[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.646972][ T27] audit: type=1800 audit(1579939617.949:25): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.667152][ T27] audit: type=1800 audit(1579939617.949:26): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 82.688964][ T27] audit: type=1800 audit(1579939617.949:27): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 548.680162][ T1129] INFO: task syz-executor760:9568 blocked for more than 143 seconds. [ 548.680184][ T1129] Not tainted 5.5.0-rc7-syzkaller #0 [ 548.680190][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.680198][ T1129] syz-executor760 D28296 9568 9567 0x00000004 [ 548.680298][ T1129] Call Trace: [ 548.680354][ T1129] __schedule+0x934/0x1f90 [ 548.680380][ T1129] ? __sched_text_start+0x8/0x8 [ 548.680422][ T1129] ? lock_downgrade+0x920/0x920 [ 548.680440][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 548.680464][ T1129] schedule+0xdc/0x2b0 [ 548.680485][ T1129] schedule_preempt_disabled+0x13/0x20 [ 548.680522][ T1129] __mutex_lock+0x7ab/0x13c0 [ 548.680571][ T1129] ? fb_open+0xd7/0x450 [ 548.680590][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 548.680627][ T1129] ? __kasan_check_write+0x14/0x20 [ 548.680646][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 548.680679][ T1129] ? chrdev_open+0xca/0x6b0 [ 548.680709][ T1129] mutex_lock_nested+0x16/0x20 [ 548.680723][ T1129] ? mutex_lock_nested+0x16/0x20 [ 548.680738][ T1129] fb_open+0xd7/0x450 [ 548.680764][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 548.680777][ T1129] chrdev_open+0x245/0x6b0 [ 548.680795][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.680836][ T1129] ? security_file_open+0x87/0x300 [ 548.680876][ T1129] do_dentry_open+0x4e6/0x1380 [ 548.680890][ T1129] ? __kasan_check_read+0x11/0x20 [ 548.680905][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.680928][ T1129] ? chown_common+0x5c0/0x5c0 [ 548.680971][ T1129] ? inode_permission+0xb4/0x520 [ 548.680991][ T1129] vfs_open+0xa0/0xd0 [ 548.681010][ T1129] path_openat+0x118b/0x3180 [ 548.681042][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 548.681055][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 548.681089][ T1129] ? __alloc_fd+0x487/0x620 [ 548.681112][ T1129] do_filp_open+0x1a1/0x280 [ 548.681132][ T1129] ? may_open_dev+0x100/0x100 [ 548.681162][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 548.681196][ T1129] do_sys_open+0x3fe/0x5d0 [ 548.681214][ T1129] ? filp_open+0x80/0x80 [ 548.681239][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.681256][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.681273][ T1129] ? do_syscall_64+0x26/0x790 [ 548.681289][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.681306][ T1129] ? do_syscall_64+0x26/0x790 [ 548.681325][ T1129] __x64_sys_openat+0x9d/0x100 [ 548.681345][ T1129] do_syscall_64+0xfa/0x790 [ 548.681368][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.681380][ T1129] RIP: 0033:0x441419 [ 548.681444][ T1129] Code: Bad RIP value. [ 548.681453][ T1129] RSP: 002b:00007ffd7b6905c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.681467][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 548.681477][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 548.681487][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 548.681496][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 548.681505][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 548.681534][ T1129] INFO: task syz-executor760:9569 blocked for more than 143 seconds. [ 548.681543][ T1129] Not tainted 5.5.0-rc7-syzkaller #0 [ 548.681549][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.681556][ T1129] syz-executor760 D28296 9569 9564 0x00000004 [ 548.681578][ T1129] Call Trace: [ 548.681599][ T1129] __schedule+0x934/0x1f90 [ 548.681623][ T1129] ? __sched_text_start+0x8/0x8 [ 548.681637][ T1129] ? lock_downgrade+0x920/0x920 [ 548.681653][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 548.681677][ T1129] schedule+0xdc/0x2b0 [ 548.681698][ T1129] schedule_preempt_disabled+0x13/0x20 [ 548.681712][ T1129] __mutex_lock+0x7ab/0x13c0 [ 548.681731][ T1129] ? fb_open+0xd7/0x450 [ 548.681755][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 548.681772][ T1129] ? __kasan_check_write+0x14/0x20 [ 548.681790][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 548.681803][ T1129] ? chrdev_open+0xca/0x6b0 [ 548.681833][ T1129] mutex_lock_nested+0x16/0x20 [ 548.681847][ T1129] ? mutex_lock_nested+0x16/0x20 [ 548.681863][ T1129] fb_open+0xd7/0x450 [ 548.681883][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 548.681895][ T1129] chrdev_open+0x245/0x6b0 [ 548.681913][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.681933][ T1129] ? security_file_open+0x87/0x300 [ 548.681954][ T1129] do_dentry_open+0x4e6/0x1380 [ 548.681968][ T1129] ? __kasan_check_read+0x11/0x20 [ 548.681983][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.682005][ T1129] ? chown_common+0x5c0/0x5c0 [ 548.682024][ T1129] ? inode_permission+0xb4/0x520 [ 548.682044][ T1129] vfs_open+0xa0/0xd0 [ 548.682062][ T1129] path_openat+0x118b/0x3180 [ 548.682094][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 548.682107][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 548.682130][ T1129] ? __alloc_fd+0x487/0x620 [ 548.682153][ T1129] do_filp_open+0x1a1/0x280 [ 548.682173][ T1129] ? may_open_dev+0x100/0x100 [ 548.682203][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 548.682238][ T1129] do_sys_open+0x3fe/0x5d0 [ 548.682256][ T1129] ? filp_open+0x80/0x80 [ 548.682275][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.682293][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.682310][ T1129] ? do_syscall_64+0x26/0x790 [ 548.682326][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.682342][ T1129] ? do_syscall_64+0x26/0x790 [ 548.682362][ T1129] __x64_sys_openat+0x9d/0x100 [ 548.682381][ T1129] do_syscall_64+0xfa/0x790 [ 548.682402][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.682412][ T1129] RIP: 0033:0x441419 [ 548.682428][ T1129] Code: Bad RIP value. [ 548.682436][ T1129] RSP: 002b:00007ffd7b6905c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.682450][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 548.682460][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 548.682469][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 548.682479][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 548.682488][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 548.682515][ T1129] INFO: task syz-executor760:9570 blocked for more than 143 seconds. [ 548.682524][ T1129] Not tainted 5.5.0-rc7-syzkaller #0 [ 548.682530][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.682536][ T1129] syz-executor760 D28296 9570 9566 0x00000004 [ 548.682557][ T1129] Call Trace: [ 548.682578][ T1129] __schedule+0x934/0x1f90 [ 548.682602][ T1129] ? __sched_text_start+0x8/0x8 [ 548.682615][ T1129] ? lock_downgrade+0x920/0x920 [ 548.682632][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 548.682655][ T1129] schedule+0xdc/0x2b0 [ 548.682677][ T1129] schedule_preempt_disabled+0x13/0x20 [ 548.682690][ T1129] __mutex_lock+0x7ab/0x13c0 [ 548.682709][ T1129] ? fb_open+0xd7/0x450 [ 548.682727][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 548.682749][ T1129] ? __kasan_check_write+0x14/0x20 [ 548.682767][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 548.682781][ T1129] ? chrdev_open+0xca/0x6b0 [ 548.682811][ T1129] mutex_lock_nested+0x16/0x20 [ 548.682825][ T1129] ? mutex_lock_nested+0x16/0x20 [ 548.682840][ T1129] fb_open+0xd7/0x450 [ 548.682860][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 548.682873][ T1129] chrdev_open+0x245/0x6b0 [ 548.682891][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.682917][ T1129] ? security_file_open+0x87/0x300 [ 548.682940][ T1129] do_dentry_open+0x4e6/0x1380 [ 548.682953][ T1129] ? __kasan_check_read+0x11/0x20 [ 548.682975][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.683001][ T1129] ? chown_common+0x5c0/0x5c0 [ 548.683019][ T1129] ? inode_permission+0xb4/0x520 [ 548.683044][ T1129] vfs_open+0xa0/0xd0 [ 548.683062][ T1129] path_openat+0x118b/0x3180 [ 548.683094][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 548.683108][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 548.683134][ T1129] ? __alloc_fd+0x487/0x620 [ 548.683158][ T1129] do_filp_open+0x1a1/0x280 [ 548.683177][ T1129] ? may_open_dev+0x100/0x100 [ 548.683207][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 548.683242][ T1129] do_sys_open+0x3fe/0x5d0 [ 548.683259][ T1129] ? filp_open+0x80/0x80 [ 548.683279][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.683296][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.683313][ T1129] ? do_syscall_64+0x26/0x790 [ 548.683329][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.683345][ T1129] ? do_syscall_64+0x26/0x790 [ 548.683365][ T1129] __x64_sys_openat+0x9d/0x100 [ 548.683385][ T1129] do_syscall_64+0xfa/0x790 [ 548.683405][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.683415][ T1129] RIP: 0033:0x441419 [ 548.683431][ T1129] Code: Bad RIP value. [ 548.683440][ T1129] RSP: 002b:00007ffd7b6905c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.683454][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 548.683464][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 548.683473][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 548.683482][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 548.683492][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 548.683519][ T1129] INFO: task syz-executor760:9571 blocked for more than 143 seconds. [ 548.683528][ T1129] Not tainted 5.5.0-rc7-syzkaller #0 [ 548.683534][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.683540][ T1129] syz-executor760 D28008 9571 9562 0x00000004 [ 548.683561][ T1129] Call Trace: [ 548.683582][ T1129] __schedule+0x934/0x1f90 [ 548.683607][ T1129] ? __sched_text_start+0x8/0x8 [ 548.683619][ T1129] ? lock_downgrade+0x920/0x920 [ 548.683636][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 548.683660][ T1129] schedule+0xdc/0x2b0 [ 548.683681][ T1129] schedule_preempt_disabled+0x13/0x20 [ 548.683694][ T1129] __mutex_lock+0x7ab/0x13c0 [ 548.683713][ T1129] ? fb_open+0xd7/0x450 [ 548.683732][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 548.683753][ T1129] ? __kasan_check_write+0x14/0x20 [ 548.683771][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 548.683785][ T1129] ? chrdev_open+0xca/0x6b0 [ 548.683819][ T1129] mutex_lock_nested+0x16/0x20 [ 548.683837][ T1129] ? mutex_lock_nested+0x16/0x20 [ 548.683852][ T1129] fb_open+0xd7/0x450 [ 548.683872][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 548.683888][ T1129] chrdev_open+0x245/0x6b0 [ 548.683910][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.683930][ T1129] ? security_file_open+0x87/0x300 [ 548.683952][ T1129] do_dentry_open+0x4e6/0x1380 [ 548.683966][ T1129] ? __kasan_check_read+0x11/0x20 [ 548.683980][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.684003][ T1129] ? chown_common+0x5c0/0x5c0 [ 548.684022][ T1129] ? inode_permission+0xb4/0x520 [ 548.684043][ T1129] vfs_open+0xa0/0xd0 [ 548.684061][ T1129] path_openat+0x118b/0x3180 [ 548.684093][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 548.684106][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 548.684129][ T1129] ? __alloc_fd+0x487/0x620 [ 548.684152][ T1129] do_filp_open+0x1a1/0x280 [ 548.684172][ T1129] ? may_open_dev+0x100/0x100 [ 548.684202][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 548.684237][ T1129] do_sys_open+0x3fe/0x5d0 [ 548.684254][ T1129] ? filp_open+0x80/0x80 [ 548.684273][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.684291][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.684308][ T1129] ? do_syscall_64+0x26/0x790 [ 548.684324][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.684340][ T1129] ? do_syscall_64+0x26/0x790 [ 548.684359][ T1129] __x64_sys_openat+0x9d/0x100 [ 548.684379][ T1129] do_syscall_64+0xfa/0x790 [ 548.684399][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.684410][ T1129] RIP: 0033:0x441419 [ 548.684424][ T1129] Code: Bad RIP value. [ 548.684433][ T1129] RSP: 002b:00007ffd7b6905c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.684447][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 548.684456][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 548.684466][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 548.684475][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 548.684484][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 548.684512][ T1129] INFO: task syz-executor760:9572 blocked for more than 143 seconds. [ 548.684521][ T1129] Not tainted 5.5.0-rc7-syzkaller #0 [ 548.684527][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.684533][ T1129] syz-executor760 D28296 9572 9565 0x00000004 [ 548.684554][ T1129] Call Trace: [ 548.684575][ T1129] __schedule+0x934/0x1f90 [ 548.684600][ T1129] ? __sched_text_start+0x8/0x8 [ 548.684613][ T1129] ? lock_downgrade+0x920/0x920 [ 548.684634][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 548.684658][ T1129] schedule+0xdc/0x2b0 [ 548.684680][ T1129] schedule_preempt_disabled+0x13/0x20 [ 548.684693][ T1129] __mutex_lock+0x7ab/0x13c0 [ 548.684712][ T1129] ? fb_open+0xd7/0x450 [ 548.684734][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 548.684755][ T1129] ? __kasan_check_write+0x14/0x20 [ 548.684773][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 548.684787][ T1129] ? chrdev_open+0xca/0x6b0 [ 548.684821][ T1129] mutex_lock_nested+0x16/0x20 [ 548.684834][ T1129] ? mutex_lock_nested+0x16/0x20 [ 548.684850][ T1129] fb_open+0xd7/0x450 [ 548.684870][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 548.684882][ T1129] chrdev_open+0x245/0x6b0 [ 548.684904][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.684924][ T1129] ? security_file_open+0x87/0x300 [ 548.684946][ T1129] do_dentry_open+0x4e6/0x1380 [ 548.684959][ T1129] ? __kasan_check_read+0x11/0x20 [ 548.684974][ T1129] ? cdev_put.part.0+0x50/0x50 [ 548.684997][ T1129] ? chown_common+0x5c0/0x5c0 [ 548.685016][ T1129] ? inode_permission+0xb4/0x520 [ 548.685036][ T1129] vfs_open+0xa0/0xd0 [ 548.685054][ T1129] path_openat+0x118b/0x3180 [ 548.685086][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 548.685099][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 548.685122][ T1129] ? __alloc_fd+0x487/0x620 [ 548.685145][ T1129] do_filp_open+0x1a1/0x280 [ 548.685165][ T1129] ? may_open_dev+0x100/0x100 [ 548.685195][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 548.685230][ T1129] do_sys_open+0x3fe/0x5d0 [ 548.685247][ T1129] ? filp_open+0x80/0x80 [ 548.685267][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.685285][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 548.685302][ T1129] ? do_syscall_64+0x26/0x790 [ 548.685318][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.685333][ T1129] ? do_syscall_64+0x26/0x790 [ 548.685351][ T1129] __x64_sys_openat+0x9d/0x100 [ 548.685371][ T1129] do_syscall_64+0xfa/0x790 [ 548.685391][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.685401][ T1129] RIP: 0033:0x441419 [ 548.685416][ T1129] Code: Bad RIP value. [ 548.685425][ T1129] RSP: 002b:00007ffd7b6905c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.685439][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 548.685449][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 548.685458][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 548.685467][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 548.685476][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 548.685500][ T1129] [ 548.685500][ T1129] Showing all locks held in the system: [ 548.685514][ T1129] 1 lock held by khungtaskd/1129: [ 548.685519][ T1129] #0: ffffffff899a3dc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 548.685577][ T1129] 1 lock held by rsyslogd/9444: [ 548.685582][ T1129] #0: ffff88809f66b420 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 548.685615][ T1129] 2 locks held by getty/9534: [ 548.685620][ T1129] #0: ffff8880a21e2090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.685761][ T1129] #1: ffffc9000196b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.685866][ T1129] 2 locks held by getty/9535: [ 548.685871][ T1129] #0: ffff888091c1a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.685899][ T1129] #1: ffffc9000198b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.685934][ T1129] 2 locks held by getty/9536: [ 548.685939][ T1129] #0: ffff8880a29ad090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.685965][ T1129] #1: ffffc9000195b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.686000][ T1129] 2 locks held by getty/9537: [ 548.686005][ T1129] #0: ffff888095a68090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.686031][ T1129] #1: ffffc900019eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.686065][ T1129] 2 locks held by getty/9538: [ 548.686070][ T1129] #0: ffff8880a51c1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.686097][ T1129] #1: ffffc900019cb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.686131][ T1129] 2 locks held by getty/9539: [ 548.686136][ T1129] #0: ffff8880a8a39090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.686162][ T1129] #1: ffffc900019db2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.686196][ T1129] 2 locks held by getty/9540: [ 548.686201][ T1129] #0: ffff88808e736090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 548.686228][ T1129] #1: ffffc9000192b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 548.686263][ T1129] 2 locks held by syz-executor760/9563: [ 548.686274][ T1129] 1 lock held by syz-executor760/9568: [ 548.686279][ T1129] #0: ffff8880a3e90070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 548.686312][ T1129] 1 lock held by syz-executor760/9569: [ 548.686317][ T1129] #0: ffff8880a3e90070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 548.686349][ T1129] 1 lock held by syz-executor760/9570: [ 548.686353][ T1129] #0: ffff8880a3e90070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 548.686384][ T1129] 1 lock held by syz-executor760/9571: [ 548.686389][ T1129] #0: ffff8880a3e90070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 548.686422][ T1129] 1 lock held by syz-executor760/9572: [ 548.686427][ T1129] #0: ffff8880a3e90070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 548.686455][ T1129] [ 548.686461][ T1129] ============================================= [ 548.686461][ T1129] [ 548.686469][ T1129] NMI backtrace for cpu 0 [ 548.686485][ T1129] CPU: 0 PID: 1129 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 548.686520][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.686526][ T1129] Call Trace: [ 548.686588][ T1129] dump_stack+0x197/0x210 [ 548.686612][ T1129] nmi_cpu_backtrace.cold+0x70/0xb2 [ 548.686648][ T1129] ? vprintk_func+0x86/0x189 [ 548.686703][ T1129] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 548.686723][ T1129] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 548.686744][ T1129] arch_trigger_cpumask_backtrace+0x14/0x20 [ 548.686807][ T1129] watchdog+0xb11/0x10c0 [ 548.686856][ T1129] kthread+0x361/0x430 [ 548.686873][ T1129] ? reset_hung_task_detector+0x30/0x30 [ 548.686886][ T1129] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 548.686903][ T1129] ret_from_fork+0x24/0x30 [ 548.686928][ T1129] Sending NMI from CPU 0 to CPUs 1: [ 548.687735][ C1] NMI backtrace for cpu 1 [ 548.687742][ C1] CPU: 1 PID: 9563 Comm: syz-executor760 Not tainted 5.5.0-rc7-syzkaller #0 [ 548.687749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.687753][ C1] RIP: 0010:write_comp_data+0x9/0x70 [ 548.687765][ C1] Code: 13 00 00 8b 80 84 13 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 c0 1e 02 00 <65> 8b 05 c8 26 8d 7e a9 00 01 1f 00 75 51 41 8b 80 80 13 00 00 83 [ 548.687769][ C1] RSP: 0018:ffffc90001fe7390 EFLAGS: 00000286 [ 548.687778][ C1] RAX: ffff8880a3578240 RBX: 0000000000000050 RCX: ffffffff83c542c0 [ 548.687783][ C1] RDX: 0000000000000014 RSI: 0000000000000050 RDI: 0000000000000004 [ 548.687789][ C1] RBP: ffffc90001fe7398 R08: ffff8880a3578240 R09: ffffed10431a840c [ 548.687794][ C1] R10: ffffed10431a840b R11: ffff888218d4205f R12: 0000000000000014 [ 548.687800][ C1] R13: ffff8880000a0014 R14: ffff8880000a0000 R15: 0000000000000000 [ 548.687806][ C1] FS: 000000000085c880(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 548.687810][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.687816][ C1] CR2: ffffffffff600400 CR3: 00000000a89bd000 CR4: 00000000001406e0 [ 548.687821][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.687826][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.687829][ C1] Call Trace: [ 548.687833][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 548.687837][ C1] vga16fb_fillrect+0xa20/0x19b0 [ 548.687841][ C1] bit_clear_margins+0x30b/0x530 [ 548.687844][ C1] ? bit_bmove+0x270/0x270 [ 548.687848][ C1] ? efifb_probe.cold+0x181f/0x181f [ 548.687852][ C1] fbcon_clear_margins+0x1e9/0x250 [ 548.687856][ C1] fbcon_switch+0xd7f/0x17f0 [ 548.687859][ C1] ? fbcon_set_def_font+0x360/0x360 [ 548.687863][ C1] ? fbcon_cursor+0x48c/0x660 [ 548.687868][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.687872][ C1] ? fbcon_set_origin+0x2b/0x50 [ 548.687875][ C1] ? fbcon_scrolldelta+0x1220/0x1220 [ 548.687880][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.687883][ C1] redraw_screen+0x2b6/0x7d0 [ 548.687887][ C1] ? efifb_probe.cold+0x181f/0x181f [ 548.687890][ C1] ? respond_string+0x2c0/0x2c0 [ 548.687894][ C1] ? fbcon_set_palette+0x3c4/0x4a0 [ 548.687898][ C1] fbcon_modechanged+0x5c3/0x790 [ 548.687901][ C1] fbcon_update_vcs+0x42/0x50 [ 548.687905][ C1] fb_set_var+0xb32/0xdd0 [ 548.687908][ C1] ? fb_blank+0x1a0/0x1a0 [ 548.687912][ C1] ? lock_acquire+0x190/0x410 [ 548.687915][ C1] ? __mutex_lock+0x458/0x13c0 [ 548.687918][ C1] ? down+0x50/0x90 [ 548.687922][ C1] ? do_fb_ioctl+0x335/0x7d0 [ 548.687925][ C1] do_fb_ioctl+0x390/0x7d0 [ 548.687928][ C1] ? fb_mmap+0x520/0x520 [ 548.687933][ C1] ? tomoyo_path_number_perm+0x214/0x520 [ 548.687936][ C1] ? find_held_lock+0x35/0x130 [ 548.687940][ C1] ? tomoyo_path_number_perm+0x214/0x520 [ 548.687943][ C1] ? lock_downgrade+0x920/0x920 [ 548.687946][ C1] ? lockdep_hardirqs_on+0x421/0x5e0 [ 548.687950][ C1] ? tomoyo_path_number_perm+0x454/0x520 [ 548.687953][ C1] ? __do_page_fault+0x56a/0xd80 [ 548.687955][ C1] fb_ioctl+0xe6/0x130 [ 548.687958][ C1] ? do_fb_ioctl+0x7d0/0x7d0 [ 548.687962][ C1] do_vfs_ioctl+0x977/0x14e0 [ 548.687965][ C1] ? compat_ioctl_preallocate+0x220/0x220 [ 548.687968][ C1] ? __kasan_check_write+0x14/0x20 [ 548.687971][ C1] ? up_read+0x1cd/0x810 [ 548.687974][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 548.687978][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.687981][ C1] ? security_file_ioctl+0x8d/0xc0 [ 548.687984][ C1] ksys_ioctl+0xab/0xd0 [ 548.687986][ C1] __x64_sys_ioctl+0x73/0xb0 [ 548.687989][ C1] do_syscall_64+0xfa/0x790 [ 548.687993][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 548.687995][ C1] RIP: 0033:0x441419 [ 548.688006][ C1] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 548.688010][ C1] RSP: 002b:00007ffd7b6905c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.688017][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 548.688022][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 548.688027][ C1] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 548.688031][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 548.688036][ C1] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 548.688047][ T1129] Kernel panic - not syncing: hung_task: blocked tasks [ 548.688061][ T1129] CPU: 0 PID: 1129 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 548.688067][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.688071][ T1129] Call Trace: [ 548.688085][ T1129] dump_stack+0x197/0x210 [ 548.688121][ T1129] panic+0x2e3/0x75c [ 548.688140][ T1129] ? add_taint.cold+0x16/0x16 [ 548.688159][ T1129] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 548.688177][ T1129] ? printk_safe_flush+0xf2/0x140 [ 548.688194][ T1129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 548.688212][ T1129] ? nmi_trigger_cpumask_backtrace+0x224/0x28b [ 548.688230][ T1129] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 548.688248][ T1129] watchdog+0xb22/0x10c0 [ 548.688272][ T1129] kthread+0x361/0x430 [ 548.688289][ T1129] ? reset_hung_task_detector+0x30/0x30 [ 548.688304][ T1129] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 548.688321][ T1129] ret_from_fork+0x24/0x30 [ 548.690260][ T1129] Kernel Offset: disabled [ 551.066897][ T1129] Rebooting in 86400 seconds..