[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 1431.369699] INFO: task syz-executor088:6349 blocked for more than 140 seconds. [ 1431.369707] Not tainted 4.14.175-syzkaller #0 [ 1431.369710] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.369715] syz-executor088 D27520 6349 6347 0x80000006 [ 1431.369802] Call Trace: [ 1431.369926] ? __schedule+0x7b8/0x1ca0 [ 1431.369936] ? __mutex_lock+0x737/0x1470 [ 1431.369947] ? __sched_text_start+0x8/0x8 [ 1431.369984] ? lock_downgrade+0x6e0/0x6e0 [ 1431.369997] schedule+0x8d/0x1b0 [ 1431.370007] schedule_preempt_disabled+0xf/0x20 [ 1431.370014] __mutex_lock+0x73c/0x1470 [ 1431.370052] ? do_group_exit+0x100/0x310 [ 1431.370078] ? get_signal+0x385/0x1ca0 [ 1431.370087] ? do_signal+0x7c/0x1690 [ 1431.370126] ? fb_release+0x4e/0x140 [ 1431.370138] ? mutex_trylock+0x1a0/0x1a0 [ 1431.370213] ? fsnotify+0x1110/0x1110 [ 1431.370246] ? locks_remove_file+0x2d3/0x420 [ 1431.370256] ? unregister_framebuffer+0x40/0x40 [ 1431.370263] ? fb_release+0x4e/0x140 [ 1431.370294] ? ima_file_free+0x4f/0x330 [ 1431.370300] fb_release+0x4e/0x140 [ 1431.370309] ? unregister_framebuffer+0x40/0x40 [ 1431.370340] __fput+0x25f/0x790 [ 1431.370375] task_work_run+0x113/0x190 [ 1431.370388] do_exit+0x9f2/0x2b00 [ 1431.370396] ? find_held_lock+0x2d/0x110 [ 1431.370404] ? task_work_run+0xf1/0x190 [ 1431.370415] ? mm_update_next_owner+0x5b0/0x5b0 [ 1431.370422] ? get_signal+0x31c/0x1ca0 [ 1431.370435] ? lock_downgrade+0x6e0/0x6e0 [ 1431.370444] do_group_exit+0x100/0x310 [ 1431.370454] get_signal+0x385/0x1ca0 [ 1431.370473] do_signal+0x7c/0x1690 [ 1431.370486] ? setup_sigcontext+0x820/0x820 [ 1431.370494] ? fb_ioctl+0xe5/0x130 [ 1431.370500] ? do_fb_ioctl+0x940/0x940 [ 1431.370518] ? do_vfs_ioctl+0xe2/0xfe0 [ 1431.370579] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1431.370589] ? ioctl_preallocate+0x1a0/0x1a0 [ 1431.370600] ? lock_downgrade+0x6e0/0x6e0 [ 1431.370613] ? exit_to_usermode_loop+0x41/0x220 [ 1431.370624] exit_to_usermode_loop+0x159/0x220 [ 1431.370632] ? SyS_ioctl+0x5c/0xb0 [ 1431.370642] do_syscall_64+0x4a3/0x640 [ 1431.370655] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.370663] RIP: 0033:0x441419 [ 1431.370667] RSP: 002b:00007ffcf9fa5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.370676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000441419 [ 1431.370681] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1431.370686] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 1431.370691] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 1431.370695] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 1431.370714] INFO: task syz-executor088:6360 blocked for more than 140 seconds. [ 1431.370719] Not tainted 4.14.175-syzkaller #0 [ 1431.370722] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.370726] syz-executor088 D28688 6360 6348 0x00000004 [ 1431.370745] Call Trace: [ 1431.370757] ? __schedule+0x7b8/0x1ca0 [ 1431.370765] ? __mutex_lock+0x737/0x1470 [ 1431.370776] ? __sched_text_start+0x8/0x8 [ 1431.370784] ? lock_downgrade+0x6e0/0x6e0 [ 1431.370796] schedule+0x8d/0x1b0 [ 1431.370805] schedule_preempt_disabled+0xf/0x20 [ 1431.370812] __mutex_lock+0x73c/0x1470 [ 1431.370820] ? get_fb_info.part.0+0x5f/0x70 [ 1431.370829] ? fb_open+0xb7/0x400 [ 1431.370838] ? lock_downgrade+0x6e0/0x6e0 [ 1431.370847] ? mutex_trylock+0x1a0/0x1a0 [ 1431.370859] ? __mutex_unlock_slowpath+0x75/0x780 [ 1431.370865] ? find_held_lock+0x2d/0x110 [ 1431.370881] ? fb_open+0xb7/0x400 [ 1431.370887] fb_open+0xb7/0x400 [ 1431.370896] ? get_fb_info.part.0+0x70/0x70 [ 1431.370906] chrdev_open+0x1fc/0x540 [ 1431.370915] ? cdev_put.part.0+0x50/0x50 [ 1431.370946] do_dentry_open+0x732/0xe90 [ 1431.370955] ? cdev_put.part.0+0x50/0x50 [ 1431.370965] ? __inode_permission+0x7c/0x300 [ 1431.370975] vfs_open+0x105/0x220 [ 1431.370985] path_openat+0x8ca/0x3c50 [ 1431.371004] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1431.371020] do_filp_open+0x18e/0x250 [ 1431.371029] ? may_open_dev+0xe0/0xe0 [ 1431.371044] ? lock_downgrade+0x6e0/0x6e0 [ 1431.371072] ? do_raw_spin_unlock+0x164/0x250 [ 1431.371101] ? __alloc_fd+0x1bf/0x490 [ 1431.371115] do_sys_open+0x29d/0x3f0 [ 1431.371125] ? filp_open+0x60/0x60 [ 1431.371134] ? __do_page_fault+0x35b/0xb40 [ 1431.371143] ? do_syscall_64+0x4c/0x640 [ 1431.371150] ? SyS_open+0x30/0x30 [ 1431.371160] do_syscall_64+0x1d5/0x640 [ 1431.371172] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.371178] RIP: 0033:0x441419 [ 1431.371182] RSP: 002b:00007ffcf9fa5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.371196] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 1431.371201] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1431.371206] RBP: 0000000000101510 R08: 0000000000000004 R09: 00000009004002c8 [ 1431.371210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 1431.371215] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 1431.371231] INFO: task syz-executor088:6361 blocked for more than 140 seconds. [ 1431.371236] Not tainted 4.14.175-syzkaller #0 [ 1431.371239] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.371242] syz-executor088 D28688 6361 6352 0x00000004 [ 1431.371258] Call Trace: [ 1431.371270] ? __schedule+0x7b8/0x1ca0 [ 1431.371278] ? __mutex_lock+0x737/0x1470 [ 1431.371290] ? __sched_text_start+0x8/0x8 [ 1431.371297] ? lock_downgrade+0x6e0/0x6e0 [ 1431.371309] schedule+0x8d/0x1b0 [ 1431.371318] schedule_preempt_disabled+0xf/0x20 [ 1431.371326] __mutex_lock+0x73c/0x1470 [ 1431.371333] ? get_fb_info.part.0+0x5f/0x70 [ 1431.371341] ? fb_open+0xb7/0x400 [ 1431.371353] ? mutex_trylock+0x1a0/0x1a0 [ 1431.371364] ? __mutex_unlock_slowpath+0x75/0x780 [ 1431.371371] ? find_held_lock+0x2d/0x110 [ 1431.371387] ? fb_open+0xb7/0x400 [ 1431.371392] fb_open+0xb7/0x400 [ 1431.371401] ? get_fb_info.part.0+0x70/0x70 [ 1431.371409] chrdev_open+0x1fc/0x540 [ 1431.371417] ? cdev_put.part.0+0x50/0x50 [ 1431.371430] do_dentry_open+0x732/0xe90 [ 1431.371438] ? cdev_put.part.0+0x50/0x50 [ 1431.371447] ? __inode_permission+0x7c/0x300 [ 1431.371456] vfs_open+0x105/0x220 [ 1431.371467] path_openat+0x8ca/0x3c50 [ 1431.371485] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1431.371501] do_filp_open+0x18e/0x250 [ 1431.371510] ? may_open_dev+0xe0/0xe0 [ 1431.371525] ? lock_downgrade+0x6e0/0x6e0 [ 1431.371535] ? do_raw_spin_unlock+0x164/0x250 [ 1431.371544] ? __alloc_fd+0x1bf/0x490 [ 1431.371558] do_sys_open+0x29d/0x3f0 [ 1431.371568] ? filp_open+0x60/0x60 [ 1431.371576] ? __do_page_fault+0x35b/0xb40 [ 1431.371584] ? do_syscall_64+0x4c/0x640 [ 1431.371592] ? SyS_open+0x30/0x30 [ 1431.371601] do_syscall_64+0x1d5/0x640 [ 1431.371613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.371619] RIP: 0033:0x441419 [ 1431.371623] RSP: 002b:00007ffcf9fa5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.371631] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 1431.371636] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1431.371641] RBP: 0000000000101512 R08: 0000000000000004 R09: 00000009004002c8 [ 1431.371645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 1431.371650] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 1431.371666] INFO: task syz-executor088:6362 blocked for more than 140 seconds. [ 1431.371671] Not tainted 4.14.175-syzkaller #0 [ 1431.371674] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.371677] syz-executor088 D28688 6362 6350 0x00000004 [ 1431.371694] Call Trace: [ 1431.371705] ? __schedule+0x7b8/0x1ca0 [ 1431.371713] ? __mutex_lock+0x737/0x1470 [ 1431.371725] ? __sched_text_start+0x8/0x8 [ 1431.371732] ? lock_downgrade+0x6e0/0x6e0 [ 1431.371744] schedule+0x8d/0x1b0 [ 1431.371753] schedule_preempt_disabled+0xf/0x20 [ 1431.371760] __mutex_lock+0x73c/0x1470 [ 1431.371767] ? get_fb_info.part.0+0x5f/0x70 [ 1431.371776] ? fb_open+0xb7/0x400 [ 1431.371785] ? lock_downgrade+0x6e0/0x6e0 [ 1431.371794] ? mutex_trylock+0x1a0/0x1a0 [ 1431.371805] ? __mutex_unlock_slowpath+0x75/0x780 [ 1431.371812] ? find_held_lock+0x2d/0x110 [ 1431.371828] ? fb_open+0xb7/0x400 [ 1431.371834] fb_open+0xb7/0x400 [ 1431.371842] ? get_fb_info.part.0+0x70/0x70 [ 1431.371850] chrdev_open+0x1fc/0x540 [ 1431.371858] ? cdev_put.part.0+0x50/0x50 [ 1431.371871] do_dentry_open+0x732/0xe90 [ 1431.371879] ? cdev_put.part.0+0x50/0x50 [ 1431.371888] ? __inode_permission+0x7c/0x300 [ 1431.371898] vfs_open+0x105/0x220 [ 1431.371908] path_openat+0x8ca/0x3c50 [ 1431.371927] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1431.371943] do_filp_open+0x18e/0x250 [ 1431.371952] ? may_open_dev+0xe0/0xe0 [ 1431.371966] ? lock_downgrade+0x6e0/0x6e0 [ 1431.371977] ? do_raw_spin_unlock+0x164/0x250 [ 1431.371986] ? __alloc_fd+0x1bf/0x490 [ 1431.372000] do_sys_open+0x29d/0x3f0 [ 1431.372010] ? filp_open+0x60/0x60 [ 1431.372018] ? __do_page_fault+0x35b/0xb40 [ 1431.372026] ? do_syscall_64+0x4c/0x640 [ 1431.372033] ? SyS_open+0x30/0x30 [ 1431.372043] do_syscall_64+0x1d5/0x640 [ 1431.372055] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.372061] RIP: 0033:0x441419 [ 1431.372065] RSP: 002b:00007ffcf9fa5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.372073] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 1431.372078] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1431.372083] RBP: 0000000000101515 R08: 0000000000000004 R09: 00000009004002c8 [ 1431.372087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 1431.372092] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 1431.372108] INFO: task syz-executor088:6363 blocked for more than 140 seconds. [ 1431.372112] Not tainted 4.14.175-syzkaller #0 [ 1431.372115] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1431.372118] syz-executor088 D28688 6363 6351 0x00000004 [ 1431.372133] Call Trace: [ 1431.372145] ? __schedule+0x7b8/0x1ca0 [ 1431.372152] ? __mutex_lock+0x737/0x1470 [ 1431.372164] ? __sched_text_start+0x8/0x8 [ 1431.372171] ? lock_downgrade+0x6e0/0x6e0 [ 1431.372188] schedule+0x8d/0x1b0 [ 1431.372198] schedule_preempt_disabled+0xf/0x20 [ 1431.372205] __mutex_lock+0x73c/0x1470 [ 1431.372212] ? get_fb_info.part.0+0x5f/0x70 [ 1431.372221] ? fb_open+0xb7/0x400 [ 1431.372232] ? mutex_trylock+0x1a0/0x1a0 [ 1431.372244] ? __mutex_unlock_slowpath+0x75/0x780 [ 1431.372250] ? find_held_lock+0x2d/0x110 [ 1431.372266] ? fb_open+0xb7/0x400 [ 1431.372272] fb_open+0xb7/0x400 [ 1431.372280] ? get_fb_info.part.0+0x70/0x70 [ 1431.372288] chrdev_open+0x1fc/0x540 [ 1431.372296] ? cdev_put.part.0+0x50/0x50 [ 1431.372309] do_dentry_open+0x732/0xe90 [ 1431.372317] ? cdev_put.part.0+0x50/0x50 [ 1431.372326] ? __inode_permission+0x7c/0x300 [ 1431.372336] vfs_open+0x105/0x220 [ 1431.372346] path_openat+0x8ca/0x3c50 [ 1431.372364] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 1431.372381] do_filp_open+0x18e/0x250 [ 1431.372389] ? may_open_dev+0xe0/0xe0 [ 1431.372404] ? lock_downgrade+0x6e0/0x6e0 [ 1431.372414] ? do_raw_spin_unlock+0x164/0x250 [ 1431.372424] ? __alloc_fd+0x1bf/0x490 [ 1431.372438] do_sys_open+0x29d/0x3f0 [ 1431.372447] ? filp_open+0x60/0x60 [ 1431.372456] ? __do_page_fault+0x35b/0xb40 [ 1431.372464] ? do_syscall_64+0x4c/0x640 [ 1431.372471] ? SyS_open+0x30/0x30 [ 1431.372480] do_syscall_64+0x1d5/0x640 [ 1431.372493] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.372498] RIP: 0033:0x441419 [ 1431.372503] RSP: 002b:00007ffcf9fa5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.372511] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 1431.372516] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1431.372520] RBP: 000000000010150f R08: 0000000000000004 R09: 00000009004002c8 [ 1431.372525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 1431.372530] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 1431.372544] [ 1431.372544] Showing all locks held in the system: [ 1431.372553] 1 lock held by khungtaskd/1056: [ 1431.372557] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 1431.372594] 1 lock held by in:imklog/6049: [ 1431.372596] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xa6/0xc0 [ 1431.372618] 1 lock held by syz-executor088/6349: [ 1431.372621] #0: (&fb_info->lock){+.+.}, at: [] fb_release+0x4e/0x140 [ 1431.372640] 1 lock held by syz-executor088/6360: [ 1431.372642] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x400 [ 1431.372660] 1 lock held by syz-executor088/6361: [ 1431.372663] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x400 [ 1431.372680] 1 lock held by syz-executor088/6362: [ 1431.372683] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x400 [ 1431.372700] 1 lock held by syz-executor088/6363: [ 1431.372703] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x400 [ 1431.372719] [ 1431.372722] ============================================= [ 1431.372722] [ 1431.372726] NMI backtrace for cpu 1 [ 1431.372733] CPU: 1 PID: 1056 Comm: khungtaskd Not tainted 4.14.175-syzkaller #0 [ 1431.372738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.372740] Call Trace: [ 1431.372771] dump_stack+0x13e/0x194 [ 1431.372783] nmi_cpu_backtrace.cold+0x57/0x93 [ 1431.372793] ? irq_force_complete_move.cold+0x7b/0x7b [ 1431.372801] nmi_trigger_cpumask_backtrace+0x139/0x17e [ 1431.372836] watchdog+0x5e2/0xb80 [ 1431.372863] ? kthread_flush_work_fn+0x20/0x20 [ 1431.372872] ? hungtask_pm_notify+0x50/0x50 [ 1431.372880] kthread+0x30d/0x420 [ 1431.372888] ? kthread_create_on_node+0xd0/0xd0 [ 1431.372897] ret_from_fork+0x24/0x30 [ 1431.372913] Sending NMI from CPU 1 to CPUs 0: [ 1431.373476] NMI backtrace for cpu 0 [ 1431.373480] CPU: 0 PID: 6359 Comm: syz-executor088 Not tainted 4.14.175-syzkaller #0 [ 1431.373483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.373486] task: ffff888098342300 task.stack: ffff888097bf8000 [ 1431.373488] RIP: 0010:bitfill_aligned+0x22/0x190 [ 1431.373490] RSP: 0018:ffff888097bff318 EFLAGS: 00000297 [ 1431.373494] RAX: ffff888098342300 RBX: ffff8880000a0000 RCX: 0000000000000000 [ 1431.373497] RDX: 0000000000000000 RSI: ffff8880000a0000 RDI: ffff8882192b2e40 [ 1431.373500] RBP: 0000000000001400 R08: 0000000000001400 R09: 0000000000000040 [ 1431.373503] R10: ffffed104323b873 R11: ffff8882191dc39f R12: 0000000000000040 [ 1431.373506] R13: 0000000061b8135f R14: 0000000000000000 R15: 0000000000000000 [ 1431.373509] FS: 00000000007fc880(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 1431.373511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1431.373514] CR2: 0000000020000180 CR3: 00000000a546a000 CR4: 00000000001406f0 [ 1431.373517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1431.373519] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1431.373521] Call Trace: [ 1431.373523] cfb_fillrect+0x3d5/0x720 [ 1431.373524] ? cfb_fillrect+0x720/0x720 [ 1431.373526] vga16fb_fillrect+0x61e/0x1880 [ 1431.373528] ? fb_copy_cmap+0x28e/0x350 [ 1431.373530] ? vga16fb_setcolreg+0xfe/0x360 [ 1431.373532] bit_clear_margins+0x2a4/0x480 [ 1431.373534] ? bit_bmove+0x1e0/0x1e0 [ 1431.373536] fbcon_clear_margins+0x285/0x310 [ 1431.373538] fbcon_switch+0xcdf/0x1780 [ 1431.373540] ? finish_task_switch+0x178/0x620 [ 1431.373542] ? fbcon_set_def_font+0x370/0x370 [ 1431.373544] ? fbcon_cursor+0x4be/0x690 [ 1431.373546] ? bit_clear+0x460/0x460 [ 1431.373548] ? fbcon_set_origin+0x1c/0x40 [ 1431.373550] ? fbcon_scrolldelta+0x10c0/0x10c0 [ 1431.373551] redraw_screen+0x331/0x770 [ 1431.373553] ? con_flush_chars+0x80/0x80 [ 1431.373555] ? fbcon_set_palette+0x470/0x590 [ 1431.373557] fbcon_modechanged+0x59d/0x890 [ 1431.373559] fbcon_event_notify+0x11a/0x1746 [ 1431.373561] ? lock_acquire+0x170/0x3f0 [ 1431.373563] notifier_call_chain+0x107/0x1a0 [ 1431.373565] blocking_notifier_call_chain+0x79/0x90 [ 1431.373567] fb_set_var+0xaad/0xc70 [ 1431.373569] ? fb_set_suspend+0x110/0x110 [ 1431.373571] ? lock_acquire+0x170/0x3f0 [ 1431.373573] ? lock_fb_info+0x1a/0x70 [ 1431.373575] ? lock_fb_info+0x1a/0x70 [ 1431.373576] ? __mutex_lock+0x36a/0x1470 [ 1431.373578] ? trace_hardirqs_on+0x10/0x10 [ 1431.373580] ? save_trace+0x290/0x290 [ 1431.373582] ? mutex_trylock+0x1a0/0x1a0 [ 1431.373584] ? do_fb_ioctl+0x36a/0x940 [ 1431.373586] do_fb_ioctl+0x3cc/0x940 [ 1431.373588] ? lock_downgrade+0x6e0/0x6e0 [ 1431.373589] ? fb_read+0x520/0x520 [ 1431.373591] ? avc_has_extended_perms+0x802/0xd40 [ 1431.373593] ? lock_downgrade+0x6e0/0x6e0 [ 1431.373595] ? pud_val+0xd0/0xd0 [ 1431.373597] ? avc_ss_reset+0x100/0x100 [ 1431.373599] ? put_page+0x88/0x1b0 [ 1431.373601] ? wp_page_copy+0x9d4/0x1300 [ 1431.373602] ? follow_pfn+0x200/0x200 [ 1431.373604] fb_ioctl+0xdd/0x130 [ 1431.373606] ? do_fb_ioctl+0x940/0x940 [ 1431.373608] do_vfs_ioctl+0x75a/0xfe0 [ 1431.373610] ? selinux_file_mprotect+0x5c0/0x5c0 [ 1431.373612] ? ioctl_preallocate+0x1a0/0x1a0 [ 1431.373614] ? lock_downgrade+0x6e0/0x6e0 [ 1431.373616] ? security_file_ioctl+0x76/0xb0 [ 1431.373618] ? security_file_ioctl+0x83/0xb0 [ 1431.373619] SyS_ioctl+0x7f/0xb0 [ 1431.373621] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1431.373623] do_syscall_64+0x1d5/0x640 [ 1431.373625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1431.373627] RIP: 0033:0x441419 [ 1431.373629] RSP: 002b:00007ffcf9fa5f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.373634] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 1431.373637] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 1431.373640] RBP: 000000000010150f R08: 00000009004002c8 R09: 00000009004002c8 [ 1431.373643] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 1431.373646] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 1431.373647] Code: ff 0f 1f 84 00 00 00 00 00 41 57 49 89 cf 41 56 41 89 d6 41 55 41 54 45 89 cc 55 44 89 c5 53 48 89 f3 48 83 ec 08 e8 5e 41 3f fe <85> ed 74 5f e8 55 41 3f fe 41 8d 3c 2e 44 89 f1 31 d2 49 c7 c5 [ 1431.373928] Kernel panic - not syncing: hung_task: blocked tasks [ 1431.373935] CPU: 1 PID: 1056 Comm: khungtaskd Not tainted 4.14.175-syzkaller #0 [ 1431.373939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.373942] Call Trace: [ 1431.373951] dump_stack+0x13e/0x194 [ 1431.373960] panic+0x1f9/0x42d [ 1431.373968] ? add_taint.cold+0x16/0x16 [ 1431.374002] ? printk_safe_flush+0xac/0x110 [ 1431.374015] watchdog+0x5f3/0xb80 [ 1431.374022] ? kthread_flush_work_fn+0x20/0x20 [ 1431.374031] ? hungtask_pm_notify+0x50/0x50 [ 1431.374039] kthread+0x30d/0x420 [ 1431.374047] ? kthread_create_on_node+0xd0/0xd0 [ 1431.374055] ret_from_fork+0x24/0x30 [ 1431.375736] Kernel Offset: disabled [ 1433.148758] Rebooting in 86400 seconds..