Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts.
2024/11/20 12:23:26 ignoring optional flag "sandboxArg"="0"
2024/11/20 12:23:26 parsed 1 programs
[ 50.012979][ T29] audit: type=1400 audit(1732105406.872:122): avc: denied { unlink } for pid=1878 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 50.097967][ T1878] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 50.491286][ T29] audit: type=1401 audit(1732105407.342:123): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 50.519784][ T1924] modprobe (1924) used greatest stack depth: 12280 bytes left
2024/11/20 12:23:28 executed programs: 0
[ 51.595924][ T29] audit: type=1400 audit(1732105408.452:124): avc: denied { read } for pid=2411 comm="syz.2.17" name="msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 51.618279][ T29] audit: type=1400 audit(1732105408.452:125): avc: denied { open } for pid=2411 comm="syz.2.17" path="/dev/cpu/0/msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 51.721146][ T2458] modprobe (2458) used greatest stack depth: 11936 bytes left
[ 51.762626][ T29] audit: type=1400 audit(1732105408.502:126): avc: denied { execute } for pid=2411 comm="syz.2.17" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
2024/11/20 12:23:33 executed programs: 88
2024/11/20 12:23:38 executed programs: 211
2024/11/20 12:23:43 executed programs: 333
2024/11/20 12:23:48 executed programs: 463
[ 72.301720][ T6689] modprobe (6689) used greatest stack depth: 11568 bytes left
2024/11/20 12:23:53 executed programs: 627
2024/11/20 12:23:58 executed programs: 804
2024/11/20 12:24:03 executed programs: 962
2024/11/20 12:24:14 executed programs: 1108
2024/11/20 12:24:19 executed programs: 1222
2024/11/20 12:24:24 executed programs: 1466
2024/11/20 12:24:29 executed programs: 1696
2024/11/20 12:24:38 executed programs: 1887
2024/11/20 12:24:43 executed programs: 2071
2024/11/20 12:24:48 executed programs: 2211
2024/11/20 12:24:53 executed programs: 2434
2024/11/20 12:24:58 executed programs: 2609
2024/11/20 12:25:03 executed programs: 2782
2024/11/20 12:25:08 executed programs: 2956
2024/11/20 12:25:13 executed programs: 3217
2024/11/20 12:25:18 executed programs: 3456
2024/11/20 12:25:23 executed programs: 3720
2024/11/20 12:25:28 executed programs: 3994
2024/11/20 12:25:33 executed programs: 4268
2024/11/20 12:25:38 executed programs: 4530
2024/11/20 12:25:43 executed programs: 4781
2024/11/20 12:25:48 executed programs: 5025
2024/11/20 12:25:53 executed programs: 5279
2024/11/20 12:25:58 executed programs: 5539
2024/11/20 12:26:03 executed programs: 5787
2024/11/20 12:26:08 executed programs: 6028
[ 212.892568][ T30] INFO: task syz.4.112:4562 blocked for more than 143 seconds.
[ 212.900125][ T30] Not tainted 6.12.0-syzkaller #0
[ 212.905685][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 212.914330][ T30] task:syz.4.112 state:D stack:14480 pid:4562 tgid:4562 ppid:2415 flags:0x00000004
[ 212.924517][ T30] Call Trace:
[ 212.927834][ T30]
[ 212.930742][ T30] __schedule+0x4c4/0xad0
[ 212.935156][ T30] schedule+0x25/0x110
[ 212.939272][ T30] io_schedule+0x41/0x60
[ 212.943518][ T30] folio_wait_bit_common+0x136/0x380
[ 212.948776][ T30] ? __pfx_wake_page_function+0x10/0x10
[ 212.954329][ T30] __filemap_get_folio+0x196/0x2f0
[ 212.959415][ T30] hugetlb_fault+0x782/0xc00
[ 212.964024][ T30] handle_mm_fault+0x351/0x360
[ 212.968766][ T30] exc_page_fault+0x256/0x6e0
[ 212.973449][ T30] asm_exc_page_fault+0x26/0x30
[ 212.978269][ T30] RIP: 0033:0x7f8a38c01629
[ 212.982697][ T30] RSP: 002b:00007ffc16596360 EFLAGS: 00010246
[ 212.988807][ T30] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffffff7fffff
[ 212.996867][ T30] RDX: a966f2d439001e60 RSI: 0000000020800000 RDI: 0000555577fe43c8
[ 213.004876][ T30] RBP: 00007f8a38ee7a80 R08: 00007f8a38bb0000 R09: 0000000000000008
[ 213.012869][ T30] R10: 0000000000000000 R11: 0000000000000003 R12: 000000000000e0fa
[ 213.020809][ T30] R13: 00007ffc16596460 R14: 0000000000000032 R15: fffffffffffffffe
[ 213.028811][ T30]
[ 213.037738][ T30] INFO: task syz.4.112:4569 blocked for more than 143 seconds.
[ 213.045287][ T30] Not tainted 6.12.0-syzkaller #0
[ 213.050807][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 213.059499][ T30] task:syz.4.112 state:D stack:13328 pid:4569 tgid:4562 ppid:2415 flags:0x00004004
[ 213.069656][ T30] Call Trace:
[ 213.072931][ T30]
[ 213.075835][ T30] __schedule+0x4c4/0xad0
[ 213.080139][ T30] schedule+0x25/0x110
[ 213.084224][ T30] schedule_preempt_disabled+0x13/0x30
[ 213.089658][ T30] __mutex_lock+0x54c/0xa40
[ 213.094180][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 213.098661][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 213.103167][ T30] hugetlb_wp+0x6ff/0xc90
[ 213.107469][ T30] hugetlb_fault+0xa4e/0xc00
[ 213.112030][ T30] handle_mm_fault+0x351/0x360
[ 213.116799][ T30] exc_page_fault+0x161/0x6e0
[ 213.121442][ T30] asm_exc_page_fault+0x26/0x30
[ 213.126317][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70
[ 213.132091][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 213.151707][ T30] RSP: 0018:ffffc90001cafde0 EFLAGS: 00050246
[ 213.157801][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008
[ 213.165786][ T30] RDX: 000000002001b408 RSI: ffffc90001cafe10 RDI: 000000002001b400
[ 213.173751][ T30] RBP: 000000002001b400 R08: 0000000000080000 R09: 0000000000000000
[ 213.181691][ T30] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc90001cafe10
[ 213.189677][ T30] R13: 0000000000018ff8 R14: 0000000020019680 R15: 0000000000000000
[ 213.197650][ T30] _copy_to_user+0x56/0x70
[ 213.202037][ T30] msr_read+0x68/0xe0
[ 213.206020][ T30] vfs_read+0xe0/0x370
[ 213.210057][ T30] ? fdget_pos+0x166/0x1b0
[ 213.214481][ T30] ? fdget_pos+0x166/0x1b0
[ 213.218869][ T30] ksys_read+0x6f/0xf0
[ 213.222944][ T30] do_syscall_64+0x6d/0x170
[ 213.227413][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 213.233298][ T30] RIP: 0033:0x7f8a38d2dff9
[ 213.237678][ T30] RSP: 002b:00007f8a387af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 213.246086][ T30] RAX: ffffffffffffffda RBX: 00007f8a38ee5f80 RCX: 00007f8a38d2dff9
[ 213.254067][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003
[ 213.262010][ T30] RBP: 00007f8a38da0296 R08: 0000000000000000 R09: 0000000000000000
[ 213.269994][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 213.277985][ T30] R13: 0000000000000000 R14: 00007f8a38ee5f80 R15: 00007ffc165961f8
[ 213.285969][ T30]
[ 213.297581][ T30] INFO: task syz.1.158:4754 blocked for more than 143 seconds.
[ 213.305155][ T30] Not tainted 6.12.0-syzkaller #0
[ 213.310679][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 213.319361][ T30] task:syz.1.158 state:D stack:13272 pid:4754 tgid:4754 ppid:2406 flags:0x00000004
[ 213.329508][ T30] Call Trace:
[ 213.332784][ T30]
[ 213.335692][ T30] __schedule+0x4c4/0xad0
[ 213.339991][ T30] schedule+0x25/0x110
[ 213.344056][ T30] io_schedule+0x41/0x60
[ 213.348308][ T30] folio_wait_bit_common+0x136/0x380
[ 213.353599][ T30] ? __pfx_wake_page_function+0x10/0x10
[ 213.359112][ T30] __filemap_get_folio+0x196/0x2f0
[ 213.364221][ T30] hugetlb_fault+0x782/0xc00
[ 213.368800][ T30] handle_mm_fault+0x351/0x360
[ 213.373564][ T30] exc_page_fault+0x256/0x6e0
[ 213.378208][ T30] asm_exc_page_fault+0x26/0x30
[ 213.383060][ T30] RIP: 0033:0x7fb232701629
[ 213.387440][ T30] RSP: 002b:00007ffcb70bae00 EFLAGS: 00010246
[ 213.393515][ T30] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffffff7fffff
[ 213.401457][ T30] RDX: d0950b2fba55acc8 RSI: 0000000020800000 RDI: 0000555581f8e3c8
[ 213.409443][ T30] RBP: 00007fb2329e7a80 R08: 00007fb2326aa000 R09: 0000000000000008
[ 213.417414][ T30] R10: 0000000000000000 R11: 0000000000000003 R12: 000000000000e81c
[ 213.425398][ T30] R13: 00007ffcb70baf00 R14: 0000000000000032 R15: fffffffffffffffe
[ 213.433375][ T30]
[ 213.442932][ T30] INFO: task syz.1.158:4755 blocked for more than 143 seconds.
[ 213.450478][ T30] Not tainted 6.12.0-syzkaller #0
[ 213.456027][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 213.464691][ T30] task:syz.1.158 state:D stack:13808 pid:4755 tgid:4754 ppid:2406 flags:0x00004004
[ 213.474826][ T30] Call Trace:
[ 213.478085][ T30]
[ 213.480994][ T30] __schedule+0x4c4/0xad0
[ 213.485328][ T30] schedule+0x25/0x110
[ 213.489372][ T30] schedule_preempt_disabled+0x13/0x30
[ 213.494842][ T30] __mutex_lock+0x54c/0xa40
[ 213.499313][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 213.503794][ T30] ? hugetlb_wp+0x6ff/0xc90
[ 213.508270][ T30] hugetlb_wp+0x6ff/0xc90
[ 213.512601][ T30] hugetlb_fault+0xa4e/0xc00
[ 213.517162][ T30] handle_mm_fault+0x351/0x360
[ 213.521895][ T30] exc_page_fault+0x161/0x6e0
[ 213.526553][ T30] asm_exc_page_fault+0x26/0x30
[ 213.531380][ T30] RIP: 0010:rep_movs_alternative+0x33/0x70
[ 213.537165][ T30] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb
[ 213.556773][ T30] RSP: 0018:ffffc9000210fde0 EFLAGS: 00050246
[ 213.562820][ T30] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008
[ 213.570761][ T30] RDX: 0000000020029750 RSI: ffffc9000210fe10 RDI: 0000000020029748
[ 213.578751][ T30] RBP: 0000000020029748 R08: 0000000000080000 R09: 0000000000000000
[ 213.586723][ T30] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc9000210fe10
[ 213.594703][ T30] R13: 0000000000018ff8 R14: 0000000020019680 R15: 0000000000000000
[ 213.602687][ T30] _copy_to_user+0x56/0x70
[ 213.607078][ T30] msr_read+0x68/0xe0
[ 213.611031][ T30] vfs_read+0xe0/0x370
[ 213.615107][ T30] ? fdget_pos+0x166/0x1b0
[ 213.619491][ T30] ? fdget_pos+0x166/0x1b0
[ 213.623904][ T30] ksys_read+0x6f/0xf0
[ 213.627978][ T30] do_syscall_64+0x6d/0x170
[ 213.632468][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 213.638381][ T30] RIP: 0033:0x7fb23282dff9
[ 213.642800][ T30] RSP: 002b:00007fb2322a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 213.651178][ T30] RAX: ffffffffffffffda RBX: 00007fb2329e5f80 RCX: 00007fb23282dff9
[ 213.659177][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003
[ 213.667177][ T30] RBP: 00007fb2328a0296 R08: 0000000000000000 R09: 0000000000000000
[ 213.675154][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 213.683128][ T30] R13: 0000000000000000 R14: 00007fb2329e5f80 R15: 00007ffcb70bac98
[ 213.691070][ T30]
[ 213.704792][ T30]
[ 213.704792][ T30] Showing all locks held in the system:
[ 213.712495][ T30] 1 lock held by khungtaskd/30:
[ 213.717338][ T30] #0: ffffffff8277d640 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120
[ 213.727132][ T30] 2 locks held by kworker/u8:6/729:
[ 213.732297][ T30] #0: ffff888100078948 ((wq_completion)events_unbound){....}-{0:0}, at: process_one_work+0x444/0x6a0
[ 213.743224][ T30] #1: ffffc90001ac3e58 ((work_completion)(&sub_info->work)){....}-{0:0}, at: process_one_work+0x1ec/0x6a0
[ 213.754572][ T30] 2 locks held by getty/838:
[ 213.759128][ T30] #0: ffff8881076f70a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60
[ 213.768858][ T30] #1: ffffc90001c672f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x54b/0x6a0
[ 213.778820][ T30] 2 locks held by kworker/u8:7/2604:
[ 213.784077][ T30] 3 locks held by syz.4.112/4562:
[ 213.789066][ T30] #0: ffff888101f3fce8 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 213.799217][ T30] #1: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc4/0xc00
[ 213.809797][ T30] #2: ffff88810d2a5ae8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xcc/0xc00
[ 213.819416][ T30] 2 locks held by syz.4.112/4569:
[ 213.824431][ T30] #0: ffff88810006a5e0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x280
[ 213.834304][ T30] #1: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x6ff/0xc90
[ 213.844704][ T30] 3 locks held by syz.1.158/4754:
[ 213.849696][ T30] #0: ffff888101702f48 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 213.859865][ T30] #1: ffff888101ac48d8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc4/0xc00
[ 213.870440][ T30] #2: ffff888108b20ae8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xcc/0xc00
[ 213.880053][ T30] 2 locks held by syz.1.158/4755:
[ 213.885082][ T30] #0: ffff88810f2d1ce0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x280
[ 213.894959][ T30] #1: ffff888101ac48d8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x6ff/0xc90
[ 213.905353][ T30] 3 locks held by syz.0.469/6404:
[ 213.910342][ T30] #0: ffff888100fd49f0 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 213.920507][ T30] #1: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc4/0xc00
[ 213.931075][ T30] #2: ffff88810bb1f8e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xcc/0xc00
[ 213.940686][ T30] 2 locks held by syz.0.469/6405:
[ 213.945694][ T30] #0: ffff88810f2d6de0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x280
[ 213.955569][ T30] #1: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x6ff/0xc90
[ 213.965966][ T30] 2 locks held by syz.2.470/6422:
[ 213.970958][ T30] #0: ffff88810d2801a0 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 213.981106][ T30] #1: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc4/0xc00
[ 213.991678][ T30] 3 locks held by syz.2.470/6429:
[ 213.996674][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.006305][ T30] #1: ffff888102ad29c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.017225][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.028400][ T30] 2 locks held by syz.4.497/6807:
[ 214.033408][ T30] #0: ffff888101702660 (&vma->vm_lock->lock){....}-{3:3}, at: lock_vma_under_rcu+0x86/0x1d0
[ 214.043553][ T30] #1: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xc4/0xc00
[ 214.054120][ T30] 3 locks held by syz.4.497/6808:
[ 214.059112][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.068755][ T30] #1: ffff88810972b748 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.079674][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.090856][ T30] 3 locks held by syz.2.955/9906:
[ 214.095899][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.105528][ T30] #1: ffff88810d3ae548 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.116448][ T30] #2: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.127644][ T30] 3 locks held by syz.1.1065/10368:
[ 214.132818][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.142422][ T30] #1: ffff88810cbc4ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.153347][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.164529][ T30] 3 locks held by syz.0.1066/10380:
[ 214.169692][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.179313][ T30] #1: ffff88810cbc5348 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.190244][ T30] #2: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.201422][ T30] 3 locks held by syz.3.1076/10417:
[ 214.206596][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.216220][ T30] #1: ffff88810cbc6e48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.227146][ T30] #2: ffff888101ac48d8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.238322][ T30] 3 locks held by syz.4.1112/10525:
[ 214.243511][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.253130][ T30] #1: ffff88810cbc72c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.264050][ T30] #2: ffff888101ac48d8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.275232][ T30] 3 locks held by syz.1.1562/14518:
[ 214.280397][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.290017][ T30] #1: ffff88810df4d348 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.300935][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.312129][ T30] 3 locks held by syz.4.1565/14524:
[ 214.317303][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.326920][ T30] #1: ffff88810df4dc48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.337841][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.349026][ T30] 3 locks held by syz.3.1885/15752:
[ 214.354197][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.363823][ T30] #1: ffff88810df50ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.374749][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.385929][ T30] 3 locks held by syz.2.1890/15778:
[ 214.391099][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.400726][ T30] #1: ffff88810df51c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.411641][ T30] #2: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.422834][ T30] 3 locks held by syz.0.1891/15779:
[ 214.427999][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.437629][ T30] #1: ffff88810df520c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.448557][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.459748][ T30] 3 locks held by syz.4.2021/17146:
[ 214.464920][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.474545][ T30] #1: ffff88810df532c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.485498][ T30] #2: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.496687][ T30] 3 locks held by syz.0.2421/19970:
[ 214.501852][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.511472][ T30] #1: ffff88810dba4ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.522392][ T30] #2: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.533571][ T30] 3 locks held by syz.2.2430/20043:
[ 214.538737][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.548364][ T30] #1: ffff88810dba5c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.559283][ T30] #2: ffff888101ac47b8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.570462][ T30] 3 locks held by syz.3.2437/20128:
[ 214.575652][ T30] #0: ffff8881026b23f8 (sb_writers#14){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80
[ 214.585273][ T30] #1: ffff88810dba6548 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xb9/0x680
[ 214.596194][ T30] #2: ffff888101ac43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x205/0x680
[ 214.607391][ T30] 1 lock held by syz.4.6133/5410:
[ 214.612383][ T30]
[ 214.614694][ T30] =============================================
[ 214.614694][ T30]
[ 214.623094][ T30] NMI backtrace for cpu 1
[ 214.627402][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller #0
[ 214.635783][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 214.645817][ T30] Call Trace:
[ 214.649073][ T30]
[ 214.651975][ T30] dump_stack_lvl+0x5a/0x90
[ 214.656449][ T30] nmi_cpu_backtrace+0xd4/0x110
[ 214.661266][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 214.667214][ T30] nmi_trigger_cpumask_backtrace+0xd5/0x140
[ 214.673078][ T30] watchdog+0x633/0x660
[ 214.677205][ T30] ? watchdog+0x1e8/0x660
[ 214.681500][ T30] ? __pfx_watchdog+0x10/0x10
[ 214.686141][ T30] kthread+0xd6/0x100
[ 214.690091][ T30] ? __pfx_kthread+0x10/0x10
[ 214.694647][ T30] ret_from_fork+0x2c/0x50
[ 214.699031][ T30] ? __pfx_kthread+0x10/0x10
[ 214.703577][ T30] ret_from_fork_asm+0x1a/0x30
[ 214.708299][ T30]
[ 214.711342][ T30] Sending NMI from CPU 1 to CPUs 0:
[ 214.716524][ C0] NMI backtrace for cpu 0
[ 214.716527][ C0] CPU: 0 UID: 0 PID: 729 Comm: kworker/u8:6 Not tainted 6.12.0-syzkaller #0
[ 214.716530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 214.716532][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 214.716538][ C0] RIP: 0010:default_send_IPI_single_phys+0x52/0xd0
[ 214.716542][ C0] Code: 00 c3 5f ff f6 c4 10 74 7d f3 90 8b 04 25 00 c3 5f ff f6 c4 10 75 f2 89 e8 c1 e0 18 89 04 25 10 c3 5f ff 89 34 25 00 c3 5f ff <9c> 58 f6 c4 02 75 4e 80 e7 02 74 01 fb 5b 5d 41 5c c3 cc cc cc cc
[ 214.716544][ C0] RSP: 0018:ffffc90001ac3c98 EFLAGS: 00000006
[ 214.716546][ C0] RAX: 00000000000000fb RBX: 0000000000000282 RCX: 0000000000000002
[ 214.716548][ C0] RDX: ffff888237d00000 RSI: 00000000000000fb RDI: 0000000000000001
[ 214.716550][ C0] RBP: 0000000001000000 R08: 000000000002e08c R09: 0000000000013e15
[ 214.716556][ C0] R10: 0000000000000001 R11: ffffffff83033a8a R12: 0000000000000000
[ 214.716557][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 214.716559][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[ 214.716563][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 214.716565][ C0] CR2: 0000000020032000 CR3: 000000000264a000 CR4: 00000000003506f0
[ 214.716566][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 214.716567][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 214.716568][ C0] Call Trace:
[ 214.716570][ C0]
[ 214.716571][ C0] ? nmi_cpu_backtrace+0x8f/0x110
[ 214.716576][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20
[ 214.716579][ C0] ? nmi_handle+0xb8/0x1a0
[ 214.716583][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 214.716585][ C0] ? default_do_nmi+0x69/0x2f0
[ 214.716589][ C0] ? exc_nmi+0x152/0x190
[ 214.716591][ C0] ? end_repeat_nmi+0xf/0x53
[ 214.716596][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 214.716598][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 214.716600][ C0] ? default_send_IPI_single_phys+0x52/0xd0
[ 214.716602][ C0]
[ 214.716602][ C0]
[ 214.716603][ C0] smp_call_function_many_cond+0x593/0x640
[ 214.716607][ C0] ? __pfx_do_sync_core+0x10/0x10
[ 214.716611][ C0] ? __pfx_do_sync_core+0x10/0x10
[ 214.716613][ C0] on_each_cpu_cond_mask+0x3b/0x70
[ 214.716616][ C0] ? __kmalloc_node_track_caller_noprof+0xd8/0x490
[ 214.716619][ C0] ? __kmalloc_node_track_caller_noprof+0xd9/0x490
[ 214.716621][ C0] text_poke_bp_batch+0x2ec/0x310
[ 214.716625][ C0] text_poke_finish+0x1a/0x30
[ 214.716628][ C0] arch_jump_label_transform_apply+0x17/0x30
[ 214.716630][ C0] static_key_disable_cpuslocked+0x4f/0x60
[ 214.716634][ C0] static_key_disable+0x15/0x20
[ 214.716636][ C0] toggle_allocation_gate+0x75/0x130
[ 214.716639][ C0] ? __pfx_autoremove_wake_function+0x10/0x10
[ 214.716644][ C0] process_one_work+0x22f/0x6a0
[ 214.716648][ C0] worker_thread+0x1bc/0x350
[ 214.716650][ C0] ? _raw_spin_unlock_irqrestore+0x3c/0x70
[ 214.716654][ C0] ? __pfx_worker_thread+0x10/0x10
[ 214.716656][ C0] kthread+0xd6/0x100
[ 214.716660][ C0] ? __pfx_kthread+0x10/0x10
[ 214.716662][ C0] ret_from_fork+0x2c/0x50
[ 214.716665][ C0] ? __pfx_kthread+0x10/0x10
[ 214.716667][ C0] ret_from_fork_asm+0x1a/0x30
[ 214.716671][ C0]
[ 214.717523][ T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 215.045130][ T30] Kernel Offset: disabled
[ 215.049437][ T30] Rebooting in 86400 seconds..