[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts. syzkaller login: [ 617.360080][ T1134] INFO: task syz-executor926:6811 blocked for more than 143 seconds. [ 617.360103][ T1134] Not tainted 5.8.0-rc3-syzkaller #0 [ 617.360109][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.360118][ T1134] syz-executor926 D28544 6811 6809 0x00004004 [ 617.360157][ T1134] Call Trace: [ 617.360385][ T1134] __schedule+0x7d3/0xc40 [ 617.360414][ T1134] ? schedule+0x188/0x220 [ 617.360429][ T1134] ? schedule_preempt_disabled+0xf/0x20 [ 617.360439][ T1134] ? __mutex_lock_common+0x129f/0x2fc0 [ 617.360534][ T1134] ? fb_open+0x14b/0x3b0 [ 617.360556][ T1134] ? mutex_lock_nested+0x1a/0x20 [ 617.360566][ T1134] ? fb_open+0x14b/0x3b0 [ 617.360668][ T1134] ? chrdev_open+0x498/0x580 [ 617.360682][ T1134] ? cd_forget+0x160/0x160 [ 617.360696][ T1134] ? do_dentry_open+0x813/0x1070 [ 617.360719][ T1134] ? path_openat+0x278d/0x37f0 [ 617.360763][ T1134] ? do_filp_open+0x191/0x3a0 [ 617.360785][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 617.360820][ T1134] ? __alloc_fd+0x55c/0x600 [ 617.360841][ T1134] ? do_sys_openat2+0x463/0x770 [ 617.360861][ T1134] ? __x64_sys_openat+0x1c8/0x1f0 [ 617.360878][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.360918][ T1134] ? do_syscall_64+0x73/0xe0 [ 617.360932][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.360960][ T1134] INFO: task syz-executor926:6812 blocked for more than 143 seconds. [ 617.360969][ T1134] Not tainted 5.8.0-rc3-syzkaller #0 [ 617.360974][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.360992][ T1134] syz-executor926 D28544 6812 6808 0x00004004 [ 617.361022][ T1134] Call Trace: [ 617.361038][ T1134] __schedule+0x7d3/0xc40 [ 617.361061][ T1134] ? schedule+0x188/0x220 [ 617.361074][ T1134] ? schedule_preempt_disabled+0xf/0x20 [ 617.361084][ T1134] ? __mutex_lock_common+0x129f/0x2fc0 [ 617.361107][ T1134] ? fb_open+0x14b/0x3b0 [ 617.361127][ T1134] ? mutex_lock_nested+0x1a/0x20 [ 617.361136][ T1134] ? fb_open+0x14b/0x3b0 [ 617.361152][ T1134] ? chrdev_open+0x498/0x580 [ 617.361165][ T1134] ? cd_forget+0x160/0x160 [ 617.361177][ T1134] ? do_dentry_open+0x813/0x1070 [ 617.361199][ T1134] ? path_openat+0x278d/0x37f0 [ 617.361243][ T1134] ? do_filp_open+0x191/0x3a0 [ 617.361264][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 617.361275][ T1134] ? __alloc_fd+0x55c/0x600 [ 617.361295][ T1134] ? do_sys_openat2+0x463/0x770 [ 617.361315][ T1134] ? __x64_sys_openat+0x1c8/0x1f0 [ 617.361332][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.361343][ T1134] ? do_syscall_64+0x73/0xe0 [ 617.361356][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.361384][ T1134] INFO: task syz-executor926:6813 blocked for more than 143 seconds. [ 617.361390][ T1134] Not tainted 5.8.0-rc3-syzkaller #0 [ 617.361395][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.361401][ T1134] syz-executor926 D27600 6813 6805 0x00004004 [ 617.361430][ T1134] Call Trace: [ 617.361444][ T1134] __schedule+0x7d3/0xc40 [ 617.361466][ T1134] ? schedule+0x188/0x220 [ 617.361481][ T1134] ? schedule_preempt_disabled+0xf/0x20 [ 617.361490][ T1134] ? __mutex_lock_common+0x129f/0x2fc0 [ 617.361512][ T1134] ? fb_open+0x14b/0x3b0 [ 617.361533][ T1134] ? mutex_lock_nested+0x1a/0x20 [ 617.361543][ T1134] ? fb_open+0x14b/0x3b0 [ 617.361559][ T1134] ? chrdev_open+0x498/0x580 [ 617.361571][ T1134] ? cd_forget+0x160/0x160 [ 617.361584][ T1134] ? do_dentry_open+0x813/0x1070 [ 617.361606][ T1134] ? path_openat+0x278d/0x37f0 [ 617.361650][ T1134] ? do_filp_open+0x191/0x3a0 [ 617.361672][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 617.361683][ T1134] ? __alloc_fd+0x55c/0x600 [ 617.361703][ T1134] ? do_sys_openat2+0x463/0x770 [ 617.361723][ T1134] ? __x64_sys_openat+0x1c8/0x1f0 [ 617.361740][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.361752][ T1134] ? do_syscall_64+0x73/0xe0 [ 617.361765][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.361788][ T1134] INFO: task syz-executor926:6814 blocked for more than 143 seconds. [ 617.361795][ T1134] Not tainted 5.8.0-rc3-syzkaller #0 [ 617.361800][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.361806][ T1134] syz-executor926 D28368 6814 6807 0x00004004 [ 617.361830][ T1134] Call Trace: [ 617.361844][ T1134] __schedule+0x7d3/0xc40 [ 617.361866][ T1134] ? schedule+0x188/0x220 [ 617.361880][ T1134] ? schedule_preempt_disabled+0xf/0x20 [ 617.361890][ T1134] ? __mutex_lock_common+0x129f/0x2fc0 [ 617.361913][ T1134] ? fb_open+0x14b/0x3b0 [ 617.361934][ T1134] ? mutex_lock_nested+0x1a/0x20 [ 617.361945][ T1134] ? fb_open+0x14b/0x3b0 [ 617.361961][ T1134] ? chrdev_open+0x498/0x580 [ 617.361973][ T1134] ? cd_forget+0x160/0x160 [ 617.361994][ T1134] ? do_dentry_open+0x813/0x1070 [ 617.362016][ T1134] ? path_openat+0x278d/0x37f0 [ 617.362059][ T1134] ? do_filp_open+0x191/0x3a0 [ 617.362081][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 617.362092][ T1134] ? __alloc_fd+0x55c/0x600 [ 617.362114][ T1134] ? do_sys_openat2+0x463/0x770 [ 617.362134][ T1134] ? __x64_sys_openat+0x1c8/0x1f0 [ 617.362152][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.362163][ T1134] ? do_syscall_64+0x73/0xe0 [ 617.362176][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.362199][ T1134] INFO: task syz-executor926:6815 blocked for more than 143 seconds. [ 617.362206][ T1134] Not tainted 5.8.0-rc3-syzkaller #0 [ 617.362211][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.362217][ T1134] syz-executor926 D28496 6815 6810 0x00004004 [ 617.362249][ T1134] Call Trace: [ 617.362263][ T1134] __schedule+0x7d3/0xc40 [ 617.362286][ T1134] ? schedule+0x188/0x220 [ 617.362299][ T1134] ? schedule_preempt_disabled+0xf/0x20 [ 617.362310][ T1134] ? __mutex_lock_common+0x129f/0x2fc0 [ 617.362333][ T1134] ? fb_open+0x14b/0x3b0 [ 617.362354][ T1134] ? mutex_lock_nested+0x1a/0x20 [ 617.362364][ T1134] ? fb_open+0x14b/0x3b0 [ 617.362380][ T1134] ? chrdev_open+0x498/0x580 [ 617.362392][ T1134] ? cd_forget+0x160/0x160 [ 617.362405][ T1134] ? do_dentry_open+0x813/0x1070 [ 617.362426][ T1134] ? path_openat+0x278d/0x37f0 [ 617.362534][ T1134] ? irqtime_account_irq+0xb4/0x1f0 [ 617.362577][ T1134] ? lockdep_hardirqs_on_prepare+0x425/0x6e0 [ 617.362607][ T1134] ? do_filp_open+0x191/0x3a0 [ 617.362630][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 617.362641][ T1134] ? __alloc_fd+0x55c/0x600 [ 617.362663][ T1134] ? do_sys_openat2+0x463/0x770 [ 617.362683][ T1134] ? __x64_sys_openat+0x1c8/0x1f0 [ 617.362700][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.362711][ T1134] ? do_syscall_64+0x73/0xe0 [ 617.362724][ T1134] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.362745][ T1134] [ 617.362745][ T1134] Showing all locks held in the system: [ 617.362771][ T1134] 1 lock held by khungtaskd/1134: [ 617.362775][ T1134] #0: ffffffff892e9490 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 617.362938][ T1134] 1 lock held by in:imklog/6490: [ 617.362943][ T1134] #0: ffff88809765a1b0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x253/0x2f0 [ 617.362978][ T1134] 2 locks held by syz-executor926/6806: [ 617.363000][ T1134] 1 lock held by syz-executor926/6811: [ 617.363004][ T1134] #0: ffff8880a4b3a078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0x14b/0x3b0 [ 617.363031][ T1134] 1 lock held by syz-executor926/6812: [ 617.363036][ T1134] #0: ffff8880a4b3a078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0x14b/0x3b0 [ 617.363060][ T1134] 1 lock held by syz-executor926/6813: [ 617.363065][ T1134] #0: ffff8880a4b3a078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0x14b/0x3b0 [ 617.363089][ T1134] 1 lock held by syz-executor926/6814: [ 617.363093][ T1134] #0: ffff8880a4b3a078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0x14b/0x3b0 [ 617.363117][ T1134] 1 lock held by syz-executor926/6815: [ 617.363121][ T1134] #0: ffff8880a4b3a078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0x14b/0x3b0 [ 617.363142][ T1134] [ 617.363147][ T1134] ============================================= [ 617.363147][ T1134] [ 617.363154][ T1134] NMI backtrace for cpu 0 [ 617.363167][ T1134] CPU: 0 PID: 1134 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 617.363173][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.363177][ T1134] Call Trace: [ 617.363257][ T1134] dump_stack+0x1f0/0x31e [ 617.363273][ T1134] nmi_cpu_backtrace+0x9f/0x180 [ 617.363331][ T1134] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 617.363343][ T1134] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 617.363388][ T1134] watchdog+0xd65/0xdb0 [ 617.363471][ T1134] kthread+0x37e/0x3a0 [ 617.363482][ T1134] ? hungtask_pm_notify+0x50/0x50 [ 617.363490][ T1134] ? kthread_blkcg+0xd0/0xd0 [ 617.363530][ T1134] ret_from_fork+0x1f/0x30 [ 617.363552][ T1134] Sending NMI from CPU 0 to CPUs 1: [ 617.363980][ C1] NMI backtrace for cpu 1 [ 617.363986][ C1] CPU: 1 PID: 6806 Comm: syz-executor926 Not tainted 5.8.0-rc3-syzkaller #0 [ 617.363991][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.363994][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 617.364001][ C1] Code: 00 00 0f 0b 66 90 53 48 89 fb e8 17 00 00 00 48 8b 3d b8 b1 f8 07 48 89 de 5b e9 87 8d 3e 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0c 25 00 fe 01 00 65 8b 15 e8 81 8d 7e f7 c2 00 01 ff 00 [ 617.364004][ C1] RSP: 0018:ffffc90000d8f900 EFLAGS: 00000292 [ 617.364010][ C1] RAX: ffffffff83d21401 RBX: ffff8880000a0000 RCX: 0000000000000000 [ 617.364013][ C1] RDX: 0000000000000000 RSI: ffff8880000a0000 RDI: ffff8880a4b3a000 [ 617.364017][ C1] RBP: 0000000000000000 R08: 0000000000000a00 R09: 0000000000000040 [ 617.364020][ C1] R10: 0000000000000002 R11: ffff888097bec240 R12: 000000006259eb57 [ 617.364024][ C1] R13: 0000000000000040 R14: 0000000000000000 R15: 0000000000000a00 [ 617.364028][ C1] FS: 0000000001781880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 617.364031][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.364035][ C1] CR2: 0000000020000180 CR3: 0000000093701000 CR4: 00000000001406e0 [ 617.364038][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 617.364042][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 617.364044][ C1] Call Trace: [ 617.364046][ C1] bitfill_aligned+0x21/0x1f0 [ 617.364049][ C1] ? bitfill_aligned_rev+0x1e0/0x1e0 [ 617.364052][ C1] cfb_fillrect+0x57b/0x790 [ 617.364054][ C1] bit_clear_margins+0x37b/0x620 [ 617.364057][ C1] fbcon_switch+0x1448/0x1e40 [ 617.364059][ C1] redraw_screen+0x4fc/0x16f0 [ 617.364062][ C1] fbcon_modechanged+0x8d5/0xd90 [ 617.364064][ C1] fb_set_var+0x825/0xcc0 [ 617.364067][ C1] do_fb_ioctl+0x502/0x6f0 [ 617.364069][ C1] ? fb_write+0x540/0x540 [ 617.364071][ C1] __se_sys_ioctl+0xf9/0x160 [ 617.364074][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.364077][ C1] do_syscall_64+0x73/0xe0 [ 617.364080][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 617.364082][ C1] RIP: 0033:0x441459 [ 617.364084][ C1] Code: Bad RIP value. [ 617.364087][ C1] RSP: 002b:00007ffdbc80df08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.364093][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441459 [ 617.364096][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 617.364100][ C1] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 617.364103][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000004021d0 [ 617.364107][ C1] R13: 0000000000402260 R14: 0000000000000000 R15: 0000000000000000 [ 617.364575][ T1134] Kernel panic - not syncing: hung_task: blocked tasks [ 617.364586][ T1134] CPU: 0 PID: 1134 Comm: khungtaskd Not tainted 5.8.0-rc3-syzkaller #0 [ 617.364591][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.364594][ T1134] Call Trace: [ 617.364610][ T1134] dump_stack+0x1f0/0x31e [ 617.364662][ T1134] panic+0x264/0x7a0 [ 617.364674][ T1134] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 617.364684][ T1134] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 617.364693][ T1134] watchdog+0xda5/0xdb0 [ 617.364712][ T1134] kthread+0x37e/0x3a0 [ 617.364722][ T1134] ? hungtask_pm_notify+0x50/0x50 [ 617.364729][ T1134] ? kthread_blkcg+0xd0/0xd0 [ 617.364744][ T1134] ret_from_fork+0x1f/0x30 [ 617.366367][ T1134] Kernel Offset: disabled [ 618.548504][ T1134] Rebooting in 86400 seconds..