , child_tidptr=0x55556e39b650) = 345 [pid 345] set_robust_list(0x55556e39b660, 24) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0