INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 438.475998][ T94] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 438.486331][ T71] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 438.495946][ T95] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 438.496418][ T1812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 438.503926][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 438.518777][ T1817] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 438.576323][ T94] usb 5-1: Using ep0 maxpacket: 8 [ 438.581880][ T71] usb 6-1: Using ep0 maxpacket: 8 [ 438.605993][ T1812] usb 3-1: Using ep0 maxpacket: 8 [ 438.616100][ T95] usb 2-1: Using ep0 maxpacket: 8 [ 438.621266][ T1817] usb 4-1: Using ep0 maxpacket: 8 [ 438.626532][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 438.696094][ T94] usb 5-1: config 118 has an invalid descriptor of length 48, skipping remainder of the config [ 438.706955][ T71] usb 6-1: config 118 has an invalid descriptor of length 48, skipping remainder of the config [ 438.717472][ T94] usb 5-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.728679][ T1812] usb 3-1: config 118 has an invalid descriptor of length 48, skipping remainder of the config [ 438.739092][ T71] usb 6-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.750217][ T1812] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.756038][ T95] usb 2-1: config 118 has an invalid descriptor of length 48, skipping remainder of the config [ 438.772359][ T1817] usb 4-1: config 118 has an invalid descriptor of length 48, skipping remainder of the config [ 438.782765][ T12] usb 1-1: config 118 has an invalid descriptor of length 48, skipping remainder of the config [ 438.793593][ T1817] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.804723][ T12] usb 1-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.815886][ T95] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.836110][ T94] usb 5-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 438.845216][ T94] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 438.853249][ T94] usb 5-1: SerialNumber: syz [ 438.857983][ T71] usb 6-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 438.867058][ T71] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 438.875173][ T71] usb 6-1: SerialNumber: syz [ 438.879866][ T1812] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 438.888917][ T1812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 438.896936][ T1812] usb 3-1: SerialNumber: syz [ 438.906135][ T1817] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 438.915252][ T1817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 438.923438][ T1817] usb 4-1: SerialNumber: syz [ 438.928228][ T12] usb 1-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 438.937331][ T94] hub 5-1:118.0: bad descriptor, ignoring hub [ 438.937471][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 438.944207][ T94] hub: probe of 5-1:118.0 failed with error -5 [ 438.951995][ T12] usb 1-1: SerialNumber: syz [ 438.952435][ T95] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 438.961612][ T71] hub 6-1:118.0: bad descriptor, ignoring hub [ 438.963046][ T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2 [ 438.972633][ T1812] hub 3-1:118.0: bad descriptor, ignoring hub [ 438.978257][ T95] usb 2-1: SerialNumber: syz [ 438.986813][ T71] hub: probe of 6-1:118.0 failed with error -5 [ 439.004063][ T1812] hub: probe of 3-1:118.0 failed with error -5 [ 439.017703][ T94] cdc_wdm 5-1:118.0: cdc-wdm0: USB WDM device [ 439.025398][ T1812] cdc_wdm 3-1:118.0: cdc-wdm1: USB WDM device [ 439.032699][ T71] cdc_wdm 6-1:118.0: cdc-wdm2: USB WDM device [ 439.046734][ T12] hub 1-1:118.0: bad descriptor, ignoring hub [ 439.052907][ T12] hub: probe of 1-1:118.0 failed with error -5 [ 439.059958][ T1817] hub 4-1:118.0: bad descriptor, ignoring hub [ 439.066787][ T95] hub 2-1:118.0: bad descriptor, ignoring hub [ 439.072949][ T95] hub: probe of 2-1:118.0 failed with error -5 [ 439.080175][ T1817] hub: probe of 4-1:118.0 failed with error -5 [ 439.088349][ T95] cdc_wdm 2-1:118.0: cdc-wdm3: USB WDM device [ 439.095492][ T12] cdc_wdm 1-1:118.0: cdc-wdm4: USB WDM device [ 439.102768][ T1817] cdc_wdm 4-1:118.0: cdc-wdm5: USB WDM device [ 439.416121][ T71] usb 3-1: USB disconnect, device number 2 [ 595.945961][ T22] INFO: task syz-executor212:1809 blocked for more than 143 seconds. [ 595.954338][ T22] Not tainted 5.6.0-rc1-syzkaller #0 [ 595.960309][ T22] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.969079][ T22] syz-executor212 D26504 1809 1808 0x80004006 [ 595.975609][ T22] Call Trace: [ 595.979116][ T22] ? __schedule+0x892/0x1d80 [ 595.983736][ T22] ? __sched_text_start+0x8/0x8 [ 595.988858][ T22] ? prepare_to_wait_event+0x129/0x650 [ 595.994447][ T22] schedule+0xcd/0x2b0 [ 595.998653][ T22] wdm_flush+0x2ea/0x3c0 [ 596.003032][ T22] ? wdm_poll+0x280/0x280 [ 596.007399][ T22] ? finish_wait+0x260/0x260 [ 596.012035][ T22] ? task_work_add+0x97/0x120 [ 596.016899][ T22] ? wdm_poll+0x280/0x280 [ 596.021436][ T22] filp_close+0xb4/0x160 [ 596.025939][ T22] put_files_struct+0x1d8/0x2e0 [ 596.030897][ T22] exit_files+0x7e/0xa0 [ 596.035228][ T22] do_exit+0xb58/0x2c50 [ 596.039517][ T22] ? find_held_lock+0x2d/0x110 [ 596.044397][ T22] ? mm_update_next_owner+0x7a0/0x7a0 [ 596.049844][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 596.054793][ T22] do_group_exit+0x125/0x340 [ 596.059667][ T22] get_signal+0x480/0x2470 [ 596.064152][ T22] ? kfree+0x2a2/0x300 [ 596.068274][ T22] ? wdm_write+0x1c2/0xe24 [ 596.072757][ T22] do_signal+0x88/0x1490 [ 596.077086][ T22] ? vmf_insert_mixed_mkwrite+0x60/0x60 [ 596.082659][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 596.087770][ T22] ? setup_sigcontext+0x820/0x820 [ 596.092989][ T22] ? wdm_probe+0x2d0/0x2d0 [ 596.097486][ T22] ? __vfs_write+0x7e/0x100 [ 596.101998][ T22] ? vfs_write+0x15b/0x5c0 [ 596.106453][ T22] ? ksys_write+0x19f/0x250 [ 596.110973][ T22] ? __ia32_sys_read+0xb0/0xb0 [ 596.116004][ T22] exit_to_usermode_loop+0x1a2/0x200 [ 596.121298][ T22] do_syscall_64+0x4e0/0x5a0 [ 596.125978][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.131887][ T22] RIP: 0033:0x445669 [ 596.136012][ T22] Code: Bad RIP value. [ 596.140327][ T22] RSP: 002b:00007ffdbfbcdf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.148884][ T22] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000445669 [ 596.156888][ T22] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 596.164861][ T22] RBP: 00000000004a6b70 R08: 000000000000000f R09: 0000000120080522 [ 596.173507][ T22] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402880 [ 596.181570][ T22] R13: 0000000000402910 R14: 0000000000000000 R15: 0000000000000000 [ 596.190740][ T22] INFO: task syz-executor212:1810 blocked for more than 143 seconds. [ 596.199055][ T22] Not tainted 5.6.0-rc1-syzkaller #0 [ 596.204852][ T22] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.213578][ T22] syz-executor212 D28472 1810 1807 0x80004006 [ 596.220090][ T22] Call Trace: [ 596.223385][ T22] ? __schedule+0x892/0x1d80 [ 596.228034][ T22] ? __sched_text_start+0x8/0x8 [ 596.232885][ T22] ? prepare_to_wait_event+0x129/0x650 [ 596.238456][ T22] schedule+0xcd/0x2b0 [ 596.242747][ T22] wdm_flush+0x2ea/0x3c0 [ 596.247180][ T22] ? wdm_poll+0x280/0x280 [ 596.251518][ T22] ? finish_wait+0x260/0x260 [ 596.256178][ T22] ? task_work_add+0x97/0x120 [ 596.260884][ T22] ? wdm_poll+0x280/0x280 [ 596.265304][ T22] filp_close+0xb4/0x160 [ 596.269593][ T22] put_files_struct+0x1d8/0x2e0 [ 596.274578][ T22] exit_files+0x7e/0xa0 [ 596.278790][ T22] do_exit+0xb58/0x2c50 [ 596.282965][ T22] ? find_held_lock+0x2d/0x110 [ 596.287800][ T22] ? mm_update_next_owner+0x7a0/0x7a0 [ 596.293178][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 596.298083][ T22] do_group_exit+0x125/0x340 [ 596.302677][ T22] get_signal+0x480/0x2470 [ 596.307137][ T22] ? kfree+0x2a2/0x300 [ 596.311274][ T22] ? wdm_write+0x1c2/0xe24 [ 596.315687][ T22] do_signal+0x88/0x1490 [ 596.320005][ T22] ? finish_wait+0x260/0x260 [ 596.324602][ T22] ? handle_mm_fault+0x1d5/0x8d0 [ 596.329720][ T22] ? setup_sigcontext+0x820/0x820 [ 596.334744][ T22] ? wdm_probe+0x2d0/0x2d0 [ 596.339210][ T22] ? __vfs_write+0x7e/0x100 [ 596.343717][ T22] ? vfs_write+0x15b/0x5c0 [ 596.348184][ T22] ? ksys_write+0x19f/0x250 [ 596.352686][ T22] ? __ia32_sys_read+0xb0/0xb0 [ 596.357511][ T22] exit_to_usermode_loop+0x1a2/0x200 [ 596.362820][ T22] do_syscall_64+0x4e0/0x5a0 [ 596.367505][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.373397][ T22] RIP: 0033:0x445669 [ 596.377337][ T22] Code: Bad RIP value. [ 596.381403][ T22] RSP: 002b:00007ffdbfbcdf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.389915][ T22] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000445669 [ 596.397955][ T22] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 596.405978][ T22] RBP: 00000000004a6b70 R08: 000000000000000f R09: 0000000120080522 [ 596.413968][ T22] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402880 [ 596.422044][ T22] R13: 0000000000402910 R14: 0000000000000000 R15: 0000000000000000 [ 596.430130][ T22] INFO: task syz-executor212:1811 blocked for more than 143 seconds. [ 596.438225][ T22] Not tainted 5.6.0-rc1-syzkaller #0 [ 596.444201][ T22] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.452969][ T22] syz-executor212 D28472 1811 1805 0x80004006 [ 596.459442][ T22] Call Trace: [ 596.462734][ T22] ? __schedule+0x892/0x1d80 [ 596.467372][ T22] ? __sched_text_start+0x8/0x8 [ 596.472242][ T22] ? prepare_to_wait_event+0x129/0x650 [ 596.477879][ T22] schedule+0xcd/0x2b0 [ 596.481958][ T22] wdm_flush+0x2ea/0x3c0 [ 596.486242][ T22] ? wdm_poll+0x280/0x280 [ 596.490564][ T22] ? finish_wait+0x260/0x260 [ 596.495134][ T22] ? task_work_add+0x97/0x120 [ 596.499872][ T22] ? wdm_poll+0x280/0x280 [ 596.504207][ T22] filp_close+0xb4/0x160 [ 596.508496][ T22] put_files_struct+0x1d8/0x2e0 [ 596.513354][ T22] exit_files+0x7e/0xa0 [ 596.517613][ T22] do_exit+0xb58/0x2c50 [ 596.521785][ T22] ? find_held_lock+0x2d/0x110 [ 596.526695][ T22] ? mm_update_next_owner+0x7a0/0x7a0 [ 596.532217][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 596.537206][ T22] do_group_exit+0x125/0x340 [ 596.541800][ T22] get_signal+0x480/0x2470 [ 596.546341][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 596.551642][ T22] do_signal+0x88/0x1490 [ 596.556219][ T22] ? putname+0xe1/0x120 [ 596.560501][ T22] ? do_sys_openat2+0x43f/0x740 [ 596.565484][ T22] ? setup_sigcontext+0x820/0x820 [ 596.570718][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 596.576285][ T22] ? do_sys_open+0xc3/0x140 [ 596.581184][ T22] ? filp_open+0x70/0x70 [ 596.585498][ T22] ? switch_fpu_return+0x1db/0x470 [ 596.590805][ T22] exit_to_usermode_loop+0x1a2/0x200 [ 596.596134][ T22] do_syscall_64+0x4e0/0x5a0 [ 596.600709][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.606818][ T22] RIP: 0033:0x401860 [ 596.610824][ T22] Code: 65 74 68 6f 73 74 6e 61 6d 65 00 63 68 6f 77 6e 00 66 77 72 69 74 65 00 66 72 65 61 64 00 67 65 74 65 75 69 64 00 77 61 69 74 <70> 69 64 00 6c 6f 63 61 6c 74 69 6d 65 00 73 74 72 63 68 72 00 66 [ 596.630570][ T22] RSP: 002b:00007ffdbfbcde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 596.639055][ T22] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000000401860 [ 596.647091][ T22] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007ffdbfbcde70 [ 596.655223][ T22] RBP: 00000000004a6b70 R08: 0000000000000000 R09: 000000000000000f [ 596.663261][ T22] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000402880 [ 596.671277][ T22] R13: 0000000000402910 R14: 0000000000000000 R15: 0000000000000000 [ 596.679388][ T22] INFO: task syz-executor212:1813 blocked for more than 144 seconds. [ 596.687565][ T22] Not tainted 5.6.0-rc1-syzkaller #0 [ 596.693473][ T22] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.702184][ T22] syz-executor212 D28472 1813 1804 0x00000004 [ 596.708554][ T22] Call Trace: [ 596.711848][ T22] ? __schedule+0x892/0x1d80 [ 596.716489][ T22] ? __sched_text_start+0x8/0x8 [ 596.721356][ T22] ? prepare_to_wait_event+0x129/0x650 [ 596.726882][ T22] schedule+0xcd/0x2b0 [ 596.730956][ T22] wdm_flush+0x2ea/0x3c0 [ 596.735192][ T22] ? wdm_poll+0x280/0x280 [ 596.739569][ T22] ? do_raw_spin_lock+0x129/0x290 [ 596.744599][ T22] ? finish_wait+0x260/0x260 [ 596.749317][ T22] ? wdm_poll+0x280/0x280 [ 596.753643][ T22] filp_close+0xb4/0x160 [ 596.757914][ T22] __close_fd+0x133/0x200 [ 596.762248][ T22] __x64_sys_close+0x69/0x100 [ 596.767036][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 596.772333][ T22] do_syscall_64+0xb6/0x5a0 [ 596.777022][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.782916][ T22] RIP: 0033:0x401800 [ 596.786864][ T22] Code: 67 63 6f 6d 70 00 6f 70 74 61 72 67 00 73 74 64 65 72 72 00 5f 5f 73 6e 70 72 69 6e 74 66 5f 63 68 6b 00 73 65 74 65 75 69 64 <00> 67 65 74 75 69 64 00 67 65 74 65 67 69 64 00 65 78 65 63 76 70 [ 596.806734][ T22] RSP: 002b:00007ffdbfbcdf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 596.815145][ T22] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000401800 [ 596.823213][ T22] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 596.831304][ T22] RBP: 00000000004a6b70 R08: 000000000000000f R09: 0000000120080522 [ 596.839381][ T22] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402880 [ 596.847419][ T22] R13: 0000000000402910 R14: 0000000000000000 R15: 0000000000000000 [ 596.855411][ T22] INFO: task syz-executor212:1814 blocked for more than 144 seconds. [ 596.863604][ T22] Not tainted 5.6.0-rc1-syzkaller #0 [ 596.869507][ T22] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.878229][ T22] syz-executor212 D28040 1814 1806 0x80004006 [ 596.884597][ T22] Call Trace: [ 596.887952][ T22] ? __schedule+0x892/0x1d80 [ 596.892567][ T22] ? __sched_text_start+0x8/0x8 [ 596.897458][ T22] ? prepare_to_wait_event+0x129/0x650 [ 596.903018][ T22] schedule+0xcd/0x2b0 [ 596.907243][ T22] wdm_flush+0x2ea/0x3c0 [ 596.911635][ T22] ? wdm_poll+0x280/0x280 [ 596.916022][ T22] ? finish_wait+0x260/0x260 [ 596.920616][ T22] ? task_work_add+0x97/0x120 [ 596.925295][ T22] ? wdm_poll+0x280/0x280 [ 596.929676][ T22] filp_close+0xb4/0x160 [ 596.934058][ T22] put_files_struct+0x1d8/0x2e0 [ 596.938994][ T22] exit_files+0x7e/0xa0 [ 596.943151][ T22] do_exit+0xb58/0x2c50 [ 596.947351][ T22] ? find_held_lock+0x2d/0x110 [ 596.952225][ T22] ? mm_update_next_owner+0x7a0/0x7a0 [ 596.957647][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 596.962685][ T22] do_group_exit+0x125/0x340 [ 596.967360][ T22] get_signal+0x480/0x2470 [ 596.971922][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 596.977369][ T22] do_signal+0x88/0x1490 [ 596.981704][ T22] ? putname+0xe1/0x120 [ 596.985911][ T22] ? do_sys_openat2+0x43f/0x740 [ 596.990785][ T22] ? setup_sigcontext+0x820/0x820 [ 596.995812][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 597.001421][ T22] ? do_sys_open+0xc3/0x140 [ 597.005977][ T22] ? filp_open+0x70/0x70 [ 597.010236][ T22] ? switch_fpu_return+0x1db/0x470 [ 597.015333][ T22] exit_to_usermode_loop+0x1a2/0x200 [ 597.020684][ T22] do_syscall_64+0x4e0/0x5a0 [ 597.025279][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.031265][ T22] RIP: 0033:0x401860 [ 597.035160][ T22] Code: 65 74 68 6f 73 74 6e 61 6d 65 00 63 68 6f 77 6e 00 66 77 72 69 74 65 00 66 72 65 61 64 00 67 65 74 65 75 69 64 00 77 61 69 74 <70> 69 64 00 6c 6f 63 61 6c 74 69 6d 65 00 73 74 72 63 68 72 00 66 [ 597.055961][ T22] RSP: 002b:00007ffdbfbcde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 597.064445][ T22] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000000401860 [ 597.072507][ T22] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007ffdbfbcde70 [ 597.080527][ T22] RBP: 00000000004a6b70 R08: 0000000000000000 R09: 000000000000000f [ 597.088744][ T22] R10: 0000000000000064 R11: 0000000000000246 R12: 0000000000402880 [ 597.096781][ T22] R13: 0000000000402910 R14: 0000000000000000 R15: 0000000000000000 [ 597.104832][ T22] INFO: task syz-executor212:1815 blocked for more than 144 seconds. [ 597.112932][ T22] Not tainted 5.6.0-rc1-syzkaller #0 [ 597.118769][ T22] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.127602][ T22] syz-executor212 D28472 1815 1803 0x80004006 [ 597.134024][ T22] Call Trace: [ 597.137377][ T22] ? __schedule+0x892/0x1d80 [ 597.142000][ T22] ? __sched_text_start+0x8/0x8 [ 597.147195][ T22] ? prepare_to_wait_event+0x129/0x650 [ 597.152692][ T22] schedule+0xcd/0x2b0 [ 597.156807][ T22] wdm_flush+0x2ea/0x3c0 [ 597.161060][ T22] ? wdm_poll+0x280/0x280 [ 597.165390][ T22] ? finish_wait+0x260/0x260 [ 597.170042][ T22] ? task_work_add+0x97/0x120 [ 597.174718][ T22] ? wdm_poll+0x280/0x280 [ 597.179079][ T22] filp_close+0xb4/0x160 [ 597.183342][ T22] put_files_struct+0x1d8/0x2e0 [ 597.188278][ T22] exit_files+0x7e/0xa0 [ 597.192476][ T22] do_exit+0xb58/0x2c50 [ 597.196677][ T22] ? find_held_lock+0x2d/0x110 [ 597.201466][ T22] ? mm_update_next_owner+0x7a0/0x7a0 [ 597.206915][ T22] ? lock_downgrade+0x6e0/0x6e0 [ 597.212320][ T22] do_group_exit+0x125/0x340 [ 597.217009][ T22] get_signal+0x480/0x2470 [ 597.221652][ T22] ? kfree+0x2a2/0x300 [ 597.225719][ T22] ? wdm_write+0x1c2/0xe24 [ 597.230215][ T22] do_signal+0x88/0x1490 [ 597.234569][ T22] ? finish_wait+0x260/0x260 [ 597.239208][ T22] ? handle_mm_fault+0x1d5/0x8d0 [ 597.244398][ T22] ? setup_sigcontext+0x820/0x820 [ 597.249559][ T22] ? wdm_probe+0x2d0/0x2d0 [ 597.254246][ T22] ? __vfs_write+0x7e/0x100 [ 597.258845][ T22] ? vfs_write+0x15b/0x5c0 [ 597.263309][ T22] ? ksys_write+0x19f/0x250 [ 597.267891][ T22] ? __ia32_sys_read+0xb0/0xb0 [ 597.272660][ T22] exit_to_usermode_loop+0x1a2/0x200 [ 597.278020][ T22] do_syscall_64+0x4e0/0x5a0 [ 597.282611][ T22] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.288554][ T22] RIP: 0033:0x445669 [ 597.292468][ T22] Code: Bad RIP value. [ 597.296606][ T22] RSP: 002b:00007ffdbfbcdf08 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.305032][ T22] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 0000000000445669 [ 597.313191][ T22] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 597.321201][ T22] RBP: 00000000004a6b70 R08: 000000000000000f R09: 0000000120080522 [ 597.329213][ T22] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402880 [ 597.337375][ T22] R13: 0000000000402910 R14: 0000000000000000 R15: 0000000000000000 [ 597.345375][ T22] [ 597.345375][ T22] Showing all locks held in the system: [ 597.353154][ T22] 1 lock held by khungtaskd/22: [ 597.358110][ T22] #0: ffffffff87108ee0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x264 [ 597.367468][ T22] 1 lock held by rsyslogd/1676: [ 597.372374][ T22] #0: ffff8881d0ef40e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 597.381138][ T22] 2 locks held by getty/1766: [ 597.385886][ T22] #0: ffff8881ced80090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.395285][ T22] #1: ffffc9000049f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.405058][ T22] 2 locks held by getty/1767: [ 597.409775][ T22] #0: ffff8881ced40090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.419057][ T22] #1: ffffc900004912e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.428835][ T22] 2 locks held by getty/1768: [ 597.433493][ T22] #0: ffff8881cf2ac090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.442827][ T22] #1: ffffc900004852e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.452464][ T22] 2 locks held by getty/1769: [ 597.457367][ T22] #0: ffff8881ced82090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.466750][ T22] #1: ffffc900004a32e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.476528][ T22] 2 locks held by getty/1770: [ 597.481293][ T22] #0: ffff8881ced84090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.490633][ T22] #1: ffffc900004af2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.500290][ T22] 2 locks held by getty/1771: [ 597.504955][ T22] #0: ffff8881ced83090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.514342][ T22] #1: ffffc900004a72e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.524382][ T22] 2 locks held by getty/1772: [ 597.529121][ T22] #0: ffff8881cf596090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 597.539193][ T22] #1: ffffc9000047d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 597.548842][ T22] [ 597.551194][ T22] ============================================= [ 597.551194][ T22] [ 597.559691][ T22] NMI backtrace for cpu 1 [ 597.564037][ T22] CPU: 1 PID: 22 Comm: khungtaskd Not tainted 5.6.0-rc1-syzkaller #0 [ 597.572087][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.582226][ T22] Call Trace: [ 597.585604][ T22] dump_stack+0xef/0x16e [ 597.590130][ T22] ? x86_vector_activate.cold+0xb0/0xdd [ 597.595685][ T22] nmi_cpu_backtrace.cold+0x70/0xb1 [ 597.600890][ T22] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 597.606516][ T22] nmi_trigger_cpumask_backtrace+0x1db/0x207 [ 597.612583][ T22] watchdog+0xa99/0xfd0 [ 597.616737][ T22] ? reset_hung_task_detector+0x30/0x30 [ 597.622274][ T22] kthread+0x318/0x420 [ 597.626346][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 597.633327][ T22] ret_from_fork+0x24/0x30 [ 597.637835][ T22] Sending NMI from CPU 1 to CPUs 0: [ 597.643185][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0x28/0x300 [ 597.644109][ T22] Kernel panic - not syncing: hung_task: blocked tasks [ 597.658249][ T22] CPU: 1 PID: 22 Comm: khungtaskd Not tainted 5.6.0-rc1-syzkaller #0 [ 597.666320][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.676382][ T22] Call Trace: [ 597.679677][ T22] dump_stack+0xef/0x16e [ 597.684150][ T22] panic+0x2aa/0x6e1 [ 597.688056][ T22] ? add_taint.cold+0x16/0x16 [ 597.692969][ T22] ? cpumask_next+0x3c/0x40 [ 597.697531][ T22] ? printk_safe_flush+0xd9/0x120 [ 597.702571][ T22] ? watchdog+0xa99/0xfd0 [ 597.706887][ T22] ? nmi_trigger_cpumask_backtrace+0x1b3/0x207 [ 597.713120][ T22] watchdog+0xaaa/0xfd0 [ 597.717270][ T22] ? reset_hung_task_detector+0x30/0x30 [ 597.722818][ T22] kthread+0x318/0x420 [ 597.726873][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 597.732243][ T22] ret_from_fork+0x24/0x30 [ 597.736977][ T22] Kernel Offset: disabled [ 597.741435][ T22] Rebooting in 86400 seconds..