syz.5.1011 calls setitimer() with new_value NULL pointer. Misfeature support will be removed loop5: detected capacity change from 0 to 2048 loop5: p1 < > ------------[ cut here ]------------ WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x350/0x744 kernel/rcu/srcutree.c:708, CPU#0: syz.5.1011/12023 Modules linked in: CPU: 0 UID: 0 PID: 12023 Comm: syz.5.1011 Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : cleanup_srcu_struct+0x350/0x744 kernel/rcu/srcutree.c:708 lr : cleanup_srcu_struct+0x2f0/0x744 kernel/rcu/srcutree.c:706 sp : ffff8000946e79c0 x29: ffff8000946e79f0 x28: 1fffe000186e845f x27: 1ffff000110c464a x26: dfff800000000000 x25: ffff80008979a960 x24: ffffffffffffffff x23: ffff80008f4c6ba0 x22: ffff0000c37422f8 x21: fffffdffbf776a80 x20: fffffdffbf776880 x19: 0000000000000000 x18: 1fffe000349f7028 x17: ffff8000803672f4 x16: ffff80008035fa5c x15: 0000000000000000 x14: 000000000094e0c1 x13: 0000000000000001 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000000ad94 x8 : 0000000000000003 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080533700 x2 : 0000000000000001 x1 : ffff0000d2db3b00 x0 : 0000000000000001 Call trace: cleanup_srcu_struct+0x350/0x744 kernel/rcu/srcutree.c:708 (P) blk_mq_free_tag_set+0x33c/0x438 block/blk-mq.c:4987 loop_add+0x688/0x8e4 drivers/block/loop.c:2130 loop_control_ioctl+0x138/0x510 drivers/block/loop.c:2243 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl fs/ioctl.c:583 [inline] __arm64_sys_ioctl+0x154/0x1cc fs/ioctl.c:583 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 irq event stamp: 421840 hardirqs last enabled at (421839): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:210 [inline] hardirqs last enabled at (421839): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:221 hardirqs last disabled at (421840): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:483 softirqs last enabled at (421450): [] softirq_handle_end kernel/softirq.c:491 [inline] softirqs last enabled at (421450): [] handle_softirqs+0xb2c/0xcbc kernel/softirq.c:673 softirqs last disabled at (421395): [] __do_softirq+0x14/0x20 kernel/softirq.c:679 ---[ end trace 0000000000000000 ]---