[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.824740][ T27] audit: type=1800 audit(1583186607.165:25): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 70.847889][ T27] audit: type=1800 audit(1583186607.165:26): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.898438][ T27] audit: type=1800 audit(1583186607.165:27): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 393.777656][ T1097] INFO: task syz-executor376:9992 blocked for more than 143 seconds. [ 393.777677][ T1097] Not tainted 5.6.0-rc3-syzkaller #0 [ 393.777684][ T1097] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.777691][ T1097] syz-executor376 D28056 9992 9988 0x20020004 [ 393.777717][ T1097] Call Trace: [ 393.777890][ T1097] __schedule+0x934/0x1f90 [ 393.777926][ T1097] ? firmware_map_remove+0x1a3/0x1a3 [ 393.777971][ T1097] ? lock_downgrade+0x920/0x920 [ 393.777990][ T1097] ? rwlock_bug.part.0+0x90/0x90 [ 393.778018][ T1097] schedule+0xdc/0x2b0 [ 393.778040][ T1097] schedule_preempt_disabled+0x13/0x20 [ 393.778055][ T1097] __mutex_lock+0x7ab/0x13c0 [ 393.778101][ T1097] ? fb_open+0xd7/0x450 [ 393.778126][ T1097] ? mutex_trylock+0x2d0/0x2d0 [ 393.778190][ T1097] ? __kasan_check_write+0x14/0x20 [ 393.778206][ T1097] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.778243][ T1097] ? chrdev_open+0xca/0x6b0 [ 393.778289][ T1097] mutex_lock_nested+0x16/0x20 [ 393.778304][ T1097] ? mutex_lock_nested+0x16/0x20 [ 393.778318][ T1097] fb_open+0xd7/0x450 [ 393.778340][ T1097] ? get_fb_info.part.0+0x80/0x80 [ 393.778355][ T1097] chrdev_open+0x245/0x6b0 [ 393.778378][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.778457][ T1097] ? security_file_open+0x87/0x300 [ 393.778501][ T1097] do_dentry_open+0x4e6/0x1380 [ 393.778519][ T1097] ? __kasan_check_read+0x11/0x20 [ 393.778538][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.778564][ T1097] ? chown_common+0x5c0/0x5c0 [ 393.778602][ T1097] ? inode_permission+0xb4/0x520 [ 393.778630][ T1097] vfs_open+0xa0/0xd0 [ 393.778649][ T1097] path_openat+0x12ee/0x3490 [ 393.778693][ T1097] ? path_mountpoint.isra.0+0x370/0x370 [ 393.778706][ T1097] ? __lock_acquire+0x16f2/0x4a00 [ 393.778758][ T1097] ? __alloc_fd+0x487/0x620 [ 393.778785][ T1097] do_filp_open+0x192/0x260 [ 393.778805][ T1097] ? may_open_dev+0x100/0x100 [ 393.778848][ T1097] ? do_raw_spin_unlock+0x181/0x270 [ 393.778866][ T1097] ? _raw_spin_unlock+0x28/0x40 [ 393.778881][ T1097] ? __alloc_fd+0x487/0x620 [ 393.778929][ T1097] do_sys_openat2+0x5eb/0x7e0 [ 393.778961][ T1097] ? file_open_root+0x430/0x430 [ 393.779022][ T1097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.779057][ T1097] ? debug_smp_processor_id+0x33/0x18a [ 393.779114][ T1097] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 393.779145][ T1097] do_sys_open+0xf2/0x180 [ 393.779166][ T1097] ? filp_open+0x80/0x80 [ 393.779200][ T1097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 393.779242][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.779265][ T1097] ? entry_SYSENTER_compat+0x70/0x7f [ 393.779285][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.779312][ T1097] __ia32_compat_sys_openat+0x98/0xf0 [ 393.779336][ T1097] do_fast_syscall_32+0x27b/0xe16 [ 393.779364][ T1097] entry_SYSENTER_compat+0x70/0x7f [ 393.779377][ T1097] RIP: 0023:0xf7f6ee39 [ 393.779476][ T1097] Code: Bad RIP value. [ 393.779489][ T1097] RSP: 002b:00000000ffa9720c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 393.779505][ T1097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 393.779515][ T1097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 393.779524][ T1097] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 393.779533][ T1097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.779542][ T1097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.779588][ T1097] INFO: task syz-executor376:9993 blocked for more than 143 seconds. [ 393.779597][ T1097] Not tainted 5.6.0-rc3-syzkaller #0 [ 393.779603][ T1097] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.779610][ T1097] syz-executor376 D28056 9993 9991 0x20020004 [ 393.779632][ T1097] Call Trace: [ 393.779659][ T1097] __schedule+0x934/0x1f90 [ 393.779688][ T1097] ? firmware_map_remove+0x1a3/0x1a3 [ 393.779703][ T1097] ? lock_downgrade+0x920/0x920 [ 393.779720][ T1097] ? rwlock_bug.part.0+0x90/0x90 [ 393.779761][ T1097] schedule+0xdc/0x2b0 [ 393.779783][ T1097] schedule_preempt_disabled+0x13/0x20 [ 393.779798][ T1097] __mutex_lock+0x7ab/0x13c0 [ 393.779820][ T1097] ? fb_open+0xd7/0x450 [ 393.779846][ T1097] ? mutex_trylock+0x2d0/0x2d0 [ 393.779869][ T1097] ? __kasan_check_write+0x14/0x20 [ 393.779885][ T1097] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.779903][ T1097] ? chrdev_open+0xca/0x6b0 [ 393.779947][ T1097] mutex_lock_nested+0x16/0x20 [ 393.779963][ T1097] ? mutex_lock_nested+0x16/0x20 [ 393.779977][ T1097] fb_open+0xd7/0x450 [ 393.779999][ T1097] ? get_fb_info.part.0+0x80/0x80 [ 393.780016][ T1097] chrdev_open+0x245/0x6b0 [ 393.780040][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.780068][ T1097] ? security_file_open+0x87/0x300 [ 393.780093][ T1097] do_dentry_open+0x4e6/0x1380 [ 393.780109][ T1097] ? __kasan_check_read+0x11/0x20 [ 393.780128][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.780152][ T1097] ? chown_common+0x5c0/0x5c0 [ 393.780173][ T1097] ? inode_permission+0xb4/0x520 [ 393.780202][ T1097] vfs_open+0xa0/0xd0 [ 393.780222][ T1097] path_openat+0x12ee/0x3490 [ 393.780266][ T1097] ? path_mountpoint.isra.0+0x370/0x370 [ 393.780281][ T1097] ? __lock_acquire+0x16f2/0x4a00 [ 393.780313][ T1097] ? __alloc_fd+0x487/0x620 [ 393.780342][ T1097] do_filp_open+0x192/0x260 [ 393.780362][ T1097] ? may_open_dev+0x100/0x100 [ 393.780406][ T1097] ? do_raw_spin_unlock+0x181/0x270 [ 393.780429][ T1097] ? _raw_spin_unlock+0x28/0x40 [ 393.780447][ T1097] ? __alloc_fd+0x487/0x620 [ 393.780491][ T1097] do_sys_openat2+0x5eb/0x7e0 [ 393.780518][ T1097] ? file_open_root+0x430/0x430 [ 393.780543][ T1097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.780560][ T1097] ? debug_smp_processor_id+0x33/0x18a [ 393.780582][ T1097] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 393.780609][ T1097] do_sys_open+0xf2/0x180 [ 393.780629][ T1097] ? filp_open+0x80/0x80 [ 393.780655][ T1097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 393.780674][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.780691][ T1097] ? entry_SYSENTER_compat+0x70/0x7f [ 393.780707][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.780734][ T1097] __ia32_compat_sys_openat+0x98/0xf0 [ 393.780765][ T1097] do_fast_syscall_32+0x27b/0xe16 [ 393.780793][ T1097] entry_SYSENTER_compat+0x70/0x7f [ 393.780806][ T1097] RIP: 0023:0xf7f6ee39 [ 393.780823][ T1097] Code: Bad RIP value. [ 393.780832][ T1097] RSP: 002b:00000000ffa9720c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 393.780847][ T1097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 393.780856][ T1097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 393.780865][ T1097] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 393.780874][ T1097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.780883][ T1097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.780940][ T1097] INFO: task syz-executor376:9994 blocked for more than 143 seconds. [ 393.780950][ T1097] Not tainted 5.6.0-rc3-syzkaller #0 [ 393.780956][ T1097] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.780963][ T1097] syz-executor376 D28056 9994 9990 0x20020004 [ 393.780986][ T1097] Call Trace: [ 393.781010][ T1097] __schedule+0x934/0x1f90 [ 393.781038][ T1097] ? firmware_map_remove+0x1a3/0x1a3 [ 393.781052][ T1097] ? lock_downgrade+0x920/0x920 [ 393.781071][ T1097] ? rwlock_bug.part.0+0x90/0x90 [ 393.781099][ T1097] schedule+0xdc/0x2b0 [ 393.781121][ T1097] schedule_preempt_disabled+0x13/0x20 [ 393.781137][ T1097] __mutex_lock+0x7ab/0x13c0 [ 393.781158][ T1097] ? fb_open+0xd7/0x450 [ 393.781183][ T1097] ? mutex_trylock+0x2d0/0x2d0 [ 393.781204][ T1097] ? __kasan_check_write+0x14/0x20 [ 393.781221][ T1097] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.781239][ T1097] ? chrdev_open+0xca/0x6b0 [ 393.781283][ T1097] mutex_lock_nested+0x16/0x20 [ 393.781299][ T1097] ? mutex_lock_nested+0x16/0x20 [ 393.781314][ T1097] fb_open+0xd7/0x450 [ 393.781336][ T1097] ? get_fb_info.part.0+0x80/0x80 [ 393.781352][ T1097] chrdev_open+0x245/0x6b0 [ 393.781376][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.781403][ T1097] ? security_file_open+0x87/0x300 [ 393.781428][ T1097] do_dentry_open+0x4e6/0x1380 [ 393.781443][ T1097] ? __kasan_check_read+0x11/0x20 [ 393.781462][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.781488][ T1097] ? chown_common+0x5c0/0x5c0 [ 393.781508][ T1097] ? inode_permission+0xb4/0x520 [ 393.781537][ T1097] vfs_open+0xa0/0xd0 [ 393.781556][ T1097] path_openat+0x12ee/0x3490 [ 393.781601][ T1097] ? path_mountpoint.isra.0+0x370/0x370 [ 393.781616][ T1097] ? __lock_acquire+0x16f2/0x4a00 [ 393.781649][ T1097] ? __alloc_fd+0x487/0x620 [ 393.781676][ T1097] do_filp_open+0x192/0x260 [ 393.781697][ T1097] ? may_open_dev+0x100/0x100 [ 393.781748][ T1097] ? do_raw_spin_unlock+0x181/0x270 [ 393.781769][ T1097] ? _raw_spin_unlock+0x28/0x40 [ 393.781787][ T1097] ? __alloc_fd+0x487/0x620 [ 393.781830][ T1097] do_sys_openat2+0x5eb/0x7e0 [ 393.781856][ T1097] ? file_open_root+0x430/0x430 [ 393.781880][ T1097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.781896][ T1097] ? debug_smp_processor_id+0x33/0x18a [ 393.781917][ T1097] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 393.781943][ T1097] do_sys_open+0xf2/0x180 [ 393.781964][ T1097] ? filp_open+0x80/0x80 [ 393.781990][ T1097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 393.782008][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.782024][ T1097] ? entry_SYSENTER_compat+0x70/0x7f [ 393.782040][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.782068][ T1097] __ia32_compat_sys_openat+0x98/0xf0 [ 393.782092][ T1097] do_fast_syscall_32+0x27b/0xe16 [ 393.782120][ T1097] entry_SYSENTER_compat+0x70/0x7f [ 393.782131][ T1097] RIP: 0023:0xf7f6ee39 [ 393.782149][ T1097] Code: Bad RIP value. [ 393.782157][ T1097] RSP: 002b:00000000ffa9720c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 393.782172][ T1097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 393.782181][ T1097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 393.782190][ T1097] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 393.782199][ T1097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.782207][ T1097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.782248][ T1097] INFO: task syz-executor376:9995 blocked for more than 143 seconds. [ 393.782257][ T1097] Not tainted 5.6.0-rc3-syzkaller #0 [ 393.782263][ T1097] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.782270][ T1097] syz-executor376 D28040 9995 9986 0x20024004 [ 393.782294][ T1097] Call Trace: [ 393.782317][ T1097] __schedule+0x934/0x1f90 [ 393.782346][ T1097] ? firmware_map_remove+0x1a3/0x1a3 [ 393.782360][ T1097] ? lock_downgrade+0x920/0x920 [ 393.782378][ T1097] ? rwlock_bug.part.0+0x90/0x90 [ 393.782407][ T1097] schedule+0xdc/0x2b0 [ 393.782429][ T1097] schedule_preempt_disabled+0x13/0x20 [ 393.782444][ T1097] __mutex_lock+0x7ab/0x13c0 [ 393.782465][ T1097] ? fb_open+0xd7/0x450 [ 393.782490][ T1097] ? mutex_trylock+0x2d0/0x2d0 [ 393.782512][ T1097] ? __kasan_check_write+0x14/0x20 [ 393.782528][ T1097] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.782545][ T1097] ? chrdev_open+0xca/0x6b0 [ 393.782591][ T1097] mutex_lock_nested+0x16/0x20 [ 393.782606][ T1097] ? mutex_lock_nested+0x16/0x20 [ 393.782621][ T1097] fb_open+0xd7/0x450 [ 393.782642][ T1097] ? get_fb_info.part.0+0x80/0x80 [ 393.782658][ T1097] chrdev_open+0x245/0x6b0 [ 393.782682][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.782709][ T1097] ? security_file_open+0x87/0x300 [ 393.782734][ T1097] do_dentry_open+0x4e6/0x1380 [ 393.782753][ T1097] ? __kasan_check_read+0x11/0x20 [ 393.782772][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.782798][ T1097] ? chown_common+0x5c0/0x5c0 [ 393.782817][ T1097] ? inode_permission+0xb4/0x520 [ 393.782846][ T1097] vfs_open+0xa0/0xd0 [ 393.782866][ T1097] path_openat+0x12ee/0x3490 [ 393.782910][ T1097] ? path_mountpoint.isra.0+0x370/0x370 [ 393.782924][ T1097] ? __lock_acquire+0x16f2/0x4a00 [ 393.782957][ T1097] ? __alloc_fd+0x487/0x620 [ 393.782984][ T1097] do_filp_open+0x192/0x260 [ 393.783005][ T1097] ? may_open_dev+0x100/0x100 [ 393.783047][ T1097] ? do_raw_spin_unlock+0x181/0x270 [ 393.783068][ T1097] ? _raw_spin_unlock+0x28/0x40 [ 393.783085][ T1097] ? __alloc_fd+0x487/0x620 [ 393.783129][ T1097] do_sys_openat2+0x5eb/0x7e0 [ 393.783154][ T1097] ? file_open_root+0x430/0x430 [ 393.783178][ T1097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.783193][ T1097] ? debug_smp_processor_id+0x33/0x18a [ 393.783215][ T1097] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 393.783240][ T1097] do_sys_open+0xf2/0x180 [ 393.783260][ T1097] ? filp_open+0x80/0x80 [ 393.783285][ T1097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 393.783303][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.783319][ T1097] ? entry_SYSENTER_compat+0x70/0x7f [ 393.783335][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.783363][ T1097] __ia32_compat_sys_openat+0x98/0xf0 [ 393.783386][ T1097] do_fast_syscall_32+0x27b/0xe16 [ 393.783414][ T1097] entry_SYSENTER_compat+0x70/0x7f [ 393.783425][ T1097] RIP: 0023:0xf7f6ee39 [ 393.783440][ T1097] Code: Bad RIP value. [ 393.783449][ T1097] RSP: 002b:00000000ffa9720c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 393.783463][ T1097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 393.783472][ T1097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 393.783481][ T1097] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 393.783490][ T1097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.783499][ T1097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.783541][ T1097] INFO: task syz-executor376:9996 blocked for more than 143 seconds. [ 393.783550][ T1097] Not tainted 5.6.0-rc3-syzkaller #0 [ 393.783556][ T1097] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.783562][ T1097] syz-executor376 D28056 9996 9989 0x20020004 [ 393.783585][ T1097] Call Trace: [ 393.783607][ T1097] __schedule+0x934/0x1f90 [ 393.783636][ T1097] ? firmware_map_remove+0x1a3/0x1a3 [ 393.783649][ T1097] ? lock_downgrade+0x920/0x920 [ 393.783668][ T1097] ? rwlock_bug.part.0+0x90/0x90 [ 393.783696][ T1097] schedule+0xdc/0x2b0 [ 393.783718][ T1097] schedule_preempt_disabled+0x13/0x20 [ 393.783733][ T1097] __mutex_lock+0x7ab/0x13c0 [ 393.783759][ T1097] ? fb_open+0xd7/0x450 [ 393.783784][ T1097] ? mutex_trylock+0x2d0/0x2d0 [ 393.783805][ T1097] ? __kasan_check_write+0x14/0x20 [ 393.783821][ T1097] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.783839][ T1097] ? chrdev_open+0xca/0x6b0 [ 393.783884][ T1097] mutex_lock_nested+0x16/0x20 [ 393.783899][ T1097] ? mutex_lock_nested+0x16/0x20 [ 393.783914][ T1097] fb_open+0xd7/0x450 [ 393.783935][ T1097] ? get_fb_info.part.0+0x80/0x80 [ 393.783957][ T1097] chrdev_open+0x245/0x6b0 [ 393.783981][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.784008][ T1097] ? security_file_open+0x87/0x300 [ 393.784032][ T1097] do_dentry_open+0x4e6/0x1380 [ 393.784047][ T1097] ? __kasan_check_read+0x11/0x20 [ 393.784066][ T1097] ? cdev_put.part.0+0x50/0x50 [ 393.784090][ T1097] ? chown_common+0x5c0/0x5c0 [ 393.784109][ T1097] ? inode_permission+0xb4/0x520 [ 393.784137][ T1097] vfs_open+0xa0/0xd0 [ 393.784156][ T1097] path_openat+0x12ee/0x3490 [ 393.784200][ T1097] ? path_mountpoint.isra.0+0x370/0x370 [ 393.784214][ T1097] ? __lock_acquire+0x16f2/0x4a00 [ 393.784245][ T1097] ? __alloc_fd+0x487/0x620 [ 393.784272][ T1097] do_filp_open+0x192/0x260 [ 393.784291][ T1097] ? may_open_dev+0x100/0x100 [ 393.784334][ T1097] ? do_raw_spin_unlock+0x181/0x270 [ 393.784354][ T1097] ? _raw_spin_unlock+0x28/0x40 [ 393.784373][ T1097] ? __alloc_fd+0x487/0x620 [ 393.784415][ T1097] do_sys_openat2+0x5eb/0x7e0 [ 393.784441][ T1097] ? file_open_root+0x430/0x430 [ 393.784464][ T1097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.784479][ T1097] ? debug_smp_processor_id+0x33/0x18a [ 393.784500][ T1097] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 393.784526][ T1097] do_sys_open+0xf2/0x180 [ 393.784546][ T1097] ? filp_open+0x80/0x80 [ 393.784571][ T1097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 393.784589][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.784605][ T1097] ? entry_SYSENTER_compat+0x70/0x7f [ 393.784620][ T1097] ? do_fast_syscall_32+0xd1/0xe16 [ 393.784648][ T1097] __ia32_compat_sys_openat+0x98/0xf0 [ 393.784671][ T1097] do_fast_syscall_32+0x27b/0xe16 [ 393.784699][ T1097] entry_SYSENTER_compat+0x70/0x7f [ 393.784709][ T1097] RIP: 0023:0xf7f6ee39 [ 393.784726][ T1097] Code: Bad RIP value. [ 393.784734][ T1097] RSP: 002b:00000000ffa9720c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 393.784752][ T1097] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 393.784762][ T1097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 393.784771][ T1097] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 393.784780][ T1097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.784789][ T1097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.784826][ T1097] [ 393.784826][ T1097] Showing all locks held in the system: [ 393.784841][ T1097] 1 lock held by khungtaskd/1097: [ 393.784846][ T1097] #0: ffffffff89bac340 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 393.784913][ T1097] 1 lock held by rsyslogd/9868: [ 393.784918][ T1097] #0: ffff8880910b4b20 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 393.784952][ T1097] 2 locks held by getty/9958: [ 393.784957][ T1097] #0: ffff8880a06dd090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.784985][ T1097] #1: ffffc9000599b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785113][ T1097] 2 locks held by getty/9959: [ 393.785118][ T1097] #0: ffff888098822090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.785146][ T1097] #1: ffffc900059ab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785178][ T1097] 2 locks held by getty/9960: [ 393.785183][ T1097] #0: ffff8880a8241090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.785211][ T1097] #1: ffffc900059bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785243][ T1097] 2 locks held by getty/9961: [ 393.785247][ T1097] #0: ffff888097e97090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.785275][ T1097] #1: ffffc900059db2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785307][ T1097] 2 locks held by getty/9962: [ 393.785312][ T1097] #0: ffff8880a6606090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.785339][ T1097] #1: ffffc9000593b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785371][ T1097] 2 locks held by getty/9963: [ 393.785377][ T1097] #0: ffff8880a33ca090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.785403][ T1097] #1: ffffc900059cb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785436][ T1097] 2 locks held by getty/9964: [ 393.785441][ T1097] #0: ffff8880a5021090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 393.785469][ T1097] #1: ffffc9000591b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 393.785503][ T1097] 2 locks held by syz-executor376/9987: [ 393.785513][ T1097] 1 lock held by syz-executor376/9992: [ 393.785518][ T1097] #0: ffff8882197a8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 393.785550][ T1097] 1 lock held by syz-executor376/9993: [ 393.785555][ T1097] #0: ffff8882197a8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 393.785586][ T1097] 1 lock held by syz-executor376/9994: [ 393.785591][ T1097] #0: ffff8882197a8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 393.785622][ T1097] 1 lock held by syz-executor376/9995: [ 393.785627][ T1097] #0: ffff8882197a8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 393.785658][ T1097] 1 lock held by syz-executor376/9996: [ 393.785663][ T1097] #0: ffff8882197a8070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 393.785689][ T1097] [ 393.785694][ T1097] ============================================= [ 393.785694][ T1097] [ 393.785702][ T1097] NMI backtrace for cpu 1 [ 393.785717][ T1097] CPU: 1 PID: 1097 Comm: khungtaskd Not tainted 5.6.0-rc3-syzkaller #0 [ 393.785726][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.785730][ T1097] Call Trace: [ 393.785797][ T1097] dump_stack+0x197/0x210 [ 393.785823][ T1097] nmi_cpu_backtrace.cold+0x70/0xb2 [ 393.785861][ T1097] ? vprintk_func+0x86/0x189 [ 393.785920][ T1097] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 393.785938][ T1097] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 393.785963][ T1097] arch_trigger_cpumask_backtrace+0x14/0x20 [ 393.785979][ T1097] watchdog+0xb11/0x10c0 [ 393.786037][ T1097] kthread+0x361/0x430 [ 393.786055][ T1097] ? reset_hung_task_detector+0x30/0x30 [ 393.786068][ T1097] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 393.786089][ T1097] ret_from_fork+0x24/0x30 [ 393.786127][ T1097] Sending NMI from CPU 1 to CPUs 0: [ 393.786885][ C0] NMI backtrace for cpu 0 [ 393.786891][ C0] CPU: 0 PID: 9987 Comm: syz-executor376 Not tainted 5.6.0-rc3-syzkaller #0 [ 393.786897][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.786901][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 393.786913][ C0] Code: ff ff 5d c3 66 0f 1f 44 00 00 55 89 f2 89 fe bf 05 00 00 00 48 89 e5 48 8b 4d 08 e8 ba fe ff ff 5d c3 0f 1f 84 00 00 00 00 00 <55> 48 89 f2 48 89 fe bf 07 00 00 00 48 89 e5 48 8b 4d 08 e8 98 fe [ 393.786917][ C0] RSP: 0018:ffffc9000649f390 EFLAGS: 00000246 [ 393.786924][ C0] RAX: ffff88809efb6040 RBX: 0000000000000000 RCX: ffffffff83c83870 [ 393.786929][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.786934][ C0] RBP: ffffc9000649f3d8 R08: ffff88809efb6040 R09: 0000000000000040 [ 393.786939][ C0] R10: ffffed10432f520b R11: ffff8882197a905f R12: 0000000000000000 [ 393.786944][ C0] R13: 0000000000000000 R14: ffff8880000a0280 R15: 0000000000000000 [ 393.786949][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0063) knlGS:0000000009a83840 [ 393.786953][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 393.786958][ C0] CR2: 0000000009a8c0f4 CR3: 000000009eeec000 CR4: 00000000001406f0 [ 393.786963][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 393.786968][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 393.786971][ C0] Call Trace: [ 393.786974][ C0] ? bitfill_aligned+0x1b6/0x210 [ 393.786977][ C0] cfb_fillrect+0x423/0x7c0 [ 393.786980][ C0] ? cfb_fillrect+0x7c0/0x7c0 [ 393.786984][ C0] vga16fb_fillrect+0x6ce/0x19b0 [ 393.786987][ C0] bit_clear_margins+0x30b/0x530 [ 393.786990][ C0] ? bit_bmove+0x270/0x270 [ 393.786993][ C0] ? vesafb_probe.cold+0x1279/0x1279 [ 393.786997][ C0] fbcon_clear_margins+0x1e9/0x250 [ 393.787000][ C0] fbcon_switch+0xd7f/0x17f0 [ 393.787004][ C0] ? fbcon_set_def_font+0x360/0x360 [ 393.787007][ C0] ? fbcon_cursor+0x48c/0x660 [ 393.787011][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.787014][ C0] ? fbcon_set_origin+0x2b/0x50 [ 393.787018][ C0] ? fbcon_scrolldelta+0x1220/0x1220 [ 393.787022][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.787025][ C0] redraw_screen+0x2b6/0x7d0 [ 393.787028][ C0] ? vesafb_probe.cold+0x1279/0x1279 [ 393.787032][ C0] ? respond_string+0x2c0/0x2c0 [ 393.787035][ C0] ? fbcon_set_palette+0x3c4/0x4a0 [ 393.787038][ C0] fbcon_modechanged+0x5c3/0x790 [ 393.787041][ C0] fbcon_update_vcs+0x42/0x50 [ 393.787044][ C0] fb_set_var+0xb32/0xdd0 [ 393.787047][ C0] ? fb_blank+0x1a0/0x1a0 [ 393.787051][ C0] ? ___preempt_schedule+0x16/0x18 [ 393.787054][ C0] ? __mutex_lock+0xf73/0x13c0 [ 393.787057][ C0] ? down+0x50/0x90 [ 393.787060][ C0] ? do_fb_ioctl+0x335/0x7d0 [ 393.787063][ C0] do_fb_ioctl+0x390/0x7d0 [ 393.787066][ C0] ? fb_mmap+0x560/0x560 [ 393.787070][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 393.787073][ C0] ? tomoyo_path_number_perm+0x454/0x520 [ 393.787077][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 393.787081][ C0] ? tomoyo_path_number_perm+0x25e/0x520 [ 393.787085][ C0] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 393.787088][ C0] ? putname+0xef/0x130 [ 393.787091][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 393.787095][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 393.787098][ C0] ? do_vfs_ioctl+0x568/0x13b0 [ 393.787102][ C0] fb_compat_ioctl+0x305/0xc50 [ 393.787105][ C0] ? fb_release+0x150/0x150 [ 393.787108][ C0] ? do_sys_open+0xf2/0x180 [ 393.787111][ C0] ? tomoyo_file_ioctl+0x23/0x30 [ 393.787115][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.787118][ C0] ? fb_release+0x150/0x150 [ 393.787122][ C0] __ia32_compat_sys_ioctl+0x245/0x2c0 [ 393.787125][ C0] do_fast_syscall_32+0x27b/0xe16 [ 393.787128][ C0] entry_SYSENTER_compat+0x70/0x7f [ 393.787131][ C0] RIP: 0023:0xf7f6ee39 [ 393.787142][ C0] Code: 1d 00 00 00 89 d3 5b 5e 5d c3 8b 04 24 c3 8b 1c 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 393.787145][ C0] RSP: 002b:00000000ffa9721c EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.787152][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 393.787156][ C0] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 00000000ffa97334 [ 393.787160][ C0] RBP: 00000000ffa9733c R08: 0000000000000000 R09: 0000000000000000 [ 393.787164][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 393.787168][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.787179][ T1097] Kernel panic - not syncing: hung_task: blocked tasks [ 393.787191][ T1097] CPU: 1 PID: 1097 Comm: khungtaskd Not tainted 5.6.0-rc3-syzkaller #0 [ 393.787198][ T1097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.787202][ T1097] Call Trace: [ 393.787216][ T1097] dump_stack+0x197/0x210 [ 393.787273][ T1097] panic+0x2e3/0x75c [ 393.787292][ T1097] ? add_taint.cold+0x16/0x16 [ 393.787311][ T1097] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 393.787334][ T1097] ? printk_safe_flush+0xf2/0x140 [ 393.787347][ T1097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.787365][ T1097] ? nmi_trigger_cpumask_backtrace+0x224/0x28b [ 393.787379][ T1097] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 393.787400][ T1097] watchdog+0xb22/0x10c0 [ 393.787436][ T1097] kthread+0x361/0x430 [ 393.787453][ T1097] ? reset_hung_task_detector+0x30/0x30 [ 393.787468][ T1097] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 393.787486][ T1097] ret_from_fork+0x24/0x30 [ 393.789012][ T1097] Kernel Offset: disabled [ 396.438715][ T1097] Rebooting in 86400 seconds..