------------[ cut here ]------------
CPU 0 old state 2 new state 1
WARNING: CPU: 0 PID: 8910 at kernel/rcu/srcutree.c:702 srcu_check_nmi_safety+0xca/0x150 kernel/rcu/srcutree.c:702
Modules linked in:
CPU: 0 PID: 8910 Comm: syz-executor.3 Not tainted 6.9.0-next-20240521-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:srcu_check_nmi_safety+0xca/0x150 kernel/rcu/srcutree.c:702
Code: 81 c3 c8 01 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 77 8b 33 48 c7 c7 20 f6 cb 8b 89 ea 44 89 f9 e8 e7 60 dc ff 90 <0f> 0b 90 90 eb 0c 42 0f b6 04 23 84 c0 75 3d 45 89 3e 48 83 c4 08
RSP: 0018:ffffc90004917d00 EFLAGS: 00010246
RAX: ea0f267ac8213b00 RBX: ffffe8ffffc63a48 RCX: ffff8880114bbc00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000002 R08: ffffffff815877d2 R09: 1ffff1101728519a
R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000
R13: 0000607f46863880 R14: ffffe8ffffc638a0 R15: 0000000000000001
FS:  0000555586fc6480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31822000 CR3: 000000005fc2a000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 srcu_read_lock include/linux/srcu.h:213 [inline]
 kvm_mmu_notifier_release+0x2c/0xc0 arch/x86/kvm/../../../virt/kvm/kvm_main.c:911
 mmu_notifier_unregister+0x131/0x3c0 mm/mmu_notifier.c:813
 kvm_destroy_vm arch/x86/kvm/../../../virt/kvm/kvm_main.c:1323 [inline]
 kvm_put_kvm+0xc9e/0x1300 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1380
 kvm_vm_release+0x46/0x50 arch/x86/kvm/../../../virt/kvm/kvm_main.c:1403
 __fput+0x406/0x8b0 fs/file_table.c:422
 __do_sys_close fs/open.c:1555 [inline]
 __se_sys_close fs/open.c:1540 [inline]
 __x64_sys_close+0x7f/0x110 fs/open.c:1540
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f8461c7bdda
Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24
RSP: 002b:00007ffd77efc840 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f8461c7bdda
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007ffd77efc918 R08: 00007f8461c00000 R09: 0000000000000001
R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000047bd0
R13: 00007f8461dac05c R14: 00007f8461dac050 R15: 0000000000000032
 </TASK>