[ 41.085699][ T30] audit: type=1400 audit(1747557493.653:101): avc: denied { noatsecure } for pid=1878 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.105541][ T30] audit: type=1400 audit(1747557493.653:102): avc: denied { rlimitinh } for pid=1878 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 41.124307][ T30] audit: type=1400 audit(1747557493.653:103): avc: denied { siginh } for pid=1878 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.57' (ED25519) to the list of known hosts. 2025/05/18 08:38:21 ignoring optional flag "sandboxArg"="0" 2025/05/18 08:38:21 parsed 1 programs [ 49.127341][ T30] audit: type=1400 audit(1747557501.723:104): avc: denied { unlink } for pid=1896 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.200846][ T1896] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.604639][ T30] audit: type=1401 audit(1747557502.193:105): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/05/18 08:38:23 executed programs: 0 [ 50.989183][ T30] audit: type=1400 audit(1747557503.583:106): avc: denied { read } for pid=2422 comm="syz.2.17" name="msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.011542][ T30] audit: type=1400 audit(1747557503.583:107): avc: denied { open } for pid=2422 comm="syz.2.17" path="/dev/cpu/0/msr" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 51.110669][ T30] audit: type=1400 audit(1747557503.683:108): avc: denied { execute } for pid=2422 comm="syz.2.17" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=3747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 51.203990][ T2487] modprobe (2487) used greatest stack depth: 11664 bytes left 2025/05/18 08:38:28 executed programs: 63 2025/05/18 08:38:33 executed programs: 191 2025/05/18 08:38:38 executed programs: 322 2025/05/18 08:38:43 executed programs: 448 2025/05/18 08:38:48 executed programs: 543 2025/05/18 08:38:53 executed programs: 697 2025/05/18 08:38:58 executed programs: 860 2025/05/18 08:39:03 executed programs: 1027 2025/05/18 08:39:08 executed programs: 1178 2025/05/18 08:39:13 executed programs: 1373 2025/05/18 08:39:18 executed programs: 1588 2025/05/18 08:39:23 executed programs: 1804 2025/05/18 08:39:28 executed programs: 2015 2025/05/18 08:39:33 executed programs: 2219 2025/05/18 08:39:38 executed programs: 2430 2025/05/18 08:39:44 executed programs: 2643 2025/05/18 08:39:49 executed programs: 2848 2025/05/18 08:39:54 executed programs: 3010 2025/05/18 08:39:59 executed programs: 3151 2025/05/18 08:40:04 executed programs: 3293 2025/05/18 08:40:09 executed programs: 3457 2025/05/18 08:40:14 executed programs: 3668 2025/05/18 08:40:19 executed programs: 3858 2025/05/18 08:40:24 executed programs: 4067 2025/05/18 08:40:29 executed programs: 4285 2025/05/18 08:40:34 executed programs: 4492 2025/05/18 08:40:39 executed programs: 4700 2025/05/18 08:40:44 executed programs: 4913 2025/05/18 08:40:49 executed programs: 5099 2025/05/18 08:40:54 executed programs: 5266 2025/05/18 08:40:59 executed programs: 5416 [ 210.956868][ T31] INFO: task syz.4.172:4988 blocked for more than 143 seconds. [ 210.964448][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 210.970330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 210.979003][ T31] task:syz.4.172 state:D stack:14200 pid:4988 tgid:4988 ppid:2429 task_flags:0x400040 flags:0x00000004 [ 210.990925][ T31] Call Trace: [ 210.994185][ T31] [ 210.997153][ T31] __schedule+0x593/0xd20 [ 211.001472][ T31] schedule+0x25/0x110 [ 211.005522][ T31] io_schedule+0x41/0x60 [ 211.009755][ T31] folio_wait_bit_common+0x141/0x380 [ 211.015010][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 211.020546][ T31] __filemap_get_folio+0x1be/0x350 [ 211.025630][ T31] hugetlb_fault+0x797/0xc90 [ 211.030206][ T31] handle_mm_fault+0x36c/0x380 [ 211.034945][ T31] exc_page_fault+0x25d/0x710 [ 211.039616][ T31] asm_exc_page_fault+0x26/0x30 [ 211.044437][ T31] RIP: 0033:0x7f0372167208 [ 211.048939][ T31] RSP: 002b:00007ffe4fe59ab8 EFLAGS: 00010246 [ 211.054973][ T31] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 211.062929][ T31] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 211.070886][ T31] RBP: 00007f0372357a80 R08: 00007f0372020000 R09: 0000000000000001 [ 211.078841][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000000eab1 [ 211.086801][ T31] R13: 00007ffe4fe59bc0 R14: 0000000000000032 R15: fffffffffffffffe [ 211.094755][ T31] [ 211.099422][ T31] INFO: task syz.4.172:4989 blocked for more than 143 seconds. [ 211.106969][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 211.112839][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.121564][ T31] task:syz.4.172 state:D stack:14032 pid:4989 tgid:4988 ppid:2429 task_flags:0x400140 flags:0x00004004 [ 211.133598][ T31] Call Trace: [ 211.136904][ T31] [ 211.139842][ T31] __schedule+0x593/0xd20 [ 211.144163][ T31] schedule+0x25/0x110 [ 211.148218][ T31] schedule_preempt_disabled+0x13/0x30 [ 211.153648][ T31] __mutex_lock+0x617/0xb10 [ 211.158133][ T31] ? hugetlb_wp+0x849/0xce0 [ 211.162610][ T31] ? hugetlb_wp+0x849/0xce0 [ 211.167089][ T31] hugetlb_wp+0x849/0xce0 [ 211.171398][ T31] hugetlb_fault+0xaeb/0xc90 [ 211.175963][ T31] handle_mm_fault+0x36c/0x380 [ 211.180719][ T31] exc_page_fault+0x162/0x710 [ 211.185378][ T31] asm_exc_page_fault+0x26/0x30 [ 211.190203][ T31] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 211.195978][ T31] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 92 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 211.215589][ T31] RSP: 0018:ffffc90002427de0 EFLAGS: 00050246 [ 211.221639][ T31] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 211.229588][ T31] RDX: 000000002002eca0 RSI: ffffc90002427e10 RDI: 000000002002ec98 [ 211.237550][ T31] RBP: 000000002002ec98 R08: 00000000000804d3 R09: 0000000000000000 [ 211.245497][ T31] R10: 0000000000080000 R11: 0000000000000001 R12: ffffc90002427e10 [ 211.253462][ T31] R13: 0000000000000000 R14: 0000000020019680 R15: 0000000000015618 [ 211.261425][ T31] _copy_to_user+0x56/0x70 [ 211.265817][ T31] msr_read+0x6a/0xf0 [ 211.269795][ T31] vfs_read+0xdd/0x370 [ 211.273837][ T31] ? fdget_pos+0x13c/0x180 [ 211.278250][ T31] ksys_read+0x6e/0xe0 [ 211.282289][ T31] do_syscall_64+0x6d/0x180 [ 211.286758][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.292629][ T31] RIP: 0033:0x7f037219dff9 [ 211.297028][ T31] RSP: 002b:00007f0371c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.305411][ T31] RAX: ffffffffffffffda RBX: 00007f0372355f80 RCX: 00007f037219dff9 [ 211.313379][ T31] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 211.321344][ T31] RBP: 00007f0372210296 R08: 0000000000000000 R09: 0000000000000000 [ 211.329302][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.337251][ T31] R13: 0000000000000000 R14: 00007f0372355f80 R15: 00007ffe4fe59958 [ 211.345198][ T31] [ 211.445866][ T31] INFO: task syz.1.175:5003 blocked for more than 143 seconds. [ 211.453563][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 211.459484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.468153][ T31] task:syz.1.175 state:D stack:14136 pid:5003 tgid:5002 ppid:2436 task_flags:0x400140 flags:0x00004004 [ 211.480069][ T31] Call Trace: [ 211.483341][ T31] [ 211.486249][ T31] __schedule+0x593/0xd20 [ 211.490594][ T31] schedule+0x25/0x110 [ 211.494633][ T31] schedule_preempt_disabled+0x13/0x30 [ 211.500084][ T31] __mutex_lock+0x617/0xb10 [ 211.504555][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 211.509833][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 211.515101][ T31] ? __cond_resched+0x22/0x30 [ 211.519785][ T31] hugetlbfs_fallocate+0x263/0x740 [ 211.524871][ T31] ? rcu_is_watching+0x11/0x50 [ 211.529721][ T31] ? __schedule+0x933/0xd20 [ 211.534207][ T31] ? vfs_fallocate+0x127/0x3c0 [ 211.539087][ T31] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 211.544689][ T31] ? vfs_fallocate+0x2ad/0x3c0 [ 211.549466][ T31] vfs_fallocate+0x127/0x3c0 [ 211.554035][ T31] __x64_sys_fallocate+0x3e/0x80 [ 211.558979][ T31] do_syscall_64+0x6d/0x180 [ 211.563477][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.569362][ T31] RIP: 0033:0x7f57772ddff9 [ 211.573744][ T31] RSP: 002b:00007f5776d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 211.582166][ T31] RAX: ffffffffffffffda RBX: 00007f5777495f80 RCX: 00007f57772ddff9 [ 211.590148][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 211.598172][ T31] RBP: 00007f5777350296 R08: 0000000000000000 R09: 0000000000000000 [ 211.606117][ T31] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 211.614097][ T31] R13: 0000000000000000 R14: 00007f5777495f80 R15: 00007ffc350896c8 [ 211.622074][ T31] [ 211.627793][ T31] INFO: task syz.3.213:5187 blocked for more than 144 seconds. [ 211.635317][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 211.641216][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.649963][ T31] task:syz.3.213 state:D stack:13728 pid:5187 tgid:5187 ppid:2428 task_flags:0x400040 flags:0x00000004 [ 211.661886][ T31] Call Trace: [ 211.665142][ T31] [ 211.668100][ T31] __schedule+0x593/0xd20 [ 211.672406][ T31] schedule+0x25/0x110 [ 211.676439][ T31] schedule_preempt_disabled+0x13/0x30 [ 211.681897][ T31] __mutex_lock+0x617/0xb10 [ 211.686367][ T31] ? hugetlb_fault+0xbd/0xc90 [ 211.691038][ T31] ? hugetlb_fault+0xbd/0xc90 [ 211.695683][ T31] hugetlb_fault+0xbd/0xc90 [ 211.700220][ T31] handle_mm_fault+0x36c/0x380 [ 211.704961][ T31] exc_page_fault+0x25d/0x710 [ 211.709635][ T31] asm_exc_page_fault+0x26/0x30 [ 211.714459][ T31] RIP: 0033:0x7f819b7e7208 [ 211.718862][ T31] RSP: 002b:00007fff96f6e748 EFLAGS: 00010246 [ 211.724919][ T31] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 211.732917][ T31] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 211.740891][ T31] RBP: 00007f819b9d7a80 R08: 00007f819b6a0000 R09: 0000000000000001 [ 211.748969][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000000f106 [ 211.756958][ T31] R13: 00007fff96f6e850 R14: 0000000000000032 R15: fffffffffffffffe [ 211.764910][ T31] [ 211.776400][ T31] INFO: task syz.3.213:5188 blocked for more than 144 seconds. [ 211.783958][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 211.789841][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.798496][ T31] task:syz.3.213 state:D stack:13344 pid:5188 tgid:5187 ppid:2428 task_flags:0x400140 flags:0x00000004 [ 211.810366][ T31] Call Trace: [ 211.813619][ T31] [ 211.816533][ T31] __schedule+0x593/0xd20 [ 211.820849][ T31] schedule+0x25/0x110 [ 211.824987][ T31] schedule_preempt_disabled+0x13/0x30 [ 211.830437][ T31] __mutex_lock+0x617/0xb10 [ 211.834909][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 211.840185][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 211.845433][ T31] ? hugetlbfs_fallocate+0x19e/0x740 [ 211.850721][ T31] hugetlbfs_fallocate+0x263/0x740 [ 211.855806][ T31] ? rcu_is_watching+0x11/0x50 [ 211.860558][ T31] ? __schedule+0x933/0xd20 [ 211.865036][ T31] ? avc_has_perm+0x59/0xe0 [ 211.869527][ T31] ? vfs_fallocate+0x127/0x3c0 [ 211.874257][ T31] ? preempt_count_add+0x4c/0x90 [ 211.879183][ T31] ? vfs_fallocate+0x2ad/0x3c0 [ 211.883913][ T31] vfs_fallocate+0x127/0x3c0 [ 211.888493][ T31] __x64_sys_fallocate+0x3e/0x80 [ 211.893397][ T31] do_syscall_64+0x6d/0x180 2025/05/18 08:41:04 executed programs: 5624 [ 211.897888][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.903749][ T31] RIP: 0033:0x7f819b81dff9 [ 211.908157][ T31] RSP: 002b:00007f819b29f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 211.916534][ T31] RAX: ffffffffffffffda RBX: 00007f819b9d5f80 RCX: 00007f819b81dff9 [ 211.924496][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 211.932451][ T31] RBP: 00007f819b890296 R08: 0000000000000000 R09: 0000000000000000 [ 211.940461][ T31] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 211.948417][ T31] R13: 0000000000000000 R14: 00007f819b9d5f80 R15: 00007fff96f6e5e8 [ 211.956363][ T31] [ 211.965858][ T31] INFO: task syz.2.229:5254 blocked for more than 144 seconds. [ 211.973428][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 211.979321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 211.988006][ T31] task:syz.2.229 state:D stack:14328 pid:5254 tgid:5254 ppid:1949 task_flags:0x400040 flags:0x00000004 [ 211.999887][ T31] Call Trace: [ 212.003141][ T31] [ 212.006045][ T31] __schedule+0x593/0xd20 [ 212.010364][ T31] schedule+0x25/0x110 [ 212.014403][ T31] schedule_preempt_disabled+0x13/0x30 [ 212.019844][ T31] __mutex_lock+0x617/0xb10 [ 212.024314][ T31] ? hugetlb_fault+0xbd/0xc90 [ 212.028985][ T31] ? hugetlb_fault+0xbd/0xc90 [ 212.033629][ T31] hugetlb_fault+0xbd/0xc90 [ 212.038129][ T31] handle_mm_fault+0x36c/0x380 [ 212.042864][ T31] exc_page_fault+0x25d/0x710 [ 212.047535][ T31] asm_exc_page_fault+0x26/0x30 [ 212.052355][ T31] RIP: 0033:0x7fc4f1507208 [ 212.056737][ T31] RSP: 002b:00007fff23bf5958 EFLAGS: 00010246 [ 212.062804][ T31] RAX: 0000000020000640 RBX: 0000000000000004 RCX: 006b6e696c766564 [ 212.070764][ T31] RDX: 0000000000000008 RSI: 006b6e696c766564 RDI: 0000000020000640 [ 212.078722][ T31] RBP: 00007fc4f16f7a80 R08: 00007fc4f13b8000 R09: 0000000000000001 [ 212.086660][ T31] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000000f2f0 [ 212.094609][ T31] R13: 00007fff23bf5a60 R14: 0000000000000032 R15: fffffffffffffffe [ 212.102554][ T31] [ 212.109736][ T31] INFO: task syz.2.229:5255 blocked for more than 144 seconds. [ 212.117337][ T31] Not tainted 6.15.0-rc6-syzkaller #0 [ 212.123243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 212.131904][ T31] task:syz.2.229 state:D stack:12864 pid:5255 tgid:5254 ppid:1949 task_flags:0x400140 flags:0x00000004 [ 212.143790][ T31] Call Trace: [ 212.147085][ T31] [ 212.149991][ T31] __schedule+0x593/0xd20 [ 212.154295][ T31] schedule+0x25/0x110 [ 212.158369][ T31] schedule_preempt_disabled+0x13/0x30 [ 212.163816][ T31] __mutex_lock+0x617/0xb10 [ 212.168313][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 212.173568][ T31] ? hugetlbfs_fallocate+0x263/0x740 [ 212.178836][ T31] ? hugetlbfs_fallocate+0x19e/0x740 [ 212.184082][ T31] hugetlbfs_fallocate+0x263/0x740 [ 212.189188][ T31] ? avc_has_perm+0x59/0xe0 [ 212.193673][ T31] ? vfs_fallocate+0x127/0x3c0 [ 212.198549][ T31] ? preempt_count_add+0x4c/0x90 [ 212.203456][ T31] ? vfs_fallocate+0x2ad/0x3c0 [ 212.208249][ T31] vfs_fallocate+0x127/0x3c0 [ 212.212811][ T31] __x64_sys_fallocate+0x3e/0x80 [ 212.217785][ T31] do_syscall_64+0x6d/0x180 [ 212.222267][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.228174][ T31] RIP: 0033:0x7fc4f153dff9 [ 212.232568][ T31] RSP: 002b:00007fc4f0fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 212.240316][ T2011] modprobe (2011) used greatest stack depth: 11360 bytes left [ 212.240970][ T31] RAX: ffffffffffffffda RBX: 00007fc4f16f5f80 RCX: 00007fc4f153dff9 [ 212.256337][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 212.264323][ T31] RBP: 00007fc4f15b0296 R08: 0000000000000000 R09: 0000000000000000 [ 212.272304][ T31] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 212.280398][ T31] R13: 0000000000000000 R14: 00007fc4f16f5f80 R15: 00007fff23bf57f8 [ 212.288551][ T31] [ 212.292236][ T31] [ 212.292236][ T31] Showing all locks held in the system: [ 212.299941][ T31] 1 lock held by khungtaskd/31: [ 212.304757][ T31] #0: ffffffff82780980 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x36/0x120 [ 212.314545][ T31] 2 locks held by kworker/u8:5/356: [ 212.319723][ T31] 2 locks held by getty/845: [ 212.324280][ T31] #0: ffff8881066d70a0 (&tty->ldisc_sem){....}-{0:0}, at: tty_ldisc_ref_wait+0x23/0x60 [ 212.334057][ T31] #1: ffffc90001b432f0 (&ldata->atomic_read_lock){....}-{3:3}, at: n_tty_read+0x17a/0x660 [ 212.344029][ T31] 3 locks held by syz.4.172/4988: [ 212.349030][ T31] #0: ffff888101fb1f88 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 212.357865][ T31] #1: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 212.368526][ T31] #2: ffff88810e3adee8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xc5/0xc90 [ 212.378143][ T31] 2 locks held by syz.4.172/4989: [ 212.383166][ T31] #0: ffff88810d305e60 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x270 [ 212.393054][ T31] #1: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x849/0xce0 [ 212.403457][ T31] 3 locks held by syz.1.175/5003: [ 212.408457][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.418086][ T31] #1: ffff88810fbc6548 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.429014][ T31] #2: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.440190][ T31] 2 locks held by syz.3.213/5187: [ 212.445195][ T31] #0: ffff88810cf56888 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 212.454055][ T31] #1: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 212.464632][ T31] 3 locks held by syz.3.213/5188: [ 212.469632][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.479265][ T31] #1: ffff888100ea6548 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.490282][ T31] #2: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.501458][ T31] 2 locks held by syz.2.229/5254: [ 212.506450][ T31] #0: ffff88810cf45288 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 212.515296][ T31] #1: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 212.525885][ T31] 3 locks held by syz.2.229/5255: [ 212.530884][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.540509][ T31] #1: ffff888100ea7bc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.551440][ T31] #2: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.562650][ T31] 3 locks held by syz.0.671/8951: [ 212.567669][ T31] #0: ffff88810cfe1988 (vm_lock){....}-{0:0}, at: exc_page_fault+0x221/0x710 [ 212.576490][ T31] #1: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 212.587060][ T31] #2: ffff88810fbee4e8 (&resv_map->rw_sema){....}-{3:3}, at: hugetlb_fault+0xc5/0xc90 [ 212.596680][ T31] 2 locks held by syz.0.671/8952: [ 212.601693][ T31] #0: ffff88810a3ff0e0 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x270 [ 212.611568][ T31] #1: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_wp+0x849/0xce0 [ 212.621979][ T31] 2 locks held by syz.2.713/9131: [ 212.627000][ T31] #0: ffff88810a3f8b20 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x26/0x270 [ 212.636888][ T31] #1: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 212.647462][ T31] 3 locks held by syz.2.713/9140: [ 212.652546][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.662230][ T31] #1: ffff88810fbc69c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.673160][ T31] #2: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.684348][ T31] 3 locks held by syz.0.2929/19250: [ 212.689537][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.699152][ T31] #1: ffff88810dba1c48 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.710077][ T31] #2: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.721267][ T31] 3 locks held by syz.3.2933/19278: [ 212.726431][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.736053][ T31] #1: ffff88810dba2548 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.746985][ T31] #2: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.758174][ T31] 3 locks held by syz.2.2950/19344: [ 212.763335][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.772955][ T31] #1: ffff88810dba3748 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.783880][ T31] #2: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.795066][ T31] 3 locks held by syz.1.4944/29997: [ 212.800244][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.809878][ T31] #1: ffff88810cbb5348 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.820798][ T31] #2: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.832063][ T31] 2 locks held by syz.2.4948/30026: [ 212.837247][ T31] #0: ffff88810a733960 (&mm->mmap_lock){....}-{3:3}, at: lock_mm_and_find_vma+0x98/0x270 [ 212.847122][ T31] #1: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlb_fault+0xbd/0xc90 [ 212.857699][ T31] 3 locks held by syz.2.4948/30027: [ 212.862860][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.872486][ T31] #1: ffff88810cbb60c8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.883411][ T31] #2: ffff888101ab23c8 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.894599][ T31] 3 locks held by syz.0.4986/30161: [ 212.899785][ T31] #0: ffff888102ef03f8 (sb_writers#13){....}-{0:0}, at: __x64_sys_fallocate+0x3e/0x80 [ 212.909402][ T31] #1: ffff88810cbb7bc8 (&sb->s_type->i_mutex_key#15){....}-{3:3}, at: hugetlbfs_fallocate+0xce/0x740 [ 212.920322][ T31] #2: ffff888101ab2728 (&hugetlb_fault_mutex_table[i]){....}-{3:3}, at: hugetlbfs_fallocate+0x263/0x740 [ 212.931508][ T31] 1 lock held by syz.2.5652/2068: [ 212.936505][ T31] [ 212.938810][ T31] ============================================= [ 212.938810][ T31] [ 212.947218][ T31] NMI backtrace for cpu 1 [ 212.947227][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(undef) [ 212.947231][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.947233][ T31] Call Trace: [ 212.947235][ T31] [ 212.947237][ T31] dump_stack_lvl+0x5a/0x90 [ 212.947245][ T31] nmi_cpu_backtrace+0xd4/0x110 [ 212.947249][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 212.947255][ T31] nmi_trigger_cpumask_backtrace+0xd5/0x140 [ 212.947259][ T31] watchdog+0x652/0x690 [ 212.947264][ T31] ? watchdog+0x1f5/0x690 [ 212.947268][ T31] ? __pfx_watchdog+0x10/0x10 [ 212.947271][ T31] kthread+0x107/0x200 [ 212.947276][ T31] ? __pfx_kthread+0x10/0x10 [ 212.947278][ T31] ret_from_fork+0x2c/0x50 [ 212.947283][ T31] ? __pfx_kthread+0x10/0x10 [ 212.947285][ T31] ret_from_fork_asm+0x1a/0x30 [ 212.947293][ T31] [ 212.947294][ T31] Sending NMI from CPU 1 to CPUs 0: [ 213.042543][ C0] NMI backtrace for cpu 0 [ 213.042548][ C0] CPU: 0 UID: 0 PID: 2099 Comm: syz.2.5662 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(undef) [ 213.042551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.042553][ C0] RIP: 0010:__rdmsr_safe_on_cpu+0xf/0x50 [ 213.042559][ C0] Code: c7 c1 30 44 84 81 e9 00 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 54 55 53 48 89 fb 8b 0f 0f 32 <45> 31 e4 66 90 48 c1 e2 20 48 09 c2 48 89 d5 48 89 6b 08 48 8d 7b [ 213.042561][ C0] RSP: 0018:ffffc900011c7cc8 EFLAGS: 00000002 [ 213.042564][ C0] RAX: 0000000000000000 RBX: ffffc900011c7d40 RCX: 0000000000000000 [ 213.042565][ C0] RDX: 0000000000000000 RSI: ffffffff8252b341 RDI: ffffc900011c7d40 [ 213.042567][ C0] RBP: 0000000000000246 R08: 0000000000000002 R09: 0000000000000000 [ 213.042568][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900011c7d40 [ 213.042569][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000ede0 [ 213.042573][ C0] FS: 00007f9909b7f6c0(0000) GS:ffff8882b4bf5000(0000) knlGS:0000000000000000 [ 213.042575][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.042576][ C0] CR2: 0000000020028000 CR3: 000000011f829000 CR4: 00000000003506f0 [ 213.042577][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.042578][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.042580][ C0] Call Trace: [ 213.042582][ C0] [ 213.042583][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 213.042586][ C0] generic_exec_single+0x79/0x1a0 [ 213.042590][ C0] smp_call_function_single_async+0x2c/0x70 [ 213.042593][ C0] rdmsr_safe_on_cpu+0x8f/0xe0 [ 213.042595][ C0] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 213.042599][ C0] msr_read+0x92/0xf0 [ 213.042604][ C0] vfs_read+0xdd/0x370 [ 213.042608][ C0] ? fdget_pos+0x13c/0x180 [ 213.042613][ C0] ksys_read+0x6e/0xe0 [ 213.042616][ C0] do_syscall_64+0x6d/0x180 [ 213.042621][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.042623][ C0] RIP: 0033:0x7f990a0fdff9 [ 213.042626][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.042627][ C0] RSP: 002b:00007f9909b7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.042630][ C0] RAX: ffffffffffffffda RBX: 00007f990a2b5f80 RCX: 00007f990a0fdff9 [ 213.042631][ C0] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 213.042632][ C0] RBP: 00007f990a170296 R08: 0000000000000000 R09: 0000000000000000 [ 213.042634][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.042635][ C0] R13: 0000000000000000 R14: 00007f990a2b5f80 R15: 00007ffc350cf4e8 [ 213.042638][ C0] [ 213.043536][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 213.319989][ T31] Kernel Offset: disabled [ 213.324279][ T31] Rebooting in 86400 seconds..