[ 84.342531][ T26] audit: type=1800 audit(1579941386.943:26): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.274013][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 85.274025][ T26] audit: type=1800 audit(1579941387.903:29): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 85.300131][ T26] audit: type=1800 audit(1579941387.903:30): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 591.021830][ T1133] INFO: task syz-executor119:9700 blocked for more than 143 seconds. [ 591.021853][ T1133] Not tainted 5.5.0-rc7-syzkaller #0 [ 591.021860][ T1133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.021868][ T1133] syz-executor119 D28280 9700 9699 0x20020004 [ 591.021893][ T1133] Call Trace: [ 591.021924][ T1133] __schedule+0x934/0x1f90 [ 591.021949][ T1133] ? __sched_text_start+0x8/0x8 [ 591.021964][ T1133] ? lock_downgrade+0x920/0x920 [ 591.021981][ T1133] ? rwlock_bug.part.0+0x90/0x90 [ 591.022014][ T1133] schedule+0xdc/0x2b0 [ 591.022035][ T1133] schedule_preempt_disabled+0x13/0x20 [ 591.022048][ T1133] __mutex_lock+0x7ab/0x13c0 [ 591.022069][ T1133] ? fb_open+0xd7/0x450 [ 591.022088][ T1133] ? mutex_trylock+0x2d0/0x2d0 [ 591.022106][ T1133] ? __kasan_check_write+0x14/0x20 [ 591.022125][ T1133] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 591.022143][ T1133] ? chrdev_open+0xca/0x6b0 [ 591.022174][ T1133] mutex_lock_nested+0x16/0x20 [ 591.022187][ T1133] ? mutex_lock_nested+0x16/0x20 [ 591.022203][ T1133] fb_open+0xd7/0x450 [ 591.022223][ T1133] ? get_fb_info.part.0+0x80/0x80 [ 591.022236][ T1133] chrdev_open+0x245/0x6b0 [ 591.022254][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.022275][ T1133] ? security_file_open+0x87/0x300 [ 591.022298][ T1133] do_dentry_open+0x4e6/0x1380 [ 591.022311][ T1133] ? __kasan_check_read+0x11/0x20 [ 591.022326][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.022349][ T1133] ? chown_common+0x5c0/0x5c0 [ 591.022368][ T1133] ? inode_permission+0xb4/0x520 [ 591.022388][ T1133] vfs_open+0xa0/0xd0 [ 591.022406][ T1133] path_openat+0x118b/0x3180 [ 591.022438][ T1133] ? path_lookupat.isra.0+0x470/0x470 [ 591.022451][ T1133] ? __lock_acquire+0x16f2/0x4a00 [ 591.022475][ T1133] ? __alloc_fd+0x487/0x620 [ 591.022498][ T1133] do_filp_open+0x1a1/0x280 [ 591.022517][ T1133] ? may_open_dev+0x100/0x100 [ 591.022553][ T1133] ? do_raw_spin_unlock+0x181/0x270 [ 591.022587][ T1133] do_sys_open+0x3fe/0x5d0 [ 591.022605][ T1133] ? filp_open+0x80/0x80 [ 591.022628][ T1133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.022646][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.022662][ T1133] ? entry_SYSENTER_compat+0x70/0x7f [ 591.022678][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.022698][ T1133] __ia32_compat_sys_openat+0x98/0xf0 [ 591.022719][ T1133] do_fast_syscall_32+0x27b/0xe16 [ 591.022741][ T1133] entry_SYSENTER_compat+0x70/0x7f [ 591.022753][ T1133] RIP: 0023:0xf7f5d9a9 [ 591.022779][ T1133] Code: Bad RIP value. [ 591.022787][ T1133] RSP: 002b:00000000ff8d42fc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 591.022803][ T1133] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 591.022812][ T1133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 591.022822][ T1133] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 591.022831][ T1133] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.022840][ T1133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.022869][ T1133] INFO: task syz-executor119:9701 blocked for more than 143 seconds. [ 591.022878][ T1133] Not tainted 5.5.0-rc7-syzkaller #0 [ 591.022884][ T1133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.022891][ T1133] syz-executor119 D28280 9701 9696 0x20020004 [ 591.022915][ T1133] Call Trace: [ 591.022936][ T1133] __schedule+0x934/0x1f90 [ 591.022960][ T1133] ? __sched_text_start+0x8/0x8 [ 591.022973][ T1133] ? lock_downgrade+0x920/0x920 [ 591.022990][ T1133] ? rwlock_bug.part.0+0x90/0x90 [ 591.023014][ T1133] schedule+0xdc/0x2b0 [ 591.023035][ T1133] schedule_preempt_disabled+0x13/0x20 [ 591.023047][ T1133] __mutex_lock+0x7ab/0x13c0 [ 591.023066][ T1133] ? fb_open+0xd7/0x450 [ 591.023085][ T1133] ? mutex_trylock+0x2d0/0x2d0 [ 591.023102][ T1133] ? __kasan_check_write+0x14/0x20 [ 591.023120][ T1133] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 591.023134][ T1133] ? chrdev_open+0xca/0x6b0 [ 591.023164][ T1133] mutex_lock_nested+0x16/0x20 [ 591.023177][ T1133] ? mutex_lock_nested+0x16/0x20 [ 591.023193][ T1133] fb_open+0xd7/0x450 [ 591.023213][ T1133] ? get_fb_info.part.0+0x80/0x80 [ 591.023226][ T1133] chrdev_open+0x245/0x6b0 [ 591.023243][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.023263][ T1133] ? security_file_open+0x87/0x300 [ 591.023285][ T1133] do_dentry_open+0x4e6/0x1380 [ 591.023299][ T1133] ? __kasan_check_read+0x11/0x20 [ 591.023313][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.023336][ T1133] ? chown_common+0x5c0/0x5c0 [ 591.023355][ T1133] ? inode_permission+0xb4/0x520 [ 591.023374][ T1133] vfs_open+0xa0/0xd0 [ 591.023393][ T1133] path_openat+0x118b/0x3180 [ 591.023425][ T1133] ? path_lookupat.isra.0+0x470/0x470 [ 591.023438][ T1133] ? __lock_acquire+0x16f2/0x4a00 [ 591.023461][ T1133] ? __alloc_fd+0x487/0x620 [ 591.023484][ T1133] do_filp_open+0x1a1/0x280 [ 591.023503][ T1133] ? may_open_dev+0x100/0x100 [ 591.023539][ T1133] ? do_raw_spin_unlock+0x181/0x270 [ 591.023574][ T1133] do_sys_open+0x3fe/0x5d0 [ 591.023592][ T1133] ? filp_open+0x80/0x80 [ 591.023613][ T1133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.023631][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.023647][ T1133] ? entry_SYSENTER_compat+0x70/0x7f [ 591.023664][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.023684][ T1133] __ia32_compat_sys_openat+0x98/0xf0 [ 591.023706][ T1133] do_fast_syscall_32+0x27b/0xe16 [ 591.023728][ T1133] entry_SYSENTER_compat+0x70/0x7f [ 591.023738][ T1133] RIP: 0023:0xf7f5d9a9 [ 591.023752][ T1133] Code: Bad RIP value. [ 591.023760][ T1133] RSP: 002b:00000000ff8d42fc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 591.023775][ T1133] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 591.023784][ T1133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 591.023793][ T1133] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 591.023802][ T1133] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.023811][ T1133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.023840][ T1133] INFO: task syz-executor119:9702 blocked for more than 143 seconds. [ 591.023848][ T1133] Not tainted 5.5.0-rc7-syzkaller #0 [ 591.023854][ T1133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.023861][ T1133] syz-executor119 D28248 9702 9698 0x20024004 [ 591.023882][ T1133] Call Trace: [ 591.023903][ T1133] __schedule+0x934/0x1f90 [ 591.023927][ T1133] ? __sched_text_start+0x8/0x8 [ 591.023940][ T1133] ? lock_downgrade+0x920/0x920 [ 591.023957][ T1133] ? rwlock_bug.part.0+0x90/0x90 [ 591.023981][ T1133] schedule+0xdc/0x2b0 [ 591.024002][ T1133] schedule_preempt_disabled+0x13/0x20 [ 591.024015][ T1133] __mutex_lock+0x7ab/0x13c0 [ 591.024034][ T1133] ? fb_open+0xd7/0x450 [ 591.024052][ T1133] ? mutex_trylock+0x2d0/0x2d0 [ 591.024069][ T1133] ? __kasan_check_write+0x14/0x20 [ 591.024088][ T1133] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 591.024102][ T1133] ? chrdev_open+0xca/0x6b0 [ 591.024131][ T1133] mutex_lock_nested+0x16/0x20 [ 591.024145][ T1133] ? mutex_lock_nested+0x16/0x20 [ 591.024161][ T1133] fb_open+0xd7/0x450 [ 591.024180][ T1133] ? get_fb_info.part.0+0x80/0x80 [ 591.024193][ T1133] chrdev_open+0x245/0x6b0 [ 591.024211][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.024231][ T1133] ? security_file_open+0x87/0x300 [ 591.024253][ T1133] do_dentry_open+0x4e6/0x1380 [ 591.024266][ T1133] ? __kasan_check_read+0x11/0x20 [ 591.024281][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.024304][ T1133] ? chown_common+0x5c0/0x5c0 [ 591.024322][ T1133] ? inode_permission+0xb4/0x520 [ 591.024342][ T1133] vfs_open+0xa0/0xd0 [ 591.024360][ T1133] path_openat+0x118b/0x3180 [ 591.024392][ T1133] ? path_lookupat.isra.0+0x470/0x470 [ 591.024405][ T1133] ? __lock_acquire+0x16f2/0x4a00 [ 591.024428][ T1133] ? __alloc_fd+0x487/0x620 [ 591.024451][ T1133] do_filp_open+0x1a1/0x280 [ 591.024471][ T1133] ? may_open_dev+0x100/0x100 [ 591.024500][ T1133] ? do_raw_spin_unlock+0x181/0x270 [ 591.024540][ T1133] do_sys_open+0x3fe/0x5d0 [ 591.024558][ T1133] ? filp_open+0x80/0x80 [ 591.024579][ T1133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.024597][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.024612][ T1133] ? entry_SYSENTER_compat+0x70/0x7f [ 591.024629][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.024649][ T1133] __ia32_compat_sys_openat+0x98/0xf0 [ 591.024670][ T1133] do_fast_syscall_32+0x27b/0xe16 [ 591.024692][ T1133] entry_SYSENTER_compat+0x70/0x7f [ 591.024702][ T1133] RIP: 0023:0xf7f5d9a9 [ 591.024716][ T1133] Code: Bad RIP value. [ 591.024724][ T1133] RSP: 002b:00000000ff8d42fc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 591.024739][ T1133] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 591.024748][ T1133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 591.024757][ T1133] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 591.024766][ T1133] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.024775][ T1133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.024803][ T1133] INFO: task syz-executor119:9703 blocked for more than 143 seconds. [ 591.024812][ T1133] Not tainted 5.5.0-rc7-syzkaller #0 [ 591.024818][ T1133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.024824][ T1133] syz-executor119 D28280 9703 9694 0x20020004 [ 591.024845][ T1133] Call Trace: [ 591.024865][ T1133] __schedule+0x934/0x1f90 [ 591.024889][ T1133] ? __sched_text_start+0x8/0x8 [ 591.024902][ T1133] ? lock_downgrade+0x920/0x920 [ 591.024919][ T1133] ? rwlock_bug.part.0+0x90/0x90 [ 591.024943][ T1133] schedule+0xdc/0x2b0 [ 591.024964][ T1133] schedule_preempt_disabled+0x13/0x20 [ 591.024978][ T1133] __mutex_lock+0x7ab/0x13c0 [ 591.024996][ T1133] ? fb_open+0xd7/0x450 [ 591.025015][ T1133] ? mutex_trylock+0x2d0/0x2d0 [ 591.025032][ T1133] ? __kasan_check_write+0x14/0x20 [ 591.025050][ T1133] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 591.025064][ T1133] ? chrdev_open+0xca/0x6b0 [ 591.025094][ T1133] mutex_lock_nested+0x16/0x20 [ 591.025108][ T1133] ? mutex_lock_nested+0x16/0x20 [ 591.025123][ T1133] fb_open+0xd7/0x450 [ 591.025144][ T1133] ? get_fb_info.part.0+0x80/0x80 [ 591.025157][ T1133] chrdev_open+0x245/0x6b0 [ 591.025174][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.025194][ T1133] ? security_file_open+0x87/0x300 [ 591.025216][ T1133] do_dentry_open+0x4e6/0x1380 [ 591.025230][ T1133] ? __kasan_check_read+0x11/0x20 [ 591.025245][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.025267][ T1133] ? chown_common+0x5c0/0x5c0 [ 591.025286][ T1133] ? inode_permission+0xb4/0x520 [ 591.025305][ T1133] vfs_open+0xa0/0xd0 [ 591.025324][ T1133] path_openat+0x118b/0x3180 [ 591.025357][ T1133] ? path_lookupat.isra.0+0x470/0x470 [ 591.025370][ T1133] ? __lock_acquire+0x16f2/0x4a00 [ 591.025393][ T1133] ? __alloc_fd+0x487/0x620 [ 591.025416][ T1133] do_filp_open+0x1a1/0x280 [ 591.025436][ T1133] ? may_open_dev+0x100/0x100 [ 591.025466][ T1133] ? do_raw_spin_unlock+0x181/0x270 [ 591.025500][ T1133] do_sys_open+0x3fe/0x5d0 [ 591.025518][ T1133] ? filp_open+0x80/0x80 [ 591.025545][ T1133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.025563][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.025579][ T1133] ? entry_SYSENTER_compat+0x70/0x7f [ 591.025595][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.025615][ T1133] __ia32_compat_sys_openat+0x98/0xf0 [ 591.025636][ T1133] do_fast_syscall_32+0x27b/0xe16 [ 591.025658][ T1133] entry_SYSENTER_compat+0x70/0x7f [ 591.025668][ T1133] RIP: 0023:0xf7f5d9a9 [ 591.025680][ T1133] Code: Bad RIP value. [ 591.025689][ T1133] RSP: 002b:00000000ff8d42fc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 591.025703][ T1133] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 591.025712][ T1133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 591.025721][ T1133] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 591.025730][ T1133] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.025739][ T1133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.025767][ T1133] INFO: task syz-executor119:9704 blocked for more than 143 seconds. [ 591.025775][ T1133] Not tainted 5.5.0-rc7-syzkaller #0 [ 591.025781][ T1133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.025787][ T1133] syz-executor119 D28280 9704 9697 0x20020004 [ 591.025808][ T1133] Call Trace: [ 591.025830][ T1133] __schedule+0x934/0x1f90 [ 591.025854][ T1133] ? __sched_text_start+0x8/0x8 [ 591.025867][ T1133] ? lock_downgrade+0x920/0x920 [ 591.025884][ T1133] ? rwlock_bug.part.0+0x90/0x90 [ 591.025908][ T1133] schedule+0xdc/0x2b0 [ 591.025929][ T1133] schedule_preempt_disabled+0x13/0x20 [ 591.025942][ T1133] __mutex_lock+0x7ab/0x13c0 [ 591.025961][ T1133] ? fb_open+0xd7/0x450 [ 591.025979][ T1133] ? mutex_trylock+0x2d0/0x2d0 [ 591.025996][ T1133] ? __kasan_check_write+0x14/0x20 [ 591.026014][ T1133] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 591.026028][ T1133] ? chrdev_open+0xca/0x6b0 [ 591.026057][ T1133] mutex_lock_nested+0x16/0x20 [ 591.026071][ T1133] ? mutex_lock_nested+0x16/0x20 [ 591.026087][ T1133] fb_open+0xd7/0x450 [ 591.026106][ T1133] ? get_fb_info.part.0+0x80/0x80 [ 591.026119][ T1133] chrdev_open+0x245/0x6b0 [ 591.026137][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.026156][ T1133] ? security_file_open+0x87/0x300 [ 591.026178][ T1133] do_dentry_open+0x4e6/0x1380 [ 591.026191][ T1133] ? __kasan_check_read+0x11/0x20 [ 591.026206][ T1133] ? cdev_put.part.0+0x50/0x50 [ 591.026229][ T1133] ? chown_common+0x5c0/0x5c0 [ 591.026247][ T1133] ? inode_permission+0xb4/0x520 [ 591.026267][ T1133] vfs_open+0xa0/0xd0 [ 591.026285][ T1133] path_openat+0x118b/0x3180 [ 591.026317][ T1133] ? path_lookupat.isra.0+0x470/0x470 [ 591.026329][ T1133] ? __lock_acquire+0x16f2/0x4a00 [ 591.026352][ T1133] ? __alloc_fd+0x487/0x620 [ 591.026375][ T1133] do_filp_open+0x1a1/0x280 [ 591.026395][ T1133] ? may_open_dev+0x100/0x100 [ 591.026424][ T1133] ? do_raw_spin_unlock+0x181/0x270 [ 591.026459][ T1133] do_sys_open+0x3fe/0x5d0 [ 591.026477][ T1133] ? filp_open+0x80/0x80 [ 591.026498][ T1133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.026515][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.026531][ T1133] ? entry_SYSENTER_compat+0x70/0x7f [ 591.026553][ T1133] ? do_fast_syscall_32+0xd1/0xe16 [ 591.026574][ T1133] __ia32_compat_sys_openat+0x98/0xf0 [ 591.026594][ T1133] do_fast_syscall_32+0x27b/0xe16 [ 591.026617][ T1133] entry_SYSENTER_compat+0x70/0x7f [ 591.026627][ T1133] RIP: 0023:0xf7f5d9a9 [ 591.026637][ T1133] Code: Bad RIP value. [ 591.026645][ T1133] RSP: 002b:00000000ff8d42fc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 591.026659][ T1133] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 591.026668][ T1133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 591.026677][ T1133] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 591.026686][ T1133] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.026695][ T1133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.026719][ T1133] [ 591.026719][ T1133] Showing all locks held in the system: [ 591.026734][ T1133] 1 lock held by khungtaskd/1133: [ 591.026739][ T1133] #0: ffffffff899a3dc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 591.026803][ T1133] 1 lock held by rsyslogd/9577: [ 591.026808][ T1133] #0: ffff88809eb23b20 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 591.026840][ T1133] 2 locks held by getty/9667: [ 591.026845][ T1133] #0: ffff888097dbe090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.026872][ T1133] #1: ffffc900017eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.026908][ T1133] 2 locks held by getty/9668: [ 591.026913][ T1133] #0: ffff8880a3a0c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.026939][ T1133] #1: ffffc9000179b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.026973][ T1133] 2 locks held by getty/9669: [ 591.026978][ T1133] #0: ffff8880a6be2090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.027005][ T1133] #1: ffffc9000182b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.027039][ T1133] 2 locks held by getty/9670: [ 591.027044][ T1133] #0: ffff8880a6bde090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.027070][ T1133] #1: ffffc9000183b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.027105][ T1133] 2 locks held by getty/9671: [ 591.027110][ T1133] #0: ffff8880988d6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.027136][ T1133] #1: ffffc9000181b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.027170][ T1133] 2 locks held by getty/9672: [ 591.027175][ T1133] #0: ffff888098887090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.027202][ T1133] #1: ffffc9000180b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.027236][ T1133] 2 locks held by getty/9673: [ 591.027241][ T1133] #0: ffff8880a3252090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 591.027267][ T1133] #1: ffffc900017732e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 591.027305][ T1133] 2 locks held by syz-executor119/9695: [ 591.027315][ T1133] 1 lock held by syz-executor119/9700: [ 591.027320][ T1133] #0: ffff888218d1e070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 591.027353][ T1133] 1 lock held by syz-executor119/9701: [ 591.027357][ T1133] #0: ffff888218d1e070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 591.027391][ T1133] 1 lock held by syz-executor119/9702: [ 591.027396][ T1133] #0: ffff888218d1e070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 591.027428][ T1133] 1 lock held by syz-executor119/9703: [ 591.027433][ T1133] #0: ffff888218d1e070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 591.027464][ T1133] 1 lock held by syz-executor119/9704: [ 591.027469][ T1133] #0: ffff888218d1e070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 591.027497][ T1133] [ 591.027503][ T1133] ============================================= [ 591.027503][ T1133] [ 591.027530][ T1133] NMI backtrace for cpu 0 [ 591.027550][ T1133] CPU: 0 PID: 1133 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 591.027612][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.027616][ T1133] Call Trace: [ 591.027634][ T1133] dump_stack+0x197/0x210 [ 591.027657][ T1133] nmi_cpu_backtrace.cold+0x70/0xb2 [ 591.027673][ T1133] ? vprintk_func+0x86/0x189 [ 591.027695][ T1133] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 591.027714][ T1133] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 591.027735][ T1133] arch_trigger_cpumask_backtrace+0x14/0x20 [ 591.027751][ T1133] watchdog+0xb11/0x10c0 [ 591.027775][ T1133] kthread+0x361/0x430 [ 591.027791][ T1133] ? reset_hung_task_detector+0x30/0x30 [ 591.027804][ T1133] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 591.027822][ T1133] ret_from_fork+0x24/0x30 [ 591.027847][ T1133] Sending NMI from CPU 0 to CPUs 1: [ 591.028472][ C1] NMI backtrace for cpu 1 [ 591.028478][ C1] CPU: 1 PID: 9695 Comm: syz-executor119 Not tainted 5.5.0-rc7-syzkaller #0 [ 591.028485][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.028490][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.028502][ C1] Code: 48 89 e5 48 8b 4d 08 e8 58 ff ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 04 00 00 00 48 89 e5 48 8b 4d 08 e8 3a ff ff ff <5d> c3 0f 1f 84 00 00 00 00 00 55 48 89 f2 48 89 fe bf 06 00 00 00 [ 591.028507][ C1] RSP: 0018:ffffc90002047448 EFLAGS: 00000293 [ 591.028515][ C1] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff83c542c0 [ 591.028520][ C1] RDX: 000000000000000e RSI: 0000000000000050 RDI: 0000000000000004 [ 591.028526][ C1] RBP: ffffc90002047448 R08: ffff88808a528380 R09: ffffed10147d1cdc [ 591.028531][ C1] R10: ffffed10147d1cdb R11: ffff8880a3e8e6df R12: 000000000000000e [ 591.028536][ C1] R13: ffff8880000a000e R14: ffff8880000a0000 R15: 0000000000000000 [ 591.028646][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:0000000009e6e840 [ 591.028652][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 591.028658][ C1] CR2: ffffffffff600400 CR3: 00000000a7a57000 CR4: 00000000001406e0 [ 591.028663][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 591.028669][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 591.028671][ C1] Call Trace: [ 591.028675][ C1] vga16fb_fillrect+0xa20/0x19b0 [ 591.028679][ C1] bit_clear_margins+0x30b/0x530 [ 591.028682][ C1] ? bit_bmove+0x270/0x270 [ 591.028692][ C1] ? efifb_probe.cold+0x181f/0x181f [ 591.028696][ C1] fbcon_clear_margins+0x1e9/0x250 [ 591.028699][ C1] fbcon_switch+0xd7f/0x17f0 [ 591.028703][ C1] ? fbcon_set_def_font+0x360/0x360 [ 591.028706][ C1] ? fbcon_cursor+0x48c/0x660 [ 591.028711][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.028714][ C1] ? fbcon_set_origin+0x2b/0x50 [ 591.028722][ C1] ? fbcon_scrolldelta+0x1220/0x1220 [ 591.028727][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.028759][ C1] redraw_screen+0x2b6/0x7d0 [ 591.028763][ C1] ? efifb_probe.cold+0x181f/0x181f [ 591.028767][ C1] ? respond_string+0x2c0/0x2c0 [ 591.028770][ C1] ? fbcon_set_palette+0x3c4/0x4a0 [ 591.028774][ C1] fbcon_modechanged+0x5c3/0x790 [ 591.028777][ C1] fbcon_update_vcs+0x42/0x50 [ 591.028781][ C1] fb_set_var+0xb32/0xdd0 [ 591.028784][ C1] ? fb_blank+0x1a0/0x1a0 [ 591.028788][ C1] ? lock_acquire+0x190/0x410 [ 591.028791][ C1] ? __mutex_lock+0x458/0x13c0 [ 591.028794][ C1] ? down+0x50/0x90 [ 591.028798][ C1] ? do_fb_ioctl+0x335/0x7d0 [ 591.028801][ C1] do_fb_ioctl+0x390/0x7d0 [ 591.028804][ C1] ? fb_mmap+0x520/0x520 [ 591.028808][ C1] ? lockdep_hardirqs_on+0x421/0x5e0 [ 591.028812][ C1] ? tomoyo_path_number_perm+0x454/0x520 [ 591.028817][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 591.028821][ C1] ? tomoyo_path_number_perm+0x25e/0x520 [ 591.028825][ C1] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 591.028828][ C1] fb_compat_ioctl+0x305/0xc50 [ 591.028832][ C1] ? fb_release+0x150/0x150 [ 591.028835][ C1] ? do_sys_open+0x31d/0x5d0 [ 591.028839][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 591.028843][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.028847][ C1] ? security_file_ioctl+0x8d/0xc0 [ 591.028851][ C1] __ia32_compat_sys_ioctl+0x233/0x610 [ 591.028854][ C1] ? fb_release+0x150/0x150 [ 591.028858][ C1] do_fast_syscall_32+0x27b/0xe16 [ 591.028861][ C1] entry_SYSENTER_compat+0x70/0x7f [ 591.028864][ C1] RIP: 0023:0xf7f5d9a9 [ 591.028875][ C1] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 591.028878][ C1] RSP: 002b:00000000ff8d430c EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 591.028886][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 591.028891][ C1] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 00000000ff8d4424 [ 591.028896][ C1] RBP: 00000000ff8d442c R08: 0000000000000000 R09: 0000000000000000 [ 591.028900][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 591.028905][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.028918][ T1133] Kernel panic - not syncing: hung_task: blocked tasks [ 591.028934][ T1133] CPU: 0 PID: 1133 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 591.028941][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.028945][ T1133] Call Trace: [ 591.028967][ T1133] dump_stack+0x197/0x210 [ 591.028988][ T1133] panic+0x2e3/0x75c [ 591.029004][ T1133] ? add_taint.cold+0x16/0x16 [ 591.029023][ T1133] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.029040][ T1133] ? printk_safe_flush+0xf2/0x140 [ 591.029056][ T1133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.029077][ T1133] ? nmi_trigger_cpumask_backtrace+0x224/0x28b [ 591.029096][ T1133] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 591.029115][ T1133] watchdog+0xb22/0x10c0 [ 591.029138][ T1133] kthread+0x361/0x430 [ 591.029155][ T1133] ? reset_hung_task_detector+0x30/0x30 [ 591.029168][ T1133] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 591.029186][ T1133] ret_from_fork+0x24/0x30 [ 591.031139][ T1133] Kernel Offset: disabled [ 593.354619][ T1133] Rebooting in 86400 seconds..