[ 92.348530][ T26] audit: type=1800 audit(1579464662.027:26): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 93.199735][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 93.199748][ T26] audit: type=1800 audit(1579464662.917:29): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 93.226387][ T26] audit: type=1800 audit(1579464662.917:30): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 578.878586][ T1129] INFO: task syz-executor872:9851 blocked for more than 143 seconds. [ 578.878609][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.878616][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.878623][ T1129] syz-executor872 D28280 9851 9849 0x20020004 [ 578.878725][ T1129] Call Trace: [ 578.878795][ T1129] __schedule+0x934/0x1f90 [ 578.878820][ T1129] ? __sched_text_start+0x8/0x8 [ 578.878859][ T1129] ? lock_downgrade+0x920/0x920 [ 578.878875][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 578.878899][ T1129] schedule+0xdc/0x2b0 [ 578.878920][ T1129] schedule_preempt_disabled+0x13/0x20 [ 578.878937][ T1129] __mutex_lock+0x7ab/0x13c0 [ 578.878997][ T1129] ? fb_open+0xd7/0x450 [ 578.879020][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 578.879104][ T1129] ? __kasan_check_write+0x14/0x20 [ 578.879123][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 578.879156][ T1129] ? chrdev_open+0xca/0x6b0 [ 578.879190][ T1129] mutex_lock_nested+0x16/0x20 [ 578.879207][ T1129] ? mutex_lock_nested+0x16/0x20 [ 578.879222][ T1129] fb_open+0xd7/0x450 [ 578.879242][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 578.879255][ T1129] chrdev_open+0x245/0x6b0 [ 578.879273][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.879313][ T1129] ? security_file_open+0x87/0x300 [ 578.879354][ T1129] do_dentry_open+0x4e6/0x1380 [ 578.879368][ T1129] ? __kasan_check_read+0x11/0x20 [ 578.879382][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.879405][ T1129] ? chown_common+0x5c0/0x5c0 [ 578.879441][ T1129] ? inode_permission+0xb4/0x520 [ 578.879461][ T1129] vfs_open+0xa0/0xd0 [ 578.879480][ T1129] path_openat+0x118b/0x3180 [ 578.879512][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 578.879526][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 578.879553][ T1129] ? __alloc_fd+0x487/0x620 [ 578.879576][ T1129] do_filp_open+0x1a1/0x280 [ 578.879596][ T1129] ? may_open_dev+0x100/0x100 [ 578.879626][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 578.879661][ T1129] do_sys_open+0x3fe/0x5d0 [ 578.879679][ T1129] ? filp_open+0x80/0x80 [ 578.879706][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.879724][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.879764][ T1129] ? entry_SYSENTER_compat+0x70/0x7f [ 578.879781][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.879802][ T1129] __ia32_compat_sys_openat+0x98/0xf0 [ 578.879822][ T1129] do_fast_syscall_32+0x27b/0xe16 [ 578.879847][ T1129] entry_SYSENTER_compat+0x70/0x7f [ 578.879860][ T1129] RIP: 0023:0xf7fb69a9 [ 578.879928][ T1129] Code: Bad RIP value. [ 578.879937][ T1129] RSP: 002b:00000000fffbcf9c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 578.879952][ T1129] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 578.879961][ T1129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 578.879970][ T1129] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 578.879979][ T1129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.879988][ T1129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.880017][ T1129] INFO: task syz-executor872:9852 blocked for more than 143 seconds. [ 578.880026][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.880032][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.880045][ T1129] syz-executor872 D28280 9852 9848 0x20024004 [ 578.880068][ T1129] Call Trace: [ 578.880089][ T1129] __schedule+0x934/0x1f90 [ 578.880113][ T1129] ? __sched_text_start+0x8/0x8 [ 578.880126][ T1129] ? lock_downgrade+0x920/0x920 [ 578.880143][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 578.880178][ T1129] schedule+0xdc/0x2b0 [ 578.880199][ T1129] schedule_preempt_disabled+0x13/0x20 [ 578.880217][ T1129] __mutex_lock+0x7ab/0x13c0 [ 578.880236][ T1129] ? fb_open+0xd7/0x450 [ 578.880258][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 578.880275][ T1129] ? __kasan_check_write+0x14/0x20 [ 578.880293][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 578.880307][ T1129] ? chrdev_open+0xca/0x6b0 [ 578.880341][ T1129] mutex_lock_nested+0x16/0x20 [ 578.880359][ T1129] ? mutex_lock_nested+0x16/0x20 [ 578.880374][ T1129] fb_open+0xd7/0x450 [ 578.880394][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 578.880407][ T1129] chrdev_open+0x245/0x6b0 [ 578.880424][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.880450][ T1129] ? security_file_open+0x87/0x300 [ 578.880471][ T1129] do_dentry_open+0x4e6/0x1380 [ 578.880485][ T1129] ? __kasan_check_read+0x11/0x20 [ 578.880500][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.880522][ T1129] ? chown_common+0x5c0/0x5c0 [ 578.880539][ T1129] ? inode_permission+0xb4/0x520 [ 578.880559][ T1129] vfs_open+0xa0/0xd0 [ 578.880578][ T1129] path_openat+0x118b/0x3180 [ 578.880610][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 578.880623][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 578.880646][ T1129] ? __alloc_fd+0x487/0x620 [ 578.880669][ T1129] do_filp_open+0x1a1/0x280 [ 578.880688][ T1129] ? may_open_dev+0x100/0x100 [ 578.880718][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 578.880752][ T1129] do_sys_open+0x3fe/0x5d0 [ 578.880770][ T1129] ? filp_open+0x80/0x80 [ 578.880792][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.880809][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.880825][ T1129] ? entry_SYSENTER_compat+0x70/0x7f [ 578.880842][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.880862][ T1129] __ia32_compat_sys_openat+0x98/0xf0 [ 578.880883][ T1129] do_fast_syscall_32+0x27b/0xe16 [ 578.880905][ T1129] entry_SYSENTER_compat+0x70/0x7f [ 578.880915][ T1129] RIP: 0023:0xf7fb69a9 [ 578.880929][ T1129] Code: Bad RIP value. [ 578.880938][ T1129] RSP: 002b:00000000fffbcf9c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 578.880952][ T1129] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 578.880961][ T1129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 578.880970][ T1129] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 578.880979][ T1129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.880988][ T1129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.881015][ T1129] INFO: task syz-executor872:9853 blocked for more than 143 seconds. [ 578.881024][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.881030][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.881042][ T1129] syz-executor872 D28280 9853 9850 0x20020004 [ 578.881065][ T1129] Call Trace: [ 578.881085][ T1129] __schedule+0x934/0x1f90 [ 578.881110][ T1129] ? __sched_text_start+0x8/0x8 [ 578.881123][ T1129] ? lock_downgrade+0x920/0x920 [ 578.881139][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 578.881163][ T1129] schedule+0xdc/0x2b0 [ 578.881184][ T1129] schedule_preempt_disabled+0x13/0x20 [ 578.881202][ T1129] __mutex_lock+0x7ab/0x13c0 [ 578.881220][ T1129] ? fb_open+0xd7/0x450 [ 578.881243][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 578.881260][ T1129] ? __kasan_check_write+0x14/0x20 [ 578.881278][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 578.881292][ T1129] ? chrdev_open+0xca/0x6b0 [ 578.881325][ T1129] mutex_lock_nested+0x16/0x20 [ 578.881343][ T1129] ? mutex_lock_nested+0x16/0x20 [ 578.881358][ T1129] fb_open+0xd7/0x450 [ 578.881378][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 578.881391][ T1129] chrdev_open+0x245/0x6b0 [ 578.881408][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.881428][ T1129] ? security_file_open+0x87/0x300 [ 578.881449][ T1129] do_dentry_open+0x4e6/0x1380 [ 578.881463][ T1129] ? __kasan_check_read+0x11/0x20 [ 578.881478][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.881500][ T1129] ? chown_common+0x5c0/0x5c0 [ 578.881519][ T1129] ? inode_permission+0xb4/0x520 [ 578.881537][ T1129] vfs_open+0xa0/0xd0 [ 578.881556][ T1129] path_openat+0x118b/0x3180 [ 578.881588][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 578.881602][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 578.881624][ T1129] ? __alloc_fd+0x487/0x620 [ 578.881647][ T1129] do_filp_open+0x1a1/0x280 [ 578.881666][ T1129] ? may_open_dev+0x100/0x100 [ 578.881696][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 578.881731][ T1129] do_sys_open+0x3fe/0x5d0 [ 578.881748][ T1129] ? filp_open+0x80/0x80 [ 578.881770][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.881787][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.881803][ T1129] ? entry_SYSENTER_compat+0x70/0x7f [ 578.881820][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.881840][ T1129] __ia32_compat_sys_openat+0x98/0xf0 [ 578.881861][ T1129] do_fast_syscall_32+0x27b/0xe16 [ 578.881883][ T1129] entry_SYSENTER_compat+0x70/0x7f [ 578.881893][ T1129] RIP: 0023:0xf7fb69a9 [ 578.881907][ T1129] Code: Bad RIP value. [ 578.881916][ T1129] RSP: 002b:00000000fffbcf9c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 578.881930][ T1129] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 578.881939][ T1129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 578.881948][ T1129] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 578.881957][ T1129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.881965][ T1129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.881993][ T1129] INFO: task syz-executor872:9854 blocked for more than 143 seconds. [ 578.882002][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.882007][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.882014][ T1129] syz-executor872 D28280 9854 9847 0x20024004 [ 578.882052][ T1129] Call Trace: [ 578.882073][ T1129] __schedule+0x934/0x1f90 [ 578.882097][ T1129] ? __sched_text_start+0x8/0x8 [ 578.882110][ T1129] ? lock_downgrade+0x920/0x920 [ 578.882126][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 578.882150][ T1129] schedule+0xdc/0x2b0 [ 578.882171][ T1129] schedule_preempt_disabled+0x13/0x20 [ 578.882188][ T1129] __mutex_lock+0x7ab/0x13c0 [ 578.882207][ T1129] ? fb_open+0xd7/0x450 [ 578.882229][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 578.882246][ T1129] ? __kasan_check_write+0x14/0x20 [ 578.882264][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 578.882278][ T1129] ? chrdev_open+0xca/0x6b0 [ 578.882312][ T1129] mutex_lock_nested+0x16/0x20 [ 578.882329][ T1129] ? mutex_lock_nested+0x16/0x20 [ 578.882345][ T1129] fb_open+0xd7/0x450 [ 578.882364][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 578.882377][ T1129] chrdev_open+0x245/0x6b0 [ 578.882395][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.882414][ T1129] ? security_file_open+0x87/0x300 [ 578.882436][ T1129] do_dentry_open+0x4e6/0x1380 [ 578.882450][ T1129] ? __kasan_check_read+0x11/0x20 [ 578.882464][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.882487][ T1129] ? chown_common+0x5c0/0x5c0 [ 578.882505][ T1129] ? inode_permission+0xb4/0x520 [ 578.882525][ T1129] vfs_open+0xa0/0xd0 [ 578.882542][ T1129] path_openat+0x118b/0x3180 [ 578.882574][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 578.882586][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 578.882609][ T1129] ? __alloc_fd+0x487/0x620 [ 578.882632][ T1129] do_filp_open+0x1a1/0x280 [ 578.882651][ T1129] ? may_open_dev+0x100/0x100 [ 578.882681][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 578.882715][ T1129] do_sys_open+0x3fe/0x5d0 [ 578.882733][ T1129] ? filp_open+0x80/0x80 [ 578.882754][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.882772][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.882787][ T1129] ? entry_SYSENTER_compat+0x70/0x7f [ 578.882809][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.882829][ T1129] __ia32_compat_sys_openat+0x98/0xf0 [ 578.882850][ T1129] do_fast_syscall_32+0x27b/0xe16 [ 578.882876][ T1129] entry_SYSENTER_compat+0x70/0x7f [ 578.882887][ T1129] RIP: 0023:0xf7fb69a9 [ 578.882906][ T1129] Code: Bad RIP value. [ 578.882914][ T1129] RSP: 002b:00000000fffbcf9c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 578.882928][ T1129] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 578.882937][ T1129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 578.882946][ T1129] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 578.882959][ T1129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.882968][ T1129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.883000][ T1129] INFO: task syz-executor872:9855 blocked for more than 143 seconds. [ 578.883013][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.883022][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.883029][ T1129] syz-executor872 D28248 9855 9845 0x20020004 [ 578.883110][ T1129] Call Trace: [ 578.883138][ T1129] __schedule+0x934/0x1f90 [ 578.883163][ T1129] ? __sched_text_start+0x8/0x8 [ 578.883177][ T1129] ? lock_downgrade+0x920/0x920 [ 578.883195][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 578.883219][ T1129] schedule+0xdc/0x2b0 [ 578.883241][ T1129] schedule_preempt_disabled+0x13/0x20 [ 578.883259][ T1129] __mutex_lock+0x7ab/0x13c0 [ 578.883279][ T1129] ? fb_open+0xd7/0x450 [ 578.883300][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 578.883318][ T1129] ? __kasan_check_write+0x14/0x20 [ 578.883336][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 578.883351][ T1129] ? chrdev_open+0xca/0x6b0 [ 578.883387][ T1129] mutex_lock_nested+0x16/0x20 [ 578.883404][ T1129] ? mutex_lock_nested+0x16/0x20 [ 578.883420][ T1129] fb_open+0xd7/0x450 [ 578.883449][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 578.883464][ T1129] chrdev_open+0x245/0x6b0 [ 578.883482][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.883502][ T1129] ? security_file_open+0x87/0x300 [ 578.883523][ T1129] do_dentry_open+0x4e6/0x1380 [ 578.883537][ T1129] ? __kasan_check_read+0x11/0x20 [ 578.883553][ T1129] ? cdev_put.part.0+0x50/0x50 [ 578.883577][ T1129] ? chown_common+0x5c0/0x5c0 [ 578.883597][ T1129] ? inode_permission+0xb4/0x520 [ 578.883618][ T1129] vfs_open+0xa0/0xd0 [ 578.883637][ T1129] path_openat+0x118b/0x3180 [ 578.883673][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 578.883687][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 578.883713][ T1129] ? __alloc_fd+0x487/0x620 [ 578.883737][ T1129] do_filp_open+0x1a1/0x280 [ 578.883758][ T1129] ? may_open_dev+0x100/0x100 [ 578.883791][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 578.883827][ T1129] do_sys_open+0x3fe/0x5d0 [ 578.883847][ T1129] ? filp_open+0x80/0x80 [ 578.883872][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.883891][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.883909][ T1129] ? entry_SYSENTER_compat+0x70/0x7f [ 578.883926][ T1129] ? do_fast_syscall_32+0xd1/0xe16 [ 578.883948][ T1129] __ia32_compat_sys_openat+0x98/0xf0 [ 578.883971][ T1129] do_fast_syscall_32+0x27b/0xe16 [ 578.883999][ T1129] entry_SYSENTER_compat+0x70/0x7f [ 578.884012][ T1129] RIP: 0023:0xf7fb69a9 [ 578.884035][ T1129] Code: Bad RIP value. [ 578.884044][ T1129] RSP: 002b:00000000fffbcf9c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 578.884061][ T1129] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 578.884070][ T1129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 578.884080][ T1129] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 578.884089][ T1129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.884098][ T1129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.884123][ T1129] [ 578.884123][ T1129] Showing all locks held in the system: [ 578.884141][ T1129] 1 lock held by khungtaskd/1129: [ 578.884146][ T1129] #0: ffffffff899a3dc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 578.884216][ T1129] 1 lock held by rsyslogd/9729: [ 578.884222][ T1129] #0: ffff88809d4b6ae0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 578.884255][ T1129] 2 locks held by getty/9819: [ 578.884261][ T1129] #0: ffff888097cc6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884288][ T1129] #1: ffffc900019572e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884388][ T1129] 2 locks held by getty/9820: [ 578.884393][ T1129] #0: ffff8880a871c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884429][ T1129] #1: ffffc9000197b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884467][ T1129] 2 locks held by getty/9821: [ 578.884472][ T1129] #0: ffff8880a968f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884542][ T1129] #1: ffffc900019cb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884572][ T1129] 2 locks held by getty/9822: [ 578.884576][ T1129] #0: ffff888093b71090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884600][ T1129] #1: ffffc900019eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884635][ T1129] 2 locks held by getty/9823: [ 578.884640][ T1129] #0: ffff88809701f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884711][ T1129] #1: ffffc900019fb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884747][ T1129] 2 locks held by getty/9824: [ 578.884753][ T1129] #0: ffff8880a68c7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884780][ T1129] #1: ffffc9000199b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884814][ T1129] 2 locks held by getty/9825: [ 578.884819][ T1129] #0: ffff8880a451f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 578.884849][ T1129] #1: ffffc9000194f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 578.884886][ T1129] 2 locks held by syz-executor872/9846: [ 578.884897][ T1129] 1 lock held by syz-executor872/9851: [ 578.884903][ T1129] #0: ffff8880a3da8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 578.884936][ T1129] 1 lock held by syz-executor872/9852: [ 578.884941][ T1129] #0: ffff8880a3da8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 578.884969][ T1129] 1 lock held by syz-executor872/9853: [ 578.884974][ T1129] #0: ffff8880a3da8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 578.885007][ T1129] 1 lock held by syz-executor872/9854: [ 578.885012][ T1129] #0: ffff8880a3da8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 578.885054][ T1129] 1 lock held by syz-executor872/9855: [ 578.885060][ T1129] #0: ffff8880a3da8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 578.885095][ T1129] [ 578.885101][ T1129] ============================================= [ 578.885101][ T1129] [ 578.885109][ T1129] NMI backtrace for cpu 1 [ 578.885126][ T1129] CPU: 1 PID: 1129 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 578.885180][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.885185][ T1129] Call Trace: [ 578.885289][ T1129] dump_stack+0x197/0x210 [ 578.885323][ T1129] nmi_cpu_backtrace.cold+0x70/0xb2 [ 578.885380][ T1129] ? vprintk_func+0x86/0x189 [ 578.885922][ T1129] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 578.885935][ T1129] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 578.885949][ T1129] arch_trigger_cpumask_backtrace+0x14/0x20 [ 578.885976][ T1129] watchdog+0xb11/0x10c0 [ 578.886006][ T1129] kthread+0x361/0x430 [ 578.886017][ T1129] ? reset_hung_task_detector+0x30/0x30 [ 578.886026][ T1129] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 578.886038][ T1129] ret_from_fork+0x24/0x30 [ 578.886056][ T1129] Sending NMI from CPU 1 to CPUs 0: [ 578.887644][ C0] NMI backtrace for cpu 0 [ 578.887651][ C0] CPU: 0 PID: 9846 Comm: syz-executor872 Not tainted 5.5.0-rc6-syzkaller #0 [ 578.887659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.887663][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1/0x50 [ 578.887676][ C0] Code: cc cc cc cc cc cc cc cc cc 65 48 8b 04 25 c0 1e 02 00 48 8b 80 98 13 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 55 <48> 89 e5 65 48 8b 04 25 c0 1e 02 00 65 8b 15 54 29 8d 7e 81 e2 00 [ 578.887681][ C0] RSP: 0018:ffffc90001f67378 EFLAGS: 00000206 [ 578.887688][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff83c10dff [ 578.887694][ C0] RDX: 0000000000001400 RSI: 0000000000000000 RDI: 0000000000000005 [ 578.887700][ C0] RBP: ffffc90001f673c8 R08: ffff88808f652340 R09: 0000000000000040 [ 578.887705][ C0] R10: ffffed104318f70b R11: ffff888218c7b85f R12: 0000000000001400 [ 578.887710][ C0] R13: 0000000000000040 R14: ffff8880000a0000 R15: 0000000000000000 [ 578.887716][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:0000000009958840 [ 578.887721][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 578.887727][ C0] CR2: 0000000020000180 CR3: 00000000a2523000 CR4: 00000000001406f0 [ 578.887732][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 578.887738][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 578.887740][ C0] Call Trace: [ 578.887744][ C0] ? bitfill_aligned+0x39/0x210 [ 578.887747][ C0] cfb_fillrect+0x423/0x7c0 [ 578.887751][ C0] ? cfb_fillrect+0x7c0/0x7c0 [ 578.887754][ C0] vga16fb_fillrect+0x6ce/0x19b0 [ 578.887758][ C0] bit_clear_margins+0x30b/0x530 [ 578.887761][ C0] ? bit_bmove+0x270/0x270 [ 578.887765][ C0] ? efifb_probe.cold+0x181f/0x181f [ 578.887769][ C0] fbcon_clear_margins+0x1e9/0x250 [ 578.887772][ C0] fbcon_switch+0xd7f/0x17f0 [ 578.887776][ C0] ? fbcon_set_def_font+0x360/0x360 [ 578.887779][ C0] ? fbcon_cursor+0x48c/0x660 [ 578.887784][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.887787][ C0] ? fbcon_set_origin+0x2b/0x50 [ 578.887791][ C0] ? fbcon_scrolldelta+0x1220/0x1220 [ 578.887796][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.887799][ C0] redraw_screen+0x2b6/0x7d0 [ 578.887803][ C0] ? efifb_probe.cold+0x181f/0x181f [ 578.887806][ C0] ? respond_string+0x2c0/0x2c0 [ 578.887810][ C0] ? fbcon_set_palette+0x3c4/0x4a0 [ 578.887814][ C0] fbcon_modechanged+0x5c3/0x790 [ 578.887817][ C0] fbcon_update_vcs+0x42/0x50 [ 578.887820][ C0] fb_set_var+0xb32/0xdd0 [ 578.887824][ C0] ? fb_blank+0x1a0/0x1a0 [ 578.887827][ C0] ? lock_acquire+0x190/0x410 [ 578.887831][ C0] ? __mutex_lock+0x458/0x13c0 [ 578.887834][ C0] ? down+0x50/0x90 [ 578.887837][ C0] ? do_fb_ioctl+0x335/0x7d0 [ 578.887841][ C0] do_fb_ioctl+0x390/0x7d0 [ 578.887844][ C0] ? fb_mmap+0x520/0x520 [ 578.887847][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 578.887856][ C0] ? tomoyo_path_number_perm+0x454/0x520 [ 578.887861][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.887865][ C0] ? tomoyo_path_number_perm+0x25e/0x520 [ 578.887869][ C0] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 578.887873][ C0] fb_compat_ioctl+0x305/0xc50 [ 578.887877][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 578.887880][ C0] ? fb_release+0x150/0x150 [ 578.887884][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 578.887888][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 578.887892][ C0] ? tomoyo_file_ioctl+0x23/0x30 [ 578.887896][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.887900][ C0] ? security_file_ioctl+0x8d/0xc0 [ 578.887904][ C0] __ia32_compat_sys_ioctl+0x233/0x610 [ 578.887908][ C0] ? fb_release+0x150/0x150 [ 578.887911][ C0] do_fast_syscall_32+0x27b/0xe16 [ 578.887915][ C0] entry_SYSENTER_compat+0x70/0x7f [ 578.887918][ C0] RIP: 0023:0xf7fb69a9 [ 578.887930][ C0] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 578.887934][ C0] RSP: 002b:00000000fffbcfac EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.887947][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 578.887953][ C0] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 00000000fffbd0c4 [ 578.887962][ C0] RBP: 00000000fffbd0cc R08: 0000000000000000 R09: 0000000000000000 [ 578.887968][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 578.887974][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 578.906237][ T1129] Kernel panic - not syncing: hung_task: blocked tasks [ 578.906259][ T1129] CPU: 1 PID: 1129 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 578.906268][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.906273][ T1129] Call Trace: [ 578.906298][ T1129] dump_stack+0x197/0x210 [ 578.906390][ T1129] panic+0x2e3/0x75c [ 578.906407][ T1129] ? add_taint.cold+0x16/0x16 [ 578.906424][ T1129] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 578.906444][ T1129] ? ___preempt_schedule+0x16/0x18 [ 578.906466][ T1129] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 578.906485][ T1129] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 578.906503][ T1129] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 578.906521][ T1129] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 578.906541][ T1129] watchdog+0xb22/0x10c0 [ 578.906564][ T1129] kthread+0x361/0x430 [ 578.906580][ T1129] ? reset_hung_task_detector+0x30/0x30 [ 578.906593][ T1129] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 578.906611][ T1129] ret_from_fork+0x24/0x30 [ 578.908656][ T1129] Kernel Offset: disabled [ 581.333502][ T1129] Rebooting in 86400 seconds..