Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. 2025/04/15 22:09:18 ignoring optional flag "sandboxArg"="0" 2025/04/15 22:09:18 parsed 1 programs [ 59.515555][ T30] audit: type=1400 audit(1744754958.782:122): avc: denied { unlink } for pid=1880 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 59.538500][ T1880] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.946584][ T30] audit: type=1401 audit(1744754959.202:123): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/04/15 22:09:20 executed programs: 0 [ 61.048788][ T30] audit: type=1400 audit(1744754960.312:124): avc: denied { read } for pid=2405 comm="syz.0.15" name="msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.071119][ T30] audit: type=1400 audit(1744754960.312:125): avc: denied { open } for pid=2405 comm="syz.0.15" path="/dev/cpu/0/msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.141715][ T30] audit: type=1400 audit(1744754960.362:126): avc: denied { execute } for pid=2405 comm="syz.0.15" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=3585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 2025/04/15 22:09:25 executed programs: 82 2025/04/15 22:09:30 executed programs: 212 2025/04/15 22:09:35 executed programs: 348 [ 80.592022][ T6813] modprobe (6813) used greatest stack depth: 11368 bytes left 2025/04/15 22:09:40 executed programs: 468 2025/04/15 22:09:45 executed programs: 627 2025/04/15 22:09:50 executed programs: 757 2025/04/15 22:09:55 executed programs: 932 2025/04/15 22:10:04 executed programs: 958 2025/04/15 22:10:09 executed programs: 1060 2025/04/15 22:10:14 executed programs: 1255 2025/04/15 22:10:19 executed programs: 1435 2025/04/15 22:10:24 executed programs: 1600 2025/04/15 22:10:29 executed programs: 1812 2025/04/15 22:10:34 executed programs: 2037 2025/04/15 22:10:39 executed programs: 2276 2025/04/15 22:10:44 executed programs: 2521 2025/04/15 22:10:49 executed programs: 2757 2025/04/15 22:10:54 executed programs: 2998 2025/04/15 22:10:59 executed programs: 3228 2025/04/15 22:11:04 executed programs: 3464 2025/04/15 22:11:09 executed programs: 3668 2025/04/15 22:11:14 executed programs: 3853 2025/04/15 22:11:19 executed programs: 3983 2025/04/15 22:11:24 executed programs: 4202 2025/04/15 22:11:38 executed programs: 4284 2025/04/15 22:11:43 executed programs: 4518 2025/04/15 22:11:48 executed programs: 4774 2025/04/15 22:11:53 executed programs: 5012 2025/04/15 22:11:58 executed programs: 5259 [ 221.205393][ T31] INFO: task syz.1.115:4683 blocked for more than 143 seconds. [ 221.212997][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 221.218879][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.227524][ T31] task:syz.1.115 state:D stack:14336 pid:4683 tgid:4683 ppid:2408 task_flags:0x400040 flags:0x00000004 [ 221.239426][ T31] Call Trace: [ 221.242685][ T31] [ 221.245597][ T31] __schedule+0x593/0xd20 [ 221.249926][ T31] schedule+0x25/0x110 [ 221.253965][ T31] io_schedule+0x41/0x60 [ 221.258233][ T31] folio_wait_bit_common+0x141/0x380 [ 221.263489][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 221.269096][ T31] __filemap_get_folio+0x1be/0x350 [ 221.274198][ T31] hugetlb_fault+0x797/0xc90 [ 221.278807][ T31] handle_mm_fault+0x36c/0x380 [ 221.283566][ T31] exc_page_fault+0x25d/0x710 [ 221.288222][ T31] asm_exc_page_fault+0x26/0x30 [ 221.293390][ T31] RIP: 0033:0x7f2a980e7208 [ 221.297811][ T31] RSP: 002b:00007ffe20fa8fe8 EFLAGS: 00010246 [ 221.303840][ T31] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 221.311782][ T31] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 221.319731][ T31] RBP: 00007f2a982d7a80 R08: 00007f2a97fa0000 R09: 0000000000000001 [ 221.327692][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000106cf [ 221.335643][ T31] R13: 00007ffe20fa90f0 R14: 0000000000000032 R15: fffffffffffffffe [ 221.343590][ T31] [ 221.351854][ T31] INFO: task syz.1.115:4684 blocked for more than 143 seconds. [ 221.359405][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 221.365301][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.373957][ T31] task:syz.1.115 state:D stack:14144 pid:4684 tgid:4683 ppid:2408 task_flags:0x400140 flags:0x00004006 [ 221.385845][ T31] Call Trace: [ 221.389100][ T31] [ 221.392004][ T31] __schedule+0x593/0xd20 [ 221.396318][ T31] schedule+0x25/0x110 [ 221.400363][ T31] schedule_preempt_disabled+0x13/0x30 [ 221.405809][ T31] __mutex_lock+0x617/0xb10 [ 221.410281][ T31] ? hugetlb_wp+0x849/0xce0 [ 221.414754][ T31] ? hugetlb_wp+0x849/0xce0 [ 221.419239][ T31] hugetlb_wp+0x849/0xce0 [ 221.423535][ T31] hugetlb_fault+0xaeb/0xc90 [ 221.428101][ T31] handle_mm_fault+0x36c/0x380 [ 221.432834][ T31] exc_page_fault+0x162/0x710 [ 221.437491][ T31] asm_exc_page_fault+0x26/0x30 [ 221.442307][ T31] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 221.448093][ T31] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 221.467690][ T31] RSP: 0018:ffffc90001ecbde0 EFLAGS: 00050246 [ 221.473720][ T31] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 221.481662][ T31] RDX: 00000000200308e8 RSI: ffffc90001ecbe10 RDI: 00000000200308e0 [ 221.489617][ T31] RBP: 00000000200308e0 R08: 00000000000804cf R09: 0000000000000000 [ 221.497589][ T31] R10: 0000000000080000 R11: 0000000000000001 R12: ffffc90001ecbe10 [ 221.505580][ T31] R13: 0000000000000000 R14: 0000000020019680 R15: 0000000000017260 [ 221.513537][ T31] _copy_to_user+0x56/0x70 [ 221.517944][ T31] msr_read+0x6a/0xf0 [ 221.521899][ T31] vfs_read+0xdd/0x370 [ 221.525942][ T31] ? fdget_pos+0x13c/0x180 [ 221.530327][ T31] ksys_read+0x6e/0xe0 [ 221.534364][ T31] do_syscall_64+0x6d/0x180 [ 221.538855][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.544731][ T31] RIP: 0033:0x7f2a9811dff9 [ 221.549137][ T31] RSP: 002b:00007f2a97b9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.557522][ T31] RAX: ffffffffffffffda RBX: 00007f2a982d5f80 RCX: 00007f2a9811dff9 [ 221.565478][ T31] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 221.573426][ T31] RBP: 00007f2a98190296 R08: 0000000000000000 R09: 0000000000000000 [ 221.581377][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.589336][ T31] R13: 0000000000000000 R14: 00007f2a982d5f80 R15: 00007ffe20fa8e88 [ 221.597575][ T31] [ 221.601110][ T31] INFO: task syz.4.187:5018 blocked for more than 143 seconds. [ 221.608657][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 221.614517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.623210][ T31] task:syz.4.187 state:D stack:12864 pid:5018 tgid:5017 ppid:2428 task_flags:0x400140 flags:0x00000004 [ 221.635103][ T31] Call Trace: [ 221.638379][ T31] [ 221.641416][ T31] __schedule+0x593/0xd20 [ 221.645742][ T31] schedule+0x25/0x110 [ 221.649805][ T31] schedule_preempt_disabled+0x13/0x30 [ 221.655269][ T31] __mutex_lock+0x617/0xb10 [ 221.659750][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 221.665003][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 221.670260][ T31] ? hugetlbfs_fallocate+0x19e/0x740 [ 221.675518][ T31] hugetlbfs_fallocate+0x263/0x740 [ 221.680603][ T31] ? __schedule+0x933/0xd20 [ 221.685079][ T31] ? avc_has_perm+0x59/0xe0 [ 221.689563][ T31] ? vfs_fallocate+0x124/0x3c0 [ 221.694468][ T31] ? preempt_count_add+0x4c/0x90 [ 221.699379][ T31] ? vfs_fallocate+0x2ad/0x3c0 [ 221.704111][ T31] vfs_fallocate+0x124/0x3c0 [ 221.708682][ T31] __x64_sys_fallocate+0x3e/0x80 [ 221.713589][ T31] do_syscall_64+0x6d/0x180 [ 221.718086][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.723942][ T31] RIP: 0033:0x7fcc6004dff9 [ 221.728329][ T31] RSP: 002b:00007fcc5fac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 221.736710][ T31] RAX: ffffffffffffffda RBX: 00007fcc60205f80 RCX: 00007fcc6004dff9 [ 221.744657][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 221.752623][ T31] RBP: 00007fcc600c0296 R08: 0000000000000000 R09: 0000000000000000 [ 221.760570][ T31] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 221.768512][ T31] R13: 0000000000000000 R14: 00007fcc60205f80 R15: 00007ffc51f3db58 [ 221.776504][ T31] [ 221.786536][ T31] INFO: task syz.0.342:5721 blocked for more than 143 seconds. [ 221.794419][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 221.800292][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.808955][ T31] task:syz.0.342 state:D stack:13808 pid:5721 tgid:5721 ppid:1903 task_flags:0x400040 flags:0x00000004 [ 221.820828][ T31] Call Trace: [ 221.824078][ T31] [ 221.826993][ T31] __schedule+0x593/0xd20 [ 221.831292][ T31] schedule+0x25/0x110 [ 221.835341][ T31] io_schedule+0x41/0x60 [ 221.839557][ T31] folio_wait_bit_common+0x141/0x380 [ 221.844809][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 221.850327][ T31] __filemap_get_folio+0x1be/0x350 [ 221.855412][ T31] hugetlb_fault+0x797/0xc90 [ 221.859971][ T31] handle_mm_fault+0x36c/0x380 [ 221.864708][ T31] exc_page_fault+0x25d/0x710 [ 221.869370][ T31] asm_exc_page_fault+0x26/0x30 [ 221.874188][ T31] RIP: 0033:0x7ff299fd7208 [ 221.878576][ T31] RSP: 002b:00007ffdb29c5658 EFLAGS: 00010246 [ 221.884610][ T31] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 221.892560][ T31] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 221.900709][ T31] RBP: 00007ff29a1c7a80 R08: 00007ff299e90000 R09: 0000000000000001 [ 221.908666][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000012830 [ 221.916617][ T31] R13: 00007ffdb29c5760 R14: 0000000000000032 R15: fffffffffffffffe [ 221.924560][ T31] [ 221.935400][ T31] INFO: task syz.0.342:5722 blocked for more than 144 seconds. [ 221.942946][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 221.948896][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 221.957842][ T31] task:syz.0.342 state:D stack:14144 pid:5722 tgid:5721 ppid:1903 task_flags:0x400140 flags:0x00004004 [ 221.969775][ T31] Call Trace: [ 221.973055][ T31] [ 221.975999][ T31] __schedule+0x593/0xd20 [ 221.980368][ T31] schedule+0x25/0x110 [ 221.984571][ T31] schedule_preempt_disabled+0x13/0x30 [ 221.992728][ T31] __mutex_lock+0x617/0xb10 [ 222.001092][ T31] ? hugetlb_wp+0x849/0xce0 [ 222.005996][ T31] ? hugetlb_wp+0x849/0xce0 [ 222.012113][ T31] hugetlb_wp+0x849/0xce0 [ 222.025204][ T31] hugetlb_fault+0xaeb/0xc90 [ 222.032479][ T31] handle_mm_fault+0x36c/0x380 [ 222.038896][ T31] exc_page_fault+0x162/0x710 [ 222.043699][ T31] asm_exc_page_fault+0x26/0x30 [ 222.048568][ T31] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 222.055355][ T31] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 222.075014][ T31] RSP: 0018:ffffc90002f9fde0 EFLAGS: 00050246 [ 222.081110][ T31] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 222.089121][ T31] RDX: 00000000200253c0 RSI: ffffc90002f9fe10 RDI: 00000000200253b8 [ 222.097112][ T31] RBP: 00000000200253b8 R08: 00000000000804cf R09: 0000000000000000 [ 222.105143][ T31] R10: 0000000000080000 R11: 0000000000000001 R12: ffffc90002f9fe10 [ 222.125206][ T31] R13: 0000000000000000 R14: 0000000020019680 R15: 000000000000bd38 [ 222.133157][ T31] _copy_to_user+0x56/0x70 [ 222.137616][ T31] msr_read+0x6a/0xf0 [ 222.141571][ T31] vfs_read+0xdd/0x370 [ 222.145695][ T31] ? fdget_pos+0x13c/0x180 [ 222.150178][ T31] ksys_read+0x6e/0xe0 [ 222.155726][ T31] do_syscall_64+0x6d/0x180 [ 222.160239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.167297][ T31] RIP: 0033:0x7ff29a00dff9 [ 222.171767][ T31] RSP: 002b:00007ff299a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.181853][ T31] RAX: ffffffffffffffda RBX: 00007ff29a1c5f80 RCX: 00007ff29a00dff9 [ 222.196144][ T31] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 222.204182][ T31] RBP: 00007ff29a080296 R08: 0000000000000000 R09: 0000000000000000 [ 222.212208][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.224129][ T31] R13: 0000000000000000 R14: 00007ff29a1c5f80 R15: 00007ffdb29c54f8 [ 222.232152][ T31] [ 222.235993][ T31] INFO: task syz.3.344:5734 blocked for more than 144 seconds. [ 222.243556][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 222.249484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 222.258677][ T31] task:syz.3.344 state:D stack:14336 pid:5734 tgid:5734 ppid:2423 task_flags:0x400040 flags:0x00000004 [ 222.270615][ T31] Call Trace: [ 222.273888][ T31] [ 222.276822][ T31] __schedule+0x593/0xd20 [ 222.281158][ T31] schedule+0x25/0x110 [ 222.285239][ T31] schedule_preempt_disabled+0x13/0x30 [ 222.290745][ T31] __mutex_lock+0x617/0xb10 [ 222.295256][ T31] ? hugetlb_fault+0xbd/0xc90 [ 222.299928][ T31] ? hugetlb_fault+0xbd/0xc90 [ 222.304592][ T31] hugetlb_fault+0xbd/0xc90 [ 222.309132][ T31] handle_mm_fault+0x36c/0x380 [ 222.313903][ T31] exc_page_fault+0x25d/0x710 [ 222.318613][ T31] asm_exc_page_fault+0x26/0x30 [ 222.323447][ T31] RIP: 0033:0x7ff3d9a07208 [ 222.327853][ T31] RSP: 002b:00007ffd9f623da8 EFLAGS: 00010246 [ 222.333899][ T31] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 222.341889][ T31] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 222.349889][ T31] RBP: 00007ff3d9bf7a80 R08: 00007ff3d98b8000 R09: 0000000000000001 [ 222.357866][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000128aa [ 222.365829][ T31] R13: 00007ffd9f623eb0 R14: 0000000000000032 R15: fffffffffffffffe [ 222.373925][ T31] [ 222.429163][ T31] INFO: task syz.3.344:5735 blocked for more than 144 seconds. [ 222.436720][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 222.442595][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 222.451322][ T31] task:syz.3.344 state:D stack:12800 pid:5735 tgid:5734 ppid:2423 task_flags:0x400140 flags:0x00000004 [ 222.463413][ T31] Call Trace: [ 222.466786][ T31] [ 222.469914][ T31] __schedule+0x593/0xd20 [ 222.474264][ T31] schedule+0x25/0x110 [ 222.478779][ T31] schedule_preempt_disabled+0x13/0x30 [ 222.484220][ T31] __mutex_lock+0x617/0xb10 [ 222.488810][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 222.494075][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 222.500534][ T31] ? hugetlbfs_fallocate+0x19e/0x740 [ 222.505873][ T31] hugetlbfs_fallocate+0x263/0x740 [ 222.510978][ T31] ? avc_has_perm+0x59/0xe0 [ 222.515602][ T31] ? vfs_fallocate+0x124/0x3c0 [ 222.520364][ T31] ? preempt_count_add+0x4c/0x90 [ 222.525328][ T31] ? vfs_fallocate+0x2ad/0x3c0 [ 222.530071][ T31] vfs_fallocate+0x124/0x3c0 [ 222.534644][ T31] __x64_sys_fallocate+0x3e/0x80 [ 222.539590][ T31] do_syscall_64+0x6d/0x180 [ 222.544091][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.550177][ T31] RIP: 0033:0x7ff3d9a3dff9 [ 222.554576][ T31] RSP: 002b:00007ff3d94b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 222.563032][ T31] RAX: ffffffffffffffda RBX: 00007ff3d9bf5f80 RCX: 00007ff3d9a3dff9 [ 222.571010][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.578987][ T31] RBP: 00007ff3d9ab0296 R08: 0000000000000000 R09: 0000000000000000 [ 222.588640][ T31] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 222.596612][ T31] R13: 0000000000000000 R14: 00007ff3d9bf5f80 R15: 00007ffd9f623c48 [ 222.604681][ T31] [ 222.607755][ T31] INFO: task syz.2.399:6124 blocked for more than 144 seconds. [ 222.615485][ T31] Not tainted 6.15.0-rc2-syzkaller #0 [ 222.622340][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 222.631220][ T31] task:syz.2.399 state:D stack:12864 pid:6124 tgid:6123 ppid:2413 task_flags:0x400140 flags:0x00000004 [ 222.643135][ T31] Call Trace: [ 222.646813][ T31] [ 222.649765][ T31] __schedule+0x593/0xd20 [ 222.654121][ T31] schedule+0x25/0x110 [ 222.658199][ T31] schedule_preempt_disabled+0x13/0x30 [ 222.663661][ T31] __mutex_lock+0x617/0xb10 [ 222.668178][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 222.673458][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 222.678764][ T31] ? hugetlbfs_fallocate+0x19e/0x740 [ 222.684029][ T31] hugetlbfs_fallocate+0x263/0x740 [ 222.689208][ T31] ? avc_has_perm+0x59/0xe0 [ 222.694555][ T31] ? vfs_fallocate+0x124/0x3c0 [ 222.699394][ T31] ? preempt_count_add+0x4c/0x90 [ 222.704346][ T31] ? vfs_fallocate+0x2ad/0x3c0 [ 222.709154][ T31] vfs_fallocate+0x124/0x3c0 [ 222.713731][ T31] __x64_sys_fallocate+0x3e/0x80 [ 222.718742][ T31] do_syscall_64+0x6d/0x180 [ 222.723279][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.729179][ T31] RIP: 0033:0x7f330f14dff9 [ 222.733575][ T31] RSP: 002b:00007f330ebc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 222.742005][ T31] RAX: ffffffffffffffda RBX: 00007f330f305f80 RCX: 00007f330f14dff9 [ 222.750346][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.758329][ T31] RBP: 00007f330f1c0296 R08: 0000000000000000 R09: 0000000000000000 [ 222.766328][ T31] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 222.774442][ T31] R13: 0000000000000000 R14: 00007f330f305f80 R15: 00007ffea4645458 [ 222.782444][ T31] [ 222.785619][ T31] [ 222.785619][ T31] Showing all locks held in the system: [ 222.793321][ T31] 1 lock held by khungtaskd/31: [ 222.798194][ T31] #0: ffffffff82780980 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120 [ 222.808010][ T31] 2 locks held by getty/841: [ 222.813507][ T31] #0: ffff888100a8f8a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60 [ 222.823421][ T31] #1: ffffc90001bdb2f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x17a/0x660 [ 222.833449][ T31] 2 locks held by kworker/u8:7/3124: [ 222.838798][ T31] #0: ffff888100078948 ((wq_completion)events_unbound){....}-{0:0}, at: process_one_work+0x42f/0x660 [ 222.849739][ T31] #1: ffffc9000191fe40 (connector_reaper_work){....}-{0:0}, at: process_one_work+0x1ed/0x660 [ 222.860021][ T31] 3 locks held by syz.1.115/4683: [ 222.865041][ T31] #0: ffff888108aadb88 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 222.874059][ T31] #1: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 222.884676][ T31] #2: ffff888107ff32e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xc5/0xc90 [ 222.894340][ T31] 2 locks held by syz.1.115/4684: [ 222.899343][ T31] #0: ffff88810006c2a0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x270 [ 222.909244][ T31] #1: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x849/0xce0 [ 222.919693][ T31] 3 locks held by syz.4.187/5018: [ 222.924697][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 222.934824][ T31] #1: ffff88810c707748 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 222.945887][ T31] #2: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 222.959212][ T31] 3 locks held by syz.0.342/5721: [ 222.964220][ T31] #0: ffff88810bbbbc88 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 222.973126][ T31] #1: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 222.983749][ T31] #2: ffff8881013c5ae8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xc5/0xc90 [ 222.993419][ T31] 2 locks held by syz.0.342/5722: [ 222.998452][ T31] #0: ffff88810b79e7a0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x270 [ 223.008464][ T31] #1: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x849/0xce0 [ 223.018977][ T31] 2 locks held by syz.3.344/5734: [ 223.023983][ T31] #0: ffff88810c785488 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 223.032948][ T31] #1: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 223.043572][ T31] 3 locks held by syz.3.344/5735: [ 223.048598][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.058236][ T31] #1: ffff88810c705c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.069859][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.081612][ T31] 2 locks held by syz.2.399/6123: [ 223.086646][ T31] #0: ffff88810b75bc88 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 223.095557][ T31] #1: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 223.106167][ T31] 3 locks held by syz.2.399/6124: [ 223.111210][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.120857][ T31] #1: ffff88810c7072c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.132681][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.145019][ T31] 3 locks held by syz.0.841/10047: [ 223.150129][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.160372][ T31] #1: ffff88810cfdcec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.171327][ T31] #2: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.182572][ T31] 3 locks held by syz.4.942/10494: [ 223.187710][ T31] #0: ffff88810e2f9888 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 223.196592][ T31] #1: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 223.207852][ T31] #2: ffff88810d7412e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xc5/0xc90 [ 223.221337][ T31] 2 locks held by syz.4.942/10495: [ 223.226450][ T31] #0: ffff88810d3ed520 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x270 [ 223.237185][ T31] #1: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x849/0xce0 [ 223.247596][ T31] 3 locks held by syz.1.945/10522: [ 223.252703][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.262365][ T31] #1: ffff88810cfdd7c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.273306][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.285420][ T31] 3 locks held by syz.3.956/10550: [ 223.290530][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.300171][ T31] #1: ffff88810c7057c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.311132][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.322341][ T31] 3 locks held by syz.2.962/10572: [ 223.327448][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.337099][ T31] #1: ffff88810c704ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.348073][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.359287][ T31] 3 locks held by syz.0.1156/13523: [ 223.364485][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.374822][ T31] #1: ffff88810d3e4148 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.385825][ T31] #2: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.397649][ T31] 3 locks held by syz.3.1162/13566: [ 223.403372][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.413114][ T31] #1: ffff88810d3e5c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.424059][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.435279][ T31] 3 locks held by syz.2.1186/13648: [ 223.440525][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.450166][ T31] #1: ffff88810d3e72c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.462027][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.474315][ T31] 3 locks held by syz.3.1733/16993: [ 223.479522][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.489187][ T31] #1: ffff88810ef51348 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.500144][ T31] #2: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.511348][ T31] 3 locks held by syz.0.3569/25525: [ 223.516855][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.526897][ T31] #1: ffff88810f758ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.537825][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.549027][ T31] 3 locks held by syz.4.3573/25545: [ 223.554202][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.563832][ T31] #1: ffff88810f759c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.575348][ T31] #2: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.587486][ T31] 3 locks held by syz.3.3587/25604: [ 223.592656][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.602902][ T31] #1: ffff88810f75bbc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.613840][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.625036][ T31] 3 locks held by syz.1.4195/29635: [ 223.630294][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.640149][ T31] #1: ffff88810f3885c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.651229][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.662704][ T31] 3 locks held by syz.2.4197/29637: [ 223.667881][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.677521][ T31] #1: ffff88810f388a48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.688450][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.699662][ T31] 3 locks held by syz.0.4196/29649: [ 223.704830][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.714479][ T31] #1: ffff88810f389348 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.725409][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.736614][ T31] 3 locks held by syz.4.4200/29659: [ 223.741782][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.751423][ T31] #1: ffff88810f389c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.762352][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.773564][ T31] 3 locks held by syz.3.4288/29928: [ 223.778761][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.788408][ T31] #1: ffff88810f38a9c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.799337][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.810620][ T31] 3 locks held by syz.1.5479/4517: [ 223.815720][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.825352][ T31] #1: ffff88811fa90ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.836289][ T31] #2: ffff888101af4728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.847487][ T31] 3 locks held by syz.2.5489/4561: [ 223.852569][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.862205][ T31] #1: ffff88811fa94148 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.873133][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.884333][ T31] 3 locks held by syz.0.5498/4595: [ 223.889444][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.899087][ T31] #1: ffff88811fa969c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.910021][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.921224][ T31] 3 locks held by syz.4.5501/4607: [ 223.926311][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.935941][ T31] #1: ffff88811fa97bc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.946859][ T31] #2: ffff888101af43c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.958032][ T31] 3 locks held by syz.3.5506/4623: [ 223.963103][ T31] #0: ffff888101af53f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 223.972710][ T31] #1: ffff88811fa98ec8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 223.983624][ T31] #2: ffff888101af40f8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 223.994806][ T31] [ 223.997113][ T31] ============================================= [ 223.997113][ T31] [ 224.005514][ T31] NMI backtrace for cpu 0 [ 224.005522][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(undef) [ 224.005526][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.005527][ T31] Call Trace: [ 224.005529][ T31] [ 224.005530][ T31] dump_stack_lvl+0x5a/0x90 [ 224.005537][ T31] nmi_cpu_backtrace+0xd4/0x110 [ 224.005542][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 224.005546][ T31] nmi_trigger_cpumask_backtrace+0xd5/0x140 [ 224.005550][ T31] watchdog+0x652/0x690 [ 224.005554][ T31] ? watchdog+0x1f5/0x690 [ 224.005558][ T31] ? __pfx_watchdog+0x10/0x10 [ 224.005560][ T31] kthread+0x104/0x200 [ 224.005564][ T31] ? __pfx_kthread+0x10/0x10 [ 224.005567][ T31] ret_from_fork+0x2c/0x50 [ 224.005570][ T31] ? __pfx_kthread+0x10/0x10 [ 224.005573][ T31] ret_from_fork_asm+0x1a/0x30 [ 224.005580][ T31] [ 224.005581][ T31] Sending NMI from CPU 0 to CPUs 1: [ 224.100933][ C1] NMI backtrace for cpu 1 [ 224.100937][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(undef) [ 224.100940][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.100942][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 224.100949][ C1] Code: 06 69 00 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 05 45 15 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 224.100951][ C1] RSP: 0018:ffffc900000abed0 EFLAGS: 000002c6 [ 224.100953][ C1] RAX: 00000000017b344c RBX: ffff8881012921c0 RCX: 000000342cce0a80 [ 224.100955][ C1] RDX: ffff888237d24be8 RSI: ffffffff8252a6eb RDI: ffffffff824fa8ac [ 224.100957][ C1] RBP: 0000000000000001 R08: 00000000000a006b R09: 0000000000000000 [ 224.100958][ C1] R10: 0000000000080000 R11: 0000000000000001 R12: 0000000000000000 [ 224.100959][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.100963][ C1] FS: 0000000000000000(0000) GS:ffff8882b4cf5000(0000) knlGS:0000000000000000 [ 224.100965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.100966][ C1] CR2: 0000000020000640 CR3: 000000011f6bc000 CR4: 00000000003506f0 [ 224.100967][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 224.100969][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.100970][ C1] Call Trace: [ 224.100973][ C1] [ 224.100974][ C1] default_idle+0x13/0x20 [ 224.100977][ C1] default_idle_call+0x48/0x140 [ 224.100980][ C1] do_idle+0x1d4/0x230 [ 224.100985][ C1] cpu_startup_entry+0x24/0x30 [ 224.100987][ C1] start_secondary+0x112/0x130 [ 224.100991][ C1] common_startup_64+0x13e/0x148 [ 224.100996][ C1] [ 224.101923][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 224.279738][ T31] Kernel Offset: disabled [ 224.284028][ T31] Rebooting in 86400 seconds..