syzbot


INFO: task hung in release_tty

Status: auto-closed as invalid on 2020/11/18 01:32
Reported-by: syzbot+ba9987baa715ce3b6abf@syzkaller.appspotmail.com
First crash: 1447d, last: 1375d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream INFO: task hung in release_tty (2) serial 2 900d 978d 0/26 auto-closed as invalid on 2022/02/05 17:28
linux-4.14 INFO: task hung in release_tty 6 1380d 1579d 0/1 auto-closed as invalid on 2020/11/12 17:59
upstream INFO: task hung in release_tty serial 3 1515d 1571d 0/26 auto-closed as invalid on 2020/06/30 16:07

Sample crash report:
UDF-fs: bad mount option "squashfu" or missing value
NOHZ: local_softirq_pending 08
NOHZ: local_softirq_pending 08
NOHZ: local_softirq_pending 08
NOHZ: local_softirq_pending 08
INFO: task syz-executor.0:12603 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.0  D28648 12603   6459 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_timeout+0x90e/0xef0 kernel/time/timer.c:1782
 __down_common kernel/locking/semaphore.c:221 [inline]
 __down+0x183/0x2a0 kernel/locking/semaphore.c:238
 down+0x57/0x80 kernel/locking/semaphore.c:62
 console_lock+0x25/0x80 kernel/printk/printk.c:2244
 con_shutdown+0x3d/0x90 drivers/tty/vt/vt.c:3281
 release_tty+0xda/0x440 drivers/tty/tty_io.c:1509
 tty_release_struct+0xb4/0xe0 drivers/tty/tty_io.c:1624
 tty_release+0xc67/0xf60 drivers/tty/tty_io.c:1784
 __fput+0x2ce/0x890 fs/file_table.c:278
 task_work_run+0x148/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
 do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x415d51
Code: 00 00 0f b6 db 89 d8 48 89 d3 31 d2 66 f7 f6 0f b6 d0 49 0f af d7 48 83 fa 40 48 19 f6 48 89 c8 48 89 d1 41 bf 01 00 00 00 49 <d3> e7 49 21 f7 49 8d 77 ff 49 21 f5 31 d2 31 f6 49 89 cf 48 85 d2
RSP: 002b:00007ffc00d56440 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000415d51
RDX: 0000000000000000 RSI: 0000000000001a46 RDI: 0000000000000005
RBP: 0000000000000001 R08: 000000005a359a46 R09: 000000005a359a4a
R10: 00007ffc00d56530 R11: 0000000000000293 R12: 000000000078c900
R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c
INFO: task syz-executor.4:12626 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D28648 12626   6794 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 fb_release+0x4e/0x140 drivers/video/fbdev/core/fbmem.c:1486
 __fput+0x2ce/0x890 fs/file_table.c:278
 task_work_run+0x148/0x1c0 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:193 [inline]
 exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167
 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:271 [inline]
 do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 18 0f 57 c0 0f 11 44 24 20 48 c7 44 24 30 64 00 00 00 0f 11 44 24 38 48 89 5c 24 48 e8 c0 dc ff ff 48 8b 44 24 50 48 85 c0 75 <12> 48 8b 8c 24 c8 01 00 00 0f ba e1 00 0f 83 13 01 00 00 48 83 f8
RSP: 002b:00007f46dfd37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000124
RAX: 0000000000000003 RBX: 0000000000002980 RCX: 000000000045c1d9
RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac
R13: 00007ffdc76a42df R14: 00007f46dfd389c0 R15: 000000000078bfac
INFO: task syz-executor.4:12630 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D29696 12630   6794 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 lock_fb_info drivers/video/fbdev/core/fbmem.c:81 [inline]
 do_fb_ioctl+0x17e/0xb50 drivers/video/fbdev/core/fbmem.c:1212
 fb_ioctl+0xdd/0x130 drivers/video/fbdev/core/fbmem.c:1230
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 18 0f 57 c0 0f 11 44 24 20 48 c7 44 24 30 64 00 00 00 0f 11 44 24 38 48 89 5c 24 48 e8 c0 dc ff ff 48 8b 44 24 50 48 85 c0 75 <12> 48 8b 8c 24 c8 01 00 00 0f ba e1 00 0f 83 13 01 00 00 48 83 f8
RSP: 002b:00007f46dfd16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000c9c0 RCX: 000000000045c1d9
RDX: 0000000000000000 RSI: 00000000c020f509 RDI: 0000000000000003
RBP: 000000000078c080 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c04c
R13: 00007ffdc76a42df R14: 00007f46dfd179c0 R15: 000000000078c04c
INFO: task syz-executor.4:12633 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D28648 12633   6794 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 fb_open+0xd3/0x430 drivers/video/fbdev/core/fbmem.c:1457
 chrdev_open+0x266/0x770 fs/char_dev.c:423
 do_dentry_open+0x4aa/0x1160 fs/open.c:796
 do_last fs/namei.c:3421 [inline]
 path_openat+0x793/0x2df0 fs/namei.c:3537
 do_filp_open+0x18c/0x3f0 fs/namei.c:3567
 do_sys_open+0x3b3/0x520 fs/open.c:1085
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 18 0f 57 c0 0f 11 44 24 20 48 c7 44 24 30 64 00 00 00 0f 11 44 24 38 48 89 5c 24 48 e8 c0 dc ff ff 48 8b 44 24 50 48 85 c0 75 <12> 48 8b 8c 24 c8 01 00 00 0f ba e1 00 0f 83 13 01 00 00 48 83 f8
RSP: 002b:00007f46dfcf5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000020880 RCX: 000000000045c1d9
RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 000000000078c128 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c0ec
R13: 00007ffdc76a42df R14: 00007f46dfcf69c0 R15: 000000000078c0ec
INFO: task syz-executor.4:12650 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.4  D29520 12650   6794 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 fb_open+0xd3/0x430 drivers/video/fbdev/core/fbmem.c:1457
 chrdev_open+0x266/0x770 fs/char_dev.c:423
 do_dentry_open+0x4aa/0x1160 fs/open.c:796
 do_last fs/namei.c:3421 [inline]
 path_openat+0x793/0x2df0 fs/namei.c:3537
 do_filp_open+0x18c/0x3f0 fs/namei.c:3567
 do_sys_open+0x3b3/0x520 fs/open.c:1085
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 18 0f 57 c0 0f 11 44 24 20 48 c7 44 24 30 64 00 00 00 0f 11 44 24 38 48 89 5c 24 48 e8 c0 dc ff ff 48 8b 44 24 50 48 85 c0 75 <12> 48 8b 8c 24 c8 01 00 00 0f ba e1 00 0f 83 13 01 00 00 48 83 f8
RSP: 002b:00007f46dfcd4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000020880 RCX: 000000000045c1d9
RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c
RBP: 000000000078c1c8 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078c18c
R13: 00007ffdc76a42df R14: 00007f46dfcd59c0 R15: 000000000078c18c
INFO: task syz-executor.5:12624 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5  D28184 12624   6949 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_timeout+0x90e/0xef0 kernel/time/timer.c:1782
 __down_common kernel/locking/semaphore.c:221 [inline]
 __down+0x183/0x2a0 kernel/locking/semaphore.c:238
 down+0x57/0x80 kernel/locking/semaphore.c:62
 console_lock+0x25/0x80 kernel/printk/printk.c:2244
 do_con_write+0x11b/0x1d90 drivers/tty/vt/vt.c:2576
 con_write+0x22/0xb0 drivers/tty/vt/vt.c:3138
 process_output_block drivers/tty/n_tty.c:593 [inline]
 n_tty_write+0x3c0/0xff0 drivers/tty/n_tty.c:2331
 do_tty_write drivers/tty/tty_io.c:960 [inline]
 tty_write+0x496/0x810 drivers/tty/tty_io.c:1044
 __vfs_write+0xf7/0x770 fs/read_write.c:485
 vfs_write+0x1f3/0x540 fs/read_write.c:549
 ksys_write+0x12b/0x2a0 fs/read_write.c:599
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 18 0f 57 c0 0f 11 44 24 20 48 c7 44 24 30 64 00 00 00 0f 11 44 24 38 48 89 5c 24 48 e8 c0 dc ff ff 48 8b 44 24 50 48 85 c0 75 <12> 48 8b 8c 24 c8 01 00 00 0f ba e1 00 0f 83 13 01 00 00 48 83 f8
RSP: 002b:00007f51c88adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000036980 RCX: 000000000045c1d9
RDX: 000000000000001e RSI: 0000000020000000 RDI: 0000000000000005
RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c
R13: 00007ffe4b7b281f R14: 00007f51c88ae9c0 R15: 000000000078bf0c
INFO: task syz-executor.5:12648 blocked for more than 140 seconds.
      Not tainted 4.19.133-syzkaller #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
syz-executor.5  D29360 12648   6949 0x00000004
Call Trace:
 context_switch kernel/sched/core.c:2826 [inline]
 __schedule+0x887/0x2040 kernel/sched/core.c:3515
 schedule+0x8d/0x1b0 kernel/sched/core.c:3559
 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3617
 __mutex_lock_common kernel/locking/mutex.c:1002 [inline]
 __mutex_lock+0x647/0x1260 kernel/locking/mutex.c:1072
 tty_open_by_driver drivers/tty/tty_io.c:1945 [inline]
 tty_open+0x387/0x990 drivers/tty/tty_io.c:2029
 chrdev_open+0x266/0x770 fs/char_dev.c:423
 do_dentry_open+0x4aa/0x1160 fs/open.c:796
 do_last fs/namei.c:3421 [inline]
 path_openat+0x793/0x2df0 fs/namei.c:3537
 do_filp_open+0x18c/0x3f0 fs/namei.c:3567
 do_sys_open+0x3b3/0x520 fs/open.c:1085
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x415f51
Code: ec ff ff 48 8b 44 24 38 48 89 44 24 48 48 8b 4c 24 30 48 89 8c 24 c0 00 00 00 8b 54 24 2c 89 54 24 44 8b 5c 24 28 89 5c 24 40 <48> 8b 74 24 20 48 89 b4 24 b8 00 00 00 48 8b bc 24 a8 00 00 00 48
RSP: 002b:00007f51c888c820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
RAX: ffffffffffffffda RBX: 000000000078bfa0 RCX: 0000000000415f51
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f51c888c850
RBP: 000000000078bfe0 R08: 0000000000000000 R09: 000000000000000d
R10: 0000000000000064 R11: 0000000000000293 R12: 000000000078bfac
R13: 00007ffe4b7b281f R14: 00007f51c888d9c0 R15: 000000000078bfac

Showing all locks held in the system:
1 lock held by khungtaskd/1083:
 #0: 000000004887ac2c (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4440
1 lock held by in:imklog/6168:
 #0: 000000006a44193c (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 fs/file.c:767
2 locks held by agetty/6372:
 #0: 00000000bf258dd3 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: 00000000d7953ac6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154
1 lock held by syz-executor.0/12603:
 #0: 00000000e37906a8 (tty_mutex){+.+.}, at: tty_release_struct+0xa9/0xe0 drivers/tty/tty_io.c:1623
3 locks held by syz-executor.4/12621:
1 lock held by syz-executor.4/12626:
 #0: 00000000133c7895 (&fb_info->lock){+.+.}, at: fb_release+0x4e/0x140 drivers/video/fbdev/core/fbmem.c:1486
1 lock held by syz-executor.4/12630:
 #0: 00000000133c7895 (&fb_info->lock){+.+.}, at: lock_fb_info drivers/video/fbdev/core/fbmem.c:81 [inline]
 #0: 00000000133c7895 (&fb_info->lock){+.+.}, at: do_fb_ioctl+0x17e/0xb50 drivers/video/fbdev/core/fbmem.c:1212
1 lock held by syz-executor.4/12633:
 #0: 00000000133c7895 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 drivers/video/fbdev/core/fbmem.c:1457
1 lock held by syz-executor.4/12650:
 #0: 00000000133c7895 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 drivers/video/fbdev/core/fbmem.c:1457
4 locks held by syz-executor.5/12624:
 #0: 00000000bf258dd3 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272
 #1: 000000005e28651a (&tty->atomic_write_lock){+.+.}, at: tty_write_lock drivers/tty/tty_io.c:886 [inline]
 #1: 000000005e28651a (&tty->atomic_write_lock){+.+.}, at: do_tty_write drivers/tty/tty_io.c:909 [inline]
 #1: 000000005e28651a (&tty->atomic_write_lock){+.+.}, at: tty_write+0x24e/0x810 drivers/tty/tty_io.c:1044
 #2: 00000000b2cd59e4 (&tty->termios_rwsem){++++}, at: n_tty_write+0x1b5/0xff0 drivers/tty/n_tty.c:2314
 #3: 000000000f893437 (&ldata->output_lock){+.+.}, at: process_output_block drivers/tty/n_tty.c:548 [inline]
 #3: 000000000f893437 (&ldata->output_lock){+.+.}, at: n_tty_write+0x4e3/0xff0 drivers/tty/n_tty.c:2331
1 lock held by syz-executor.5/12648:
 #0: 00000000e37906a8 (tty_mutex){+.+.}, at: tty_open_by_driver drivers/tty/tty_io.c:1945 [inline]
 #0: 00000000e37906a8 (tty_mutex){+.+.}, at: tty_open+0x387/0x990 drivers/tty/tty_io.c:2029

=============================================

NMI backtrace for cpu 0
CPU: 0 PID: 1083 Comm: khungtaskd Not tainted 4.19.133-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1fc/0x2fe lib/dump_stack.c:118
 nmi_cpu_backtrace.cold+0x63/0xa2 lib/nmi_backtrace.c:101
 nmi_trigger_cpumask_backtrace+0x1a6/0x1eb lib/nmi_backtrace.c:62
 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline]
 check_hung_uninterruptible_tasks kernel/hung_task.c:203 [inline]
 watchdog+0x991/0xe60 kernel/hung_task.c:287
 kthread+0x30b/0x410 kernel/kthread.c:246
 ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 PID: 12621 Comm: syz-executor.4 Not tainted 4.19.133-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x50 kernel/kcov.c:106
Code: 65 8b 15 ec 44 98 7e 81 e2 00 01 1f 00 75 2b 8b 90 d8 12 00 00 83 fa 02 75 20 48 8b 88 e0 12 00 00 8b 80 dc 12 00 00 48 8b 11 <48> 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 c3 0f 1f 84 00 00
RSP: 0018:ffff88804d2e71f8 EFLAGS: 00000246
RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000e334000
RDX: 000000000003ffff RSI: ffffffff8381befd RDI: 0000000000000005
RBP: 00000000ffffffff R08: 0000000000000500 R09: 0000000000000000
R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880000a00a0
R13: ffff8880000a00a0 R14: 0000000000000000 R15: 0000000000000004
FS:  00007f46dfd59700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000564e700d5c30 CR3: 000000009120b000 CR4: 00000000001406e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 bitfill_aligned drivers/video/fbdev/core/cfbfillrect.c:78 [inline]
 bitfill_aligned+0x19d/0x200 drivers/video/fbdev/core/cfbfillrect.c:35
 cfb_fillrect+0x40b/0x7b0 drivers/video/fbdev/core/cfbfillrect.c:327
 vga16fb_fillrect+0x683/0x1940 drivers/video/fbdev/vga16fb.c:951
 bit_clear_margins+0x2d5/0x4a0 drivers/video/fbdev/core/bitblit.c:232
 fbcon_clear_margins+0x1e2/0x350 drivers/video/fbdev/core/fbcon.c:1342
 fbcon_switch+0x1038/0x1d26 drivers/video/fbdev/core/fbcon.c:2324
 redraw_screen+0x37d/0x870 drivers/tty/vt/vt.c:1015
 fbcon_modechanged+0x6e9/0x9f0 drivers/video/fbdev/core/fbcon.c:2972
 fbcon_event_notify+0x197/0x1d80 drivers/video/fbdev/core/fbcon.c:3347
 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93
 __blocking_notifier_call_chain kernel/notifier.c:317 [inline]
 __blocking_notifier_call_chain kernel/notifier.c:304 [inline]
 blocking_notifier_call_chain kernel/notifier.c:328 [inline]
 blocking_notifier_call_chain+0x85/0xa0 kernel/notifier.c:325
 fb_set_var+0xc51/0xe20 drivers/video/fbdev/core/fbmem.c:1042
 do_fb_ioctl+0x3cf/0xb50 drivers/video/fbdev/core/fbmem.c:1115
 fb_ioctl+0xdd/0x130 drivers/video/fbdev/core/fbmem.c:1230
 vfs_ioctl fs/ioctl.c:46 [inline]
 file_ioctl fs/ioctl.c:501 [inline]
 do_vfs_ioctl+0xcdb/0x12e0 fs/ioctl.c:688
 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705
 __do_sys_ioctl fs/ioctl.c:712 [inline]
 __se_sys_ioctl fs/ioctl.c:710 [inline]
 __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x45c1d9
Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f46dfd58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 000000000000ce80 RCX: 000000000045c1d9
RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004
RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c
R13: 00007ffdc76a42df R14: 00007f46dfd599c0 R15: 000000000078bf0c

Crashes (2):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/07/21 01:32 linux-4.19.y 17a87580a885 8caeeeb7 .config console log report ci2-linux-4-19
2020/05/09 14:35 linux-4.19.y 84920cc7fbe1 88cb3e92 .config console log report ci2-linux-4-19
* Struck through repros no longer work on HEAD.