ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor2249215733 <...> Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor2249215733", ["ci2-upstream-fs/syz-executor2249215733"], 0x7fffb5bf7e70 /* 10 vars */) = 0 brk(NULL) = 0x55558d5da000 brk(0x55558d5dad80) = 0x55558d5dad80 arch_prctl(ARCH_SET_FS, 0x55558d5da400) = 0 set_tid_address(0x55558d5da6d0) = 5628 set_robust_list(0x55558d5da6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor2249215733", 4096) = 44 getrandom("\x21\xf1\x9b\xb3\x0c\x0a\x0f\x4f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558d5dad80 brk(0x55558d5fbd80) = 0x55558d5fbd80 brk(0x55558d5fc000) = 0x55558d5fc000 mprotect(0x7f2ca56cc000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5629 attached [pid 5629] set_robust_list(0x55558d5da6e0, 24 [pid 5628] <... clone resumed>, child_tidptr=0x55558d5da6d0) = 5629 [pid 5629] <... set_robust_list resumed>) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5628] rt_sigprocmask(SIG_SETMASK, [] [pid 5629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5629] setpgid(0, 0 [pid 5628] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5629] <... setpgid resumed>) = 0 [pid 5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5629] write(3, "1000", 4) = 4 [pid 5629] close(3) = 0 [pid 5629] write(1, "executing program\n", 18) = 18 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5629] rt_sigaction(SIGRT_1, {sa_handler=0x7f2ca56350d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2ca56273a0}, NULL, 8) = 0 [pid 5629] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2ca55da000 [pid 5629] mprotect(0x7f2ca55db000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5629] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2ca55fa990, parent_tid=0x7f2ca55fa990, exit_signal=0, stack=0x7f2ca55da000, stack_size=0x202c0, tls=0x7f2ca55fa6c0}ci2-upstream-fs/strace-static-x86_64: Process 5631 attached => {parent_tid=[5631]}, 88) = 5631 [pid 5631] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5629] rt_sigprocmask(SIG_SETMASK, [] [pid 5631] <... rseq resumed>) = 0 [pid 5629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5631] set_robust_list(0x7f2ca55fa9a0, 24 [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... set_robust_list resumed>) = 0 [pid 5629] <... futex resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] mkdirat(AT_FDCWD, "./dev", 0777) = 0 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5629] <... futex resumed>) = 0 [pid 5631] mount(NULL, "./dev", "devtmpfs", 0, NULL [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] <... mount resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] <... futex resumed>) = 0 [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] <... futex resumed>) = 0 [pid 5631] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] mount(NULL, "./sys", "sysfs", 0, NULL [pid 5629] <... futex resumed>) = 0 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] <... mount resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5629] <... futex resumed>) = 0 [pid 5631] openat(AT_FDCWD, "./sys/module/msr/parameters/allow_writes", O_RDWR [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] <... openat resumed>) = 3 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] write(3, "on", 2 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] <... write resumed>) = 2 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5631] openat(AT_FDCWD, "./dev/cpu/1/msr", O_RDWR [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] <... openat resumed>) = 4 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5629] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] <... futex resumed>) = 0 [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] openat(AT_FDCWD, "./sys/devices/system/cpu/cpu1/online", O_RDWR [pid 5629] <... futex resumed>) = 0 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5631] <... openat resumed>) = 5 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] futex(0x7f2ca56d2b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5631] write(5, "0", 1 [pid 5629] <... futex resumed>) = 0 [pid 5629] futex(0x7f2ca56d2b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5629] futex(0x7f2ca56d2b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2ca55b9000 [pid 5629] mprotect(0x7f2ca55ba000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5629] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2ca55d9990, parent_tid=0x7f2ca55d9990, exit_signal=0, stack=0x7f2ca55b9000, stack_size=0x202c0, tls=0x7f2ca55d96c0}ci2-upstream-fs/strace-static-x86_64: Process 5632 attached => {parent_tid=[5632]}, 88) = 5632 [pid 5632] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5629] futex(0x7f2ca56d2b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... rseq resumed>) = 0 [pid 5629] <... futex resumed>) = 0 [pid 5632] set_robust_list(0x7f2ca55d99a0, 24 [pid 5629] futex(0x7f2ca56d2b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] <... set_robust_list resumed>) = 0 [pid 5632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5632] pwrite64(4, "\x00\x00\x00\x00\x00\x00\x00\x00", 8, 416) = 8 [pid 5632] futex(0x7f2ca56d2b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5629] futex(0x7f2ca56d2b58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5629] futex(0x7f2ca56d2b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] write(5, "1", 1 [pid 5629] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5631] <... write resumed>) = 1 [pid 5631] futex(0x7f2ca56d2b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 106.511182][ T5631] smpboot: CPU 1 is now offline [pid 5631] futex(0x7f2ca56d2b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] exit_group(0 [pid 5631] <... futex resumed>) = ? [pid 5631] +++ exited with 0 +++ [pid 5629] <... exit_group resumed>) = ? [ 106.558667][ T5632] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 106.559319][ T0] Disabled fast string operations [ 106.559379][ T0] ------------[ cut here ]------------ [ 106.559386][ T0] alternatives_patched [ 106.559393][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x416/0x450, CPU#1: swapper/1/0 [ 106.559437][ T0] Modules linked in: [ 106.559452][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT_{RT,(full)} [ 106.559469][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 106.559473][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.559480][ T0] RIP: 0010:do_clear_cpu_cap+0x416/0x450 [ 106.559494][ T0] Code: 00 00 00 75 2d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c 42 d8 09 cc e8 d6 8c 56 00 90 0f 0b 90 eb 94 e8 cb 8c 56 00 90 <0f> 0b 90 e9 06 fd ff ff e8 dd 75 d4 09 48 c7 c1 58 83 af 8f 80 e1 [ 106.559504][ T0] RSP: 0000:ffffc900001d7ba0 EFLAGS: 00010093 [ 106.559543][ T0] RAX: ffffffff816f4e25 RBX: dffffc0000000001 RCX: ffff88801cec8000 [ 106.559552][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.559559][ T0] RBP: ffffc900001d7cd8 R08: 0000000000000000 R09: 0000000000000000 [ 106.559567][ T0] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 0000000000000070 [ 106.559575][ T0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000070 [ 106.559582][ T0] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 106.559592][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.559600][ T0] CR2: 0000000000000000 CR3: 000000000dfb0000 CR4: 00000000003506b0 [ 106.559611][ T0] Call Trace: [ 106.559616][ T0] [ 106.559623][ T0] ? _printk+0xdd/0x130 [ 106.559638][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 106.559653][ T0] ? __pfx__printk+0x10/0x10 [ 106.559667][ T0] ? cpu_parse_topology+0x284/0x4a0 [ 106.559682][ T0] ? __lock_acquire+0x683/0x2ce0 [ 106.559699][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 106.559717][ T0] early_init_intel+0xb3d/0xea0 [ 106.559735][ T0] init_intel+0x28/0x780 [ 106.559750][ T0] identify_cpu+0xc7a/0x3660 [ 106.559775][ T0] identify_secondary_cpu+0xaa/0x160 [ 106.559793][ T0] ap_starting+0x9c/0x150 [ 106.559810][ T0] ? __pfx_ap_starting+0x10/0x10 [ 106.559827][ T0] ? slow_virt_to_phys+0x197/0x230 [ 106.559849][ T0] start_secondary+0x66/0x110 [ 106.559865][ T0] common_startup_64+0x13e/0x157 [ 106.559893][ T0] [ 106.559900][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.559910][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S syzkaller #0 PREEMPT_{RT,(full)} [ 106.559925][ T0] Tainted: [S]=CPU_OUT_OF_SPEC [ 106.559929][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.559936][ T0] Call Trace: [ 106.559940][ T0] [ 106.559945][ T0] vpanic+0x56c/0xa60 [ 106.559957][ T0] ? __pfx__printk+0x10/0x10 [ 106.559970][ T0] ? __pfx_vpanic+0x10/0x10 [ 106.559981][ T0] ? is_bpf_text_address+0x292/0x2b0 [ 106.559995][ T0] ? is_bpf_text_address+0x26/0x2b0 [ 106.560015][ T0] panic+0xc5/0xd0 [ 106.560026][ T0] ? __pfx_panic+0x10/0x10 [ 106.560042][ T0] ? common_startup_64+0x13e/0x157 [ 106.560058][ T0] __warn+0x315/0x4c0 [ 106.560069][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 106.560082][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 106.560095][ T0] __report_bug+0x276/0x570 [ 106.560118][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 106.560132][ T0] ? __pfx___report_bug+0x10/0x10 [ 106.560147][ T0] ? __pfx_vprintk_store+0x10/0x10 [ 106.560167][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 106.560180][ T0] report_bug+0x16a/0x220 [ 106.560194][ T0] ? do_clear_cpu_cap+0x416/0x450 [ 106.560205][ T0] ? do_clear_cpu_cap+0x418/0x450 [ 106.560217][ T0] handle_bug+0x9c/0x200 [ 106.560233][ T0] exc_invalid_op+0x1a/0x50 [ 106.560249][ T0] asm_exc_invalid_op+0x1a/0x20 [ 106.560260][ T0] RIP: 0010:do_clear_cpu_cap+0x416/0x450 [ 106.560273][ T0] Code: 00 00 00 75 2d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c 42 d8 09 cc e8 d6 8c 56 00 90 0f 0b 90 eb 94 e8 cb 8c 56 00 90 <0f> 0b 90 e9 06 fd ff ff e8 dd 75 d4 09 48 c7 c1 58 83 af 8f 80 e1 [ 106.560283][ T0] RSP: 0000:ffffc900001d7ba0 EFLAGS: 00010093 [ 106.560293][ T0] RAX: ffffffff816f4e25 RBX: dffffc0000000001 RCX: ffff88801cec8000 [ 106.560301][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.560308][ T0] RBP: ffffc900001d7cd8 R08: 0000000000000000 R09: 0000000000000000 [ 106.560316][ T0] R10: dffffc0000000000 R11: ffffed10170e4903 R12: 0000000000000070 [ 106.560324][ T0] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000070 [ 106.560335][ T0] ? do_clear_cpu_cap+0x415/0x450 [ 106.560353][ T0] ? _printk+0xdd/0x130 [ 106.560366][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 106.560380][ T0] ? __pfx__printk+0x10/0x10 [ 106.560394][ T0] ? cpu_parse_topology+0x284/0x4a0 [ 106.560408][ T0] ? __lock_acquire+0x683/0x2ce0 [ 106.560421][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 106.560438][ T0] early_init_intel+0xb3d/0xea0 [ 106.560455][ T0] init_intel+0x28/0x780 [ 106.560470][ T0] identify_cpu+0xc7a/0x3660 [ 106.560494][ T0] identify_secondary_cpu+0xaa/0x160 [ 106.560519][ T0] ap_starting+0x9c/0x150 [ 106.560536][ T0] ? __pfx_ap_starting+0x10/0x10 [ 106.560552][ T0] ? slow_virt_to_phys+0x197/0x230 [ 106.560573][ T0] start_secondary+0x66/0x110 [ 106.560590][ T0] common_startup_64+0x13e/0x157 [ 106.560610][ T0] [ 107.656793][ T0] Shutting down cpus with NMI [ 107.657092][ T0] Kernel Offset: disabled