Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts.
2024/12/05 03:07:27 ignoring optional flag "sandboxArg"="0"
2024/12/05 03:07:28 parsed 1 programs
[ 56.452056][ T29] audit: type=1400 audit(1733368048.335:122): avc: denied { unlink } for pid=1879 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 56.517111][ T1879] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 56.952354][ T29] audit: type=1401 audit(1733368048.835:123): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2024/12/05 03:07:29 executed programs: 0
[ 57.987687][ T29] audit: type=1400 audit(1733368049.865:124): avc: denied { read } for pid=2409 comm="syz.2.17" name="msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 58.010158][ T29] audit: type=1400 audit(1733368049.865:125): avc: denied { open } for pid=2409 comm="syz.2.17" path="/dev/cpu/0/msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 58.078968][ T29] audit: type=1400 audit(1733368049.925:126): avc: denied { execute } for pid=2409 comm="syz.2.17" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
2024/12/05 03:07:34 executed programs: 84
2024/12/05 03:07:39 executed programs: 236
2024/12/05 03:07:45 executed programs: 401
2024/12/05 03:07:50 executed programs: 512
2024/12/05 03:07:55 executed programs: 673
2024/12/05 03:08:00 executed programs: 822
2024/12/05 03:08:05 executed programs: 915
2024/12/05 03:08:10 executed programs: 1114
2024/12/05 03:08:15 executed programs: 1307
2024/12/05 03:08:20 executed programs: 1499
2024/12/05 03:08:25 executed programs: 1660
2024/12/05 03:08:30 executed programs: 1911
2024/12/05 03:08:42 executed programs: 2098
2024/12/05 03:08:47 executed programs: 2286
2024/12/05 03:08:53 executed programs: 2474
2024/12/05 03:08:58 executed programs: 2628
2024/12/05 03:09:03 executed programs: 2844
2024/12/05 03:09:08 executed programs: 3002
2024/12/05 03:09:13 executed programs: 3148
2024/12/05 03:09:18 executed programs: 3318
2024/12/05 03:09:23 executed programs: 3576
2024/12/05 03:09:28 executed programs: 3780
2024/12/05 03:09:33 executed programs: 3978
2024/12/05 03:09:38 executed programs: 4140
2024/12/05 03:09:43 executed programs: 4394
2024/12/05 03:09:48 executed programs: 4658
2024/12/05 03:09:53 executed programs: 4917
2024/12/05 03:09:58 executed programs: 5164
2024/12/05 03:10:03 executed programs: 5422
2024/12/05 03:10:08 executed programs: 5697
[ 219.931806][ T30] INFO: task syz.2.116:4686 blocked for more than 143 seconds.
[ 219.939382][ T30] Not tainted 6.13.0-rc1-syzkaller #0
[ 219.945286][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 219.953928][ T30] task:syz.2.116 state:D stack:13288 pid:4686 tgid:4686 ppid:1915 flags:0x00000004
[ 219.964090][ T30] Call Trace:
[ 219.967343][ T30]
[ 219.970257][ T30] __schedule+0x4c4/0xac0
[ 219.974589][ T30] schedule+0x25/0x110
[ 219.978624][ T30] io_schedule+0x41/0x60
[ 219.982851][ T30] folio_wait_bit_common+0x136/0x380
[ 219.988106][ T30] ? __pfx_wake_page_function+0x10/0x10
[ 219.993635][ T30] __filemap_get_folio+0x196/0x2f0
[ 219.998712][ T30] hugetlb_fault+0x7e6/0xc10
[ 220.003276][ T30] handle_mm_fault+0x351/0x360
[ 220.008007][ T30] exc_page_fault+0x256/0x6e0
[ 220.012667][ T30] asm_exc_page_fault+0x26/0x30
[ 220.017489][ T30] RIP: 0033:0x7f503a767208
[ 220.021920][ T30] RSP: 002b:00007ffe0561d258 EFLAGS: 00010246
[ 220.027972][ T30] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564
[ 220.035925][ T30] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640
[ 220.043884][ T30] RBP: 00007f503a957a80 R08: 00007f503a61a000 R09: 0000000000000001
[ 220.051856][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000000fac1
[ 220.059807][ T30] R13: 00007ffe0561d360 R14: 0000000000000032 R15: fffffffffffffffe
[ 220.067762][ T30]
[ 220.094628][ T30] INFO: task syz.2.116:4687 blocked for more than 143 seconds.
[ 220.102184][ T30] Not tainted 6.13.0-rc1-syzkaller #0
[ 220.108062][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 220.116715][ T30] task:syz.2.116 state:D stack:14072 pid:4687 tgid:4686 ppid:1915 flags:0x00004006
[ 220.126852][ T30] Call Trace:
[ 220.130117][ T30]
[ 220.133055][ T30] __schedule+0x4c4/0xac0
[ 220.137359][ T30] schedule+0x25/0x110
[ 220.141394][ T30] schedule_preempt_disabled+0x13/0x30
[ 220.146851][ T30] __mutex_lock+0x573/0xa80
[ 220.151326][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 220.155806][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 220.160275][ T30] hugetlb_wp+0x6ff/0xc90
[ 220.164581][ T30] hugetlb_fault+0xa9e/0xc10
[ 220.169138][ T30] handle_mm_fault+0x351/0x360
[ 220.173916][ T30] exc_page_fault+0x161/0x6e0
[ 220.178568][ T30] asm_exc_page_fault+0x26/0x30
[ 220.183465][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70
[ 220.189238][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 220.208870][ T30] RSP: 0018:ffffc900020afde0 EFLAGS: 00050246
[ 220.214947][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008
[ 220.222921][ T30] RDX: 0000000020031db8 RSI: ffffc900020afe10 RDI: 0000000020031db0
[ 220.230896][ T30] RBP: 0000000020031db0 R08: 0000000000080000 R09: 0000000000000000
[ 220.238877][ T30] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900020afe10
[ 220.246848][ T30] R13: 0000000000018ff8 R14: 0000000020019680 R15: 0000000000000000
[ 220.254818][ T30] _copy_to_user+0x56/0x70
[ 220.259205][ T30] msr_read+0x68/0xe0
[ 220.263188][ T30] vfs_read+0xe0/0x370
[ 220.267225][ T30] ? fdget_pos+0x166/0x1b0
[ 220.271608][ T30] ksys_read+0x6f/0xf0
[ 220.275686][ T30] do_syscall_64+0x6d/0x170
[ 220.280164][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 220.286057][ T30] RIP: 0033:0x7f503a79dff9
[ 220.290437][ T30] RSP: 002b:00007f503a219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 220.298872][ T30] RAX: ffffffffffffffda RBX: 00007f503a955f80 RCX: 00007f503a79dff9
[ 220.306836][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003
[ 220.314809][ T30] RBP: 00007f503a810296 R08: 0000000000000000 R09: 0000000000000000
[ 220.322782][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 220.330724][ T30] R13: 0000000000000000 R14: 00007f503a955f80 R15: 00007ffe0561d0f8
[ 220.338692][ T30]
[ 220.346949][ T30] INFO: task syz.1.124:4731 blocked for more than 143 seconds.
[ 220.354506][ T30] Not tainted 6.13.0-rc1-syzkaller #0
[ 220.360364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 220.369020][ T30] task:syz.1.124 state:D stack:13352 pid:4731 tgid:4725 ppid:2412 flags:0x00004004
[ 220.379155][ T30] Call Trace:
[ 220.382425][ T30]
[ 220.385329][ T30] __schedule+0x4c4/0xac0
[ 220.389627][ T30] schedule+0x25/0x110
[ 220.393683][ T30] schedule_preempt_disabled+0x13/0x30
[ 220.399117][ T30] __mutex_lock+0x573/0xa80
[ 220.403601][ T30] ? hugetlbfs_fallocate+0x205/0x680
[ 220.408862][ T30] ? hugetlbfs_fallocate+0x205/0x680
[ 220.414128][ T30] ? __cond_resched+0x1b/0x30
[ 220.418775][ T30] hugetlbfs_fallocate+0x205/0x680
[ 220.423876][ T30] vfs_fallocate+0x121/0x3b0
[ 220.428436][ T30] __x64_sys_fallocate+0x3e/0x80
[ 220.433362][ T30] do_syscall_64+0x6d/0x170
[ 220.437839][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 220.443727][ T30] RIP: 0033:0x7fea5742dff9
[ 220.448116][ T30] RSP: 002b:00007fea56e88038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 220.456509][ T30] RAX: ffffffffffffffda RBX: 00007fea575e6058 RCX: 00007fea5742dff9
[ 220.464462][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 220.472403][ T30] RBP: 00007fea574a0296 R08: 0000000000000000 R09: 0000000000000000
[ 220.480343][ T30] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000
[ 220.488292][ T30] R13: 0000000000000000 R14: 00007fea575e6058 R15: 00007fffb2a24538
[ 220.496242][ T30]
[ 220.503316][ T30] INFO: task syz.4.155:4868 blocked for more than 143 seconds.
[ 220.510852][ T30] Not tainted 6.13.0-rc1-syzkaller #0
[ 220.516726][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 220.525370][ T30] task:syz.4.155 state:D stack:14120 pid:4868 tgid:4866 ppid:2418 flags:0x00000004
[ 220.535527][ T30] Call Trace:
[ 220.538784][ T30]
[ 220.541699][ T30] __schedule+0x4c4/0xac0
[ 220.546032][ T30] schedule+0x25/0x110
[ 220.550066][ T30] schedule_preempt_disabled+0x13/0x30
[ 220.555540][ T30] __mutex_lock+0x573/0xa80
[ 220.560017][ T30] ? hugetlbfs_fallocate+0x205/0x680
[ 220.565320][ T30] ? hugetlbfs_fallocate+0x205/0x680
[ 220.570583][ T30] hugetlbfs_fallocate+0x205/0x680
[ 220.575730][ T30] vfs_fallocate+0x121/0x3b0
[ 220.580287][ T30] __x64_sys_fallocate+0x3e/0x80
[ 220.585222][ T30] do_syscall_64+0x6d/0x170
[ 220.589700][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 220.595594][ T30] RIP: 0033:0x7f04188adff9
[ 220.599978][ T30] RSP: 002b:00007f041832f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 220.608385][ T30] RAX: ffffffffffffffda RBX: 00007f0418a65f80 RCX: 00007f04188adff9
[ 220.616348][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 220.624346][ T30] RBP: 00007f0418920296 R08: 0000000000000000 R09: 0000000000000000
[ 220.632318][ T30] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000
[ 220.640259][ T30] R13: 0000000000000000 R14: 00007f0418a65f80 R15: 00007ffee0c8b558
[ 220.648227][ T30]
[ 220.651654][ T30] INFO: task syz.0.385:5831 blocked for more than 144 seconds.
[ 220.659221][ T30] Not tainted 6.13.0-rc1-syzkaller #0
[ 220.665095][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 220.673748][ T30] task:syz.0.385 state:D stack:13952 pid:5831 tgid:5831 ppid:2406 flags:0x00000004
[ 220.683890][ T30] Call Trace:
[ 220.687143][ T30]
[ 220.690049][ T30] __schedule+0x4c4/0xac0
[ 220.694373][ T30] schedule+0x25/0x110
[ 220.698419][ T30] io_schedule+0x41/0x60
[ 220.702638][ T30] folio_wait_bit_common+0x136/0x380
[ 220.707898][ T30] ? __pfx_wake_page_function+0x10/0x10
[ 220.713431][ T30] __filemap_get_folio+0x196/0x2f0
[ 220.718519][ T30] hugetlb_fault+0x7e6/0xc10
[ 220.723097][ T30] handle_mm_fault+0x351/0x360
[ 220.727832][ T30] exc_page_fault+0x256/0x6e0
[ 220.732486][ T30] asm_exc_page_fault+0x26/0x30
[ 220.737304][ T30] RIP: 0033:0x7f3ef1b47208
[ 220.741687][ T30] RSP: 002b:00007ffc4b66a518 EFLAGS: 00010246
[ 220.747771][ T30] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564
[ 220.755735][ T30] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640
[ 220.763701][ T30] RBP: 00007f3ef1d37a80 R08: 00007f3ef1a00000 R09: 0000000000000001
[ 220.771641][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000011b02
[ 220.779593][ T30] R13: 00007ffc4b66a620 R14: 0000000000000032 R15: fffffffffffffffe
[ 220.787571][ T30]
[ 220.790617][ T30] INFO: task syz.0.385:5832 blocked for more than 144 seconds.
[ 220.798150][ T30] Not tainted 6.13.0-rc1-syzkaller #0
[ 220.804031][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 220.812680][ T30] task:syz.0.385 state:D stack:13888 pid:5832 tgid:5831 ppid:2406 flags:0x00004004
[ 220.822813][ T30] Call Trace:
[ 220.826071][ T30]
[ 220.828979][ T30] __schedule+0x4c4/0xac0
[ 220.833297][ T30] schedule+0x25/0x110
[ 220.837396][ T30] schedule_preempt_disabled+0x13/0x30
[ 220.842831][ T30] __mutex_lock+0x573/0xa80
[ 220.847302][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 220.851781][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 220.856250][ T30] hugetlb_wp+0x6ff/0xc90
[ 220.860553][ T30] hugetlb_fault+0xa9e/0xc10
[ 220.865143][ T30] handle_mm_fault+0x351/0x360
[ 220.869876][ T30] exc_page_fault+0x161/0x6e0
[ 220.874533][ T30] asm_exc_page_fault+0x26/0x30
[ 220.879351][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70
[ 220.885133][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 220.904724][ T30] RSP: 0018:ffffc90003147de0 EFLAGS: 00050246
[ 220.910766][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008
[ 220.918726][ T30] RDX: 0000000020020410 RSI: ffffc90003147e10 RDI: 0000000020020408
[ 220.926707][ T30] RBP: 0000000020020408 R08: 0000000000080000 R09: 0000000000000000
[ 220.934660][ T30] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90003147e10
[ 220.942604][ T30] R13: 0000000000018ff8 R14: 0000000020019680 R15: 0000000000000000
[ 220.950556][ T30] _copy_to_user+0x56/0x70
[ 220.954964][ T30] msr_read+0x68/0xe0
[ 220.958914][ T30] vfs_read+0xe0/0x370
[ 220.962959][ T30] ? fdget_pos+0x166/0x1b0
[ 220.967342][ T30] ksys_read+0x6f/0xf0
[ 220.971375][ T30] do_syscall_64+0x6d/0x170
[ 220.975861][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 220.981725][ T30] RIP: 0033:0x7f3ef1b7dff9
[ 220.986143][ T30] RSP: 002b:00007f3ef15ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 220.994535][ T30] RAX: ffffffffffffffda RBX: 00007f3ef1d35f80 RCX: 00007f3ef1b7dff9
[ 221.002496][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003
[ 221.010438][ T30] RBP: 00007f3ef1bf0296 R08: 0000000000000000 R09: 0000000000000000
[ 221.018404][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 221.026403][ T30] R13: 0000000000000000 R14: 00007f3ef1d35f80 R15: 00007ffc4b66a3b8
[ 221.034378][ T30]
[ 221.039358][ T30]
[ 221.039358][ T30] Showing all locks held in the system:
[ 221.047081][ T30] 2 locks held by kworker/u8:0/11:
[ 221.052165][ T30] #0: ffff888100078948 ((wq_completion)events_unbound){....}-{0:0}, at: process_one_work+0x43e/0x6b0
[ 221.063085][ T30] #1: ffffc90000063e58 ((work_completion)(&sub_info->work)){....}-{0:0}, at: process_one_work+0x1ec/0x6b0
[ 221.074509][ T30] 1 lock held by khungtaskd/30:
[ 221.079323][ T30] #0: ffffffff8277d4c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120
[ 221.089131][ T30] 2 locks held by getty/840:
[ 221.093704][ T30] #0: ffff8881032c68a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60
[ 221.103426][ T30] #1: ffffc90001c8f2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x54b/0x6a0
[ 221.113395][ T30] 3 locks held by syz.2.116/4686:
[ 221.118386][ T30] #0: ffff88810faebce8 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 221.128538][ T30] #1: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc2/0xc10
[ 221.139106][ T30] #2: ffff888108f160e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xca/0xc10
[ 221.148731][ T30] 2 locks held by syz.2.116/4687:
[ 221.153737][ T30] #0: ffff8881082ab7e0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x280
[ 221.163626][ T30] #1: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x6ff/0xc90
[ 221.174042][ T30] 3 locks held by syz.1.124/4731:
[ 221.179032][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.188665][ T30] #1: ffff8881022ad7c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.199630][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.210812][ T30] 3 locks held by syz.4.155/4868:
[ 221.215828][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.225461][ T30] #1: ffff8881022ac5c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.236386][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.247579][ T30] 3 locks held by syz.0.385/5831:
[ 221.252583][ T30] #0: ffff88810fad4238 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 221.262722][ T30] #1: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc2/0xc10
[ 221.273295][ T30] #2: ffff888108f118e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xca/0xc10
[ 221.283362][ T30] 2 locks held by syz.0.385/5832:
[ 221.288359][ T30] #0: ffff888102fb13e0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x280
[ 221.298250][ T30] #1: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x6ff/0xc90
[ 221.308649][ T30] 3 locks held by syz.4.560/7935:
[ 221.313655][ T30] #0: ffff88810eaf56f8 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 221.323796][ T30] #1: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc2/0xc10
[ 221.334379][ T30] #2: ffff888108f094e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xca/0xc10
[ 221.344000][ T30] 2 locks held by syz.4.560/7936:
[ 221.348993][ T30] #0: ffff8881073740e0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x280
[ 221.358891][ T30] #1: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x6ff/0xc90
[ 221.369292][ T30] 2 locks held by syz.1.565/7956:
[ 221.374299][ T30] #0: ffff8881073737e0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x98/0x280
[ 221.384174][ T30] #1: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc2/0xc10
[ 221.394752][ T30] 3 locks held by syz.1.565/7960:
[ 221.399744][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.409382][ T30] #1: ffff8881022aee48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.420306][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.431508][ T30] 3 locks held by syz.3.575/7995:
[ 221.436512][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.446134][ T30] #1: ffff8881022af2c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.457055][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.468236][ T30] 3 locks held by syz.2.730/9071:
[ 221.473236][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.482855][ T30] #1: ffff88810cf20a48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.493785][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.504966][ T30] 2 locks held by syz.0.903/10678:
[ 221.510044][ T30] #0: ffff88810d74a6f8 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 221.520232][ T30] #1: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc2/0xc10
[ 221.530809][ T30] 3 locks held by syz.0.903/10706:
[ 221.535898][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.545518][ T30] #1: ffff88810cf23bc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.556453][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.567647][ T30] 3 locks held by syz.4.1195/12700:
[ 221.572831][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.582468][ T30] #1: ffff88810cf2a9c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.593395][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.604577][ T30] 3 locks held by syz.3.1197/12694:
[ 221.609743][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.619384][ T30] #1: ffff88810cf2ae48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.630315][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.641516][ T30] 3 locks held by syz.1.1248/12879:
[ 221.646713][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.656340][ T30] #1: ffff88810cf2bbc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.667259][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.678460][ T30] 3 locks held by syz.4.1906/16999:
[ 221.683666][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
2024/12/05 03:10:13 executed programs: 5896
[ 221.693291][ T30] #1: ffff88810cfd57c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.704246][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.715430][ T30] 3 locks held by syz.2.1907/17001:
[ 221.720593][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.730226][ T30] #1: ffff88810cfd5c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.741150][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.752347][ T30] 3 locks held by syz.1.1909/17017:
[ 221.757519][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.767203][ T30] #1: ffff88810cfd60c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.778133][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.789323][ T30] 3 locks held by syz.0.1920/17053:
[ 221.794513][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.804128][ T30] #1: ffff88810cfd69c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.815056][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.826247][ T30] 3 locks held by syz.3.2102/17616:
[ 221.831415][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.841032][ T30] #1: ffff88810cfd72c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.852046][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.863234][ T30] 3 locks held by syz.2.2185/19740:
[ 221.868398][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.878012][ T30] #1: ffff88810c7ec5c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.888934][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.900110][ T30] 3 locks held by syz.0.2192/19767:
[ 221.905290][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.914912][ T30] #1: ffff88810c7ed7c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.925836][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.937015][ T30] 3 locks held by syz.1.2197/19784:
[ 221.942206][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.951832][ T30] #1: ffff88810c7ee0c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.962768][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 221.973958][ T30] 3 locks held by syz.4.2790/23684:
[ 221.979127][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 221.988761][ T30] #1: ffff88810f764148 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 221.999682][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 222.010867][ T30] 3 locks held by syz.0.2793/23695:
[ 222.016043][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 222.025668][ T30] #1: ffff88810f764ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 222.036605][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 222.047793][ T30] 3 locks held by syz.2.2795/23702:
[ 222.052983][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 222.062603][ T30] #1: ffff88810f765348 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 222.073569][ T30] #2: ffff888101ac4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 222.084760][ T30] 3 locks held by syz.3.2814/23768:
[ 222.089925][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 222.099571][ T30] #1: ffff88810f767bc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 222.110499][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 222.121698][ T30] 3 locks held by syz.2.3596/28389:
[ 222.126876][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 222.136508][ T30] #1: ffff888110395c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 222.147518][ T30] #2: ffff888101ac4068 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 222.158705][ T30] 3 locks held by syz.3.3597/28404:
[ 222.163887][ T30] #0: ffff8881026e53f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 222.173511][ T30] #1: ffff888110396548 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 222.184452][ T30] #2: ffff888101ac40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 222.195641][ T30]
[ 222.197947][ T30] =============================================
[ 222.197947][ T30]
[ 222.206358][ T30] NMI backtrace for cpu 1
[ 222.210664][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller #0
[ 222.219390][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 222.229416][ T30] Call Trace:
[ 222.232670][ T30]
[ 222.235574][ T30] dump_stack_lvl+0x5a/0x90
[ 222.240049][ T30] nmi_cpu_backtrace+0xd4/0x110
[ 222.244866][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 222.250815][ T30] nmi_trigger_cpumask_backtrace+0xd5/0x140
[ 222.256679][ T30] watchdog+0x63b/0x670
[ 222.260808][ T30] ? watchdog+0x1e8/0x670
[ 222.265112][ T30] ? __pfx_watchdog+0x10/0x10
[ 222.269758][ T30] kthread+0xd6/0x100
[ 222.273708][ T30] ? __pfx_kthread+0x10/0x10
[ 222.278350][ T30] ret_from_fork+0x2c/0x50
[ 222.282745][ T30] ? __pfx_kthread+0x10/0x10
[ 222.287302][ T30] ret_from_fork_asm+0x1a/0x30
[ 222.292032][ T30]
[ 222.295059][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 222.300242][ C0] NMI backtrace for cpu 0
[ 222.300246][ C0] CPU: 0 UID: 0 PID: 522 Comm: kworker/u8:5 Not tainted 6.13.0-rc1-syzkaller #0
[ 222.300249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 222.300251][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 222.300257][ C0] RIP: 0010:default_send_IPI_single_phys+0x52/0xd0
[ 222.300261][ C0] Code: 00 c3 5f ff f6 c4 10 74 7d f3 90 8b 04 25 00 c3 5f ff f6 c4 10 75 f2 89 e8 c1 e0 18 89 04 25 10 c3 5f ff 89 34 25 00 c3 5f ff <9c> 58 f6 c4 02 75 4e 80 e7 02 74 01 fb 5b 5d 41 5c c3 cc cc cc cc
[ 222.300263][ C0] RSP: 0018:ffffc90001543c98 EFLAGS: 00000006
[ 222.300265][ C0] RAX: 00000000000000fb RBX: 0000000000000202 RCX: 0000000000000002
[ 222.300266][ C0] RDX: ffff888237d00000 RSI: 00000000000000fb RDI: 0000000000000001
[ 222.300268][ C0] RBP: 0000000001000000 R08: 000000000002dc0c R09: ffffffff812bec28
[ 222.300270][ C0] R10: ffffc90001543d8c R11: ffffffff8303ee0a R12: 0000000000000000
[ 222.300271][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 222.300273][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[ 222.300277][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 222.300278][ C0] CR2: 00007f402c376440 CR3: 000000000264a000 CR4: 00000000003506f0
[ 222.300280][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 222.300281][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 222.300282][ C0] Call Trace:
[ 222.300283][ C0]
[ 222.300284][ C0] ? nmi_cpu_backtrace+0x8f/0x110
[ 222.300289][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20
[ 222.300292][ C0] ? nmi_handle+0xb8/0x1a0
[ 222.300296][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 222.300298][ C0] ? default_do_nmi+0x69/0x2f0
[ 222.300301][ C0] ? exc_nmi+0x152/0x190
[ 222.300302][ C0] ? end_repeat_nmi+0xf/0x53
[ 222.300306][ C0] ? __kmalloc_node_track_caller_noprof+0xd8/0x560
[ 222.300311][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 222.300312][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 222.300314][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 222.300316][ C0]
[ 222.300317][ C0]
[ 222.300317][ C0] smp_call_function_many_cond+0x5a4/0x640
[ 222.300322][ C0] ? __pfx_do_sync_core+0x10/0x10
[ 222.300326][ C0] ? __pfx_do_sync_core+0x10/0x10
[ 222.300328][ C0] on_each_cpu_cond_mask+0x3b/0x70
[ 222.300331][ C0] ? __kmalloc_node_track_caller_noprof+0xd9/0x560
[ 222.300333][ C0] text_poke_bp_batch+0x1fe/0x310
[ 222.300337][ C0] text_poke_finish+0x1a/0x30
[ 222.300340][ C0] arch_jump_label_transform_apply+0x17/0x30
[ 222.300342][ C0] static_key_disable_cpuslocked+0x4f/0x60
[ 222.300346][ C0] static_key_disable+0x15/0x20
[ 222.300349][ C0] toggle_allocation_gate+0x75/0x130
[ 222.300352][ C0] ? __pfx_autoremove_wake_function+0x10/0x10
[ 222.300356][ C0] process_one_work+0x22f/0x6b0
[ 222.300359][ C0] worker_thread+0x1bc/0x350
[ 222.300362][ C0] ? _raw_spin_unlock_irqrestore+0x3c/0x70
[ 222.300365][ C0] ? __pfx_worker_thread+0x10/0x10
[ 222.300367][ C0] kthread+0xd6/0x100
[ 222.300370][ C0] ? __pfx_kthread+0x10/0x10
[ 222.300372][ C0] ret_from_fork+0x2c/0x50
[ 222.300375][ C0] ? __pfx_kthread+0x10/0x10
[ 222.300377][ C0] ret_from_fork_asm+0x1a/0x30
[ 222.300381][ C0]
[ 222.301228][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 222.628941][ T30] Kernel Offset: disabled
[ 222.633228][ T30] Rebooting in 86400 seconds..