[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.6' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 575.718643][ T1138] INFO: task syz-executor098:7077 blocked for more than 143 seconds. [ 575.718665][ T1138] Not tainted 5.7.0-rc2-syzkaller #0 [ 575.718671][ T1138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.718678][ T1138] syz-executor098 D28128 7077 7075 0x00000004 [ 575.718702][ T1138] Call Trace: [ 575.718889][ T1138] ? __schedule+0x937/0x1ff0 [ 575.718914][ T1138] ? __sched_text_start+0x8/0x8 [ 575.718940][ T1138] schedule+0xd0/0x2a0 [ 575.718960][ T1138] schedule_preempt_disabled+0xf/0x20 [ 575.718973][ T1138] __mutex_lock+0x7ab/0x13c0 [ 575.719018][ T1138] ? fb_open+0xd3/0x430 [ 575.719036][ T1138] ? mutex_trylock+0x2c0/0x2c0 [ 575.719054][ T1138] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.719119][ T1138] ? chrdev_open+0xc4/0x5c0 [ 575.719146][ T1138] ? lock_downgrade+0x840/0x840 [ 575.719169][ T1138] ? fb_open+0xd3/0x430 [ 575.719180][ T1138] fb_open+0xd3/0x430 [ 575.719197][ T1138] ? get_fb_info.part.0+0x80/0x80 [ 575.719210][ T1138] chrdev_open+0x219/0x5c0 [ 575.719227][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.719272][ T1138] ? security_file_open+0x84/0x410 [ 575.719290][ T1138] do_dentry_open+0x4ba/0x1290 [ 575.719307][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.719350][ T1138] ? security_inode_permission+0xc4/0xf0 [ 575.719364][ T1138] ? chown_common+0x550/0x550 [ 575.719381][ T1138] ? inode_permission+0xab/0x500 [ 575.719403][ T1138] path_openat+0x1e59/0x27d0 [ 575.719428][ T1138] ? path_lookupat.isra.0+0x530/0x530 [ 575.719447][ T1138] ? lock_acquire+0x1f2/0x8f0 [ 575.719471][ T1138] do_filp_open+0x192/0x260 [ 575.719492][ T1138] ? may_open_dev+0xf0/0xf0 [ 575.719545][ T1138] ? do_raw_spin_lock+0x129/0x2e0 [ 575.719596][ T1138] ? _raw_spin_unlock+0x24/0x40 [ 575.719630][ T1138] ? __alloc_fd+0x46d/0x600 [ 575.719655][ T1138] do_sys_openat2+0x585/0x7d0 [ 575.719673][ T1138] ? file_open_root+0x400/0x400 [ 575.719734][ T1138] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.719753][ T1138] do_sys_open+0xc3/0x140 [ 575.719768][ T1138] ? filp_open+0x70/0x70 [ 575.719815][ T1138] ? fpregs_mark_activate+0x320/0x320 [ 575.719837][ T1138] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.719888][ T1138] do_syscall_64+0xf6/0x7d0 [ 575.719907][ T1138] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.719919][ T1138] RIP: 0033:0x441469 [ 575.719941][ T1138] Code: Bad RIP value. [ 575.719950][ T1138] RSP: 002b:00007ffc6f3828d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.719964][ T1138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441469 [ 575.719973][ T1138] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.719981][ T1138] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.719990][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021e0 [ 575.719998][ T1138] R13: 0000000000402270 R14: 0000000000000000 R15: 0000000000000000 [ 575.720031][ T1138] INFO: task syz-executor098:7078 blocked for more than 143 seconds. [ 575.720044][ T1138] Not tainted 5.7.0-rc2-syzkaller #0 [ 575.720050][ T1138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.720056][ T1138] syz-executor098 D28128 7078 7074 0x00004004 [ 575.720082][ T1138] Call Trace: [ 575.720103][ T1138] ? __schedule+0x937/0x1ff0 [ 575.720126][ T1138] ? __sched_text_start+0x8/0x8 [ 575.720153][ T1138] schedule+0xd0/0x2a0 [ 575.720172][ T1138] schedule_preempt_disabled+0xf/0x20 [ 575.720184][ T1138] __mutex_lock+0x7ab/0x13c0 [ 575.720200][ T1138] ? fb_open+0xd3/0x430 [ 575.720218][ T1138] ? mutex_trylock+0x2c0/0x2c0 [ 575.720236][ T1138] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.720249][ T1138] ? chrdev_open+0xc4/0x5c0 [ 575.720269][ T1138] ? lock_downgrade+0x840/0x840 [ 575.720295][ T1138] ? fb_open+0xd3/0x430 [ 575.720307][ T1138] fb_open+0xd3/0x430 [ 575.720323][ T1138] ? get_fb_info.part.0+0x80/0x80 [ 575.720336][ T1138] chrdev_open+0x219/0x5c0 [ 575.720352][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.720370][ T1138] ? security_file_open+0x84/0x410 [ 575.720387][ T1138] do_dentry_open+0x4ba/0x1290 [ 575.720403][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.720422][ T1138] ? security_inode_permission+0xc4/0xf0 [ 575.720436][ T1138] ? chown_common+0x550/0x550 [ 575.720453][ T1138] ? inode_permission+0xab/0x500 [ 575.720474][ T1138] path_openat+0x1e59/0x27d0 [ 575.720498][ T1138] ? path_lookupat.isra.0+0x530/0x530 [ 575.720526][ T1138] ? lock_acquire+0x1f2/0x8f0 [ 575.720550][ T1138] do_filp_open+0x192/0x260 [ 575.720565][ T1138] ? may_open_dev+0xf0/0xf0 [ 575.720587][ T1138] ? do_raw_spin_lock+0x129/0x2e0 [ 575.720613][ T1138] ? _raw_spin_unlock+0x24/0x40 [ 575.720627][ T1138] ? __alloc_fd+0x46d/0x600 [ 575.720650][ T1138] do_sys_openat2+0x585/0x7d0 [ 575.720667][ T1138] ? file_open_root+0x400/0x400 [ 575.720690][ T1138] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.720709][ T1138] do_sys_open+0xc3/0x140 [ 575.720723][ T1138] ? filp_open+0x70/0x70 [ 575.720741][ T1138] ? fpregs_mark_activate+0x320/0x320 [ 575.720757][ T1138] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.720779][ T1138] do_syscall_64+0xf6/0x7d0 [ 575.720798][ T1138] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.720808][ T1138] RIP: 0033:0x441469 [ 575.720822][ T1138] Code: Bad RIP value. [ 575.720830][ T1138] RSP: 002b:00007ffc6f3828d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.720843][ T1138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441469 [ 575.720852][ T1138] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.720860][ T1138] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.720869][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021e0 [ 575.720877][ T1138] R13: 0000000000402270 R14: 0000000000000000 R15: 0000000000000000 [ 575.720904][ T1138] INFO: task syz-executor098:7079 blocked for more than 143 seconds. [ 575.720912][ T1138] Not tainted 5.7.0-rc2-syzkaller #0 [ 575.720918][ T1138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.720924][ T1138] syz-executor098 D27856 7079 7071 0x00000004 [ 575.720944][ T1138] Call Trace: [ 575.720965][ T1138] ? __schedule+0x937/0x1ff0 [ 575.720988][ T1138] ? __sched_text_start+0x8/0x8 [ 575.721013][ T1138] schedule+0xd0/0x2a0 [ 575.721033][ T1138] schedule_preempt_disabled+0xf/0x20 [ 575.721045][ T1138] __mutex_lock+0x7ab/0x13c0 [ 575.721061][ T1138] ? fb_open+0xd3/0x430 [ 575.721084][ T1138] ? mutex_trylock+0x2c0/0x2c0 [ 575.721105][ T1138] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.721118][ T1138] ? chrdev_open+0xc4/0x5c0 [ 575.721138][ T1138] ? lock_downgrade+0x840/0x840 [ 575.721160][ T1138] ? fb_open+0xd3/0x430 [ 575.721172][ T1138] fb_open+0xd3/0x430 [ 575.721188][ T1138] ? get_fb_info.part.0+0x80/0x80 [ 575.721201][ T1138] chrdev_open+0x219/0x5c0 [ 575.721217][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.721235][ T1138] ? security_file_open+0x84/0x410 [ 575.721252][ T1138] do_dentry_open+0x4ba/0x1290 [ 575.721268][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.721287][ T1138] ? security_inode_permission+0xc4/0xf0 [ 575.721300][ T1138] ? chown_common+0x550/0x550 [ 575.721317][ T1138] ? inode_permission+0xab/0x500 [ 575.721338][ T1138] path_openat+0x1e59/0x27d0 [ 575.721363][ T1138] ? path_lookupat.isra.0+0x530/0x530 [ 575.721381][ T1138] ? lock_acquire+0x1f2/0x8f0 [ 575.721405][ T1138] do_filp_open+0x192/0x260 [ 575.721420][ T1138] ? may_open_dev+0xf0/0xf0 [ 575.721442][ T1138] ? do_raw_spin_lock+0x129/0x2e0 [ 575.721471][ T1138] ? _raw_spin_unlock+0x24/0x40 [ 575.721485][ T1138] ? __alloc_fd+0x46d/0x600 [ 575.721508][ T1138] do_sys_openat2+0x585/0x7d0 [ 575.721530][ T1138] ? file_open_root+0x400/0x400 [ 575.721552][ T1138] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.721571][ T1138] do_sys_open+0xc3/0x140 [ 575.721585][ T1138] ? filp_open+0x70/0x70 [ 575.721603][ T1138] ? fpregs_mark_activate+0x320/0x320 [ 575.721619][ T1138] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.721642][ T1138] do_syscall_64+0xf6/0x7d0 [ 575.721661][ T1138] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.721671][ T1138] RIP: 0033:0x441469 [ 575.721684][ T1138] Code: Bad RIP value. [ 575.721692][ T1138] RSP: 002b:00007ffc6f3828d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.721705][ T1138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441469 [ 575.721714][ T1138] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.721722][ T1138] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.721731][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021e0 [ 575.721739][ T1138] R13: 0000000000402270 R14: 0000000000000000 R15: 0000000000000000 [ 575.721766][ T1138] INFO: task syz-executor098:7080 blocked for more than 143 seconds. [ 575.721774][ T1138] Not tainted 5.7.0-rc2-syzkaller #0 [ 575.721779][ T1138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.721785][ T1138] syz-executor098 D28128 7080 7076 0x00000004 [ 575.721806][ T1138] Call Trace: [ 575.721830][ T1138] ? __schedule+0x937/0x1ff0 [ 575.721853][ T1138] ? __sched_text_start+0x8/0x8 [ 575.721879][ T1138] schedule+0xd0/0x2a0 [ 575.721898][ T1138] schedule_preempt_disabled+0xf/0x20 [ 575.721910][ T1138] __mutex_lock+0x7ab/0x13c0 [ 575.721926][ T1138] ? fb_open+0xd3/0x430 [ 575.721945][ T1138] ? mutex_trylock+0x2c0/0x2c0 [ 575.721963][ T1138] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.721976][ T1138] ? chrdev_open+0xc4/0x5c0 [ 575.721996][ T1138] ? lock_downgrade+0x840/0x840 [ 575.722016][ T1138] ? fb_open+0xd3/0x430 [ 575.722028][ T1138] fb_open+0xd3/0x430 [ 575.722045][ T1138] ? get_fb_info.part.0+0x80/0x80 [ 575.722058][ T1138] chrdev_open+0x219/0x5c0 [ 575.722074][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.722091][ T1138] ? security_file_open+0x84/0x410 [ 575.722109][ T1138] do_dentry_open+0x4ba/0x1290 [ 575.722125][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.722144][ T1138] ? security_inode_permission+0xc4/0xf0 [ 575.722157][ T1138] ? chown_common+0x550/0x550 [ 575.722174][ T1138] ? inode_permission+0xab/0x500 [ 575.722195][ T1138] path_openat+0x1e59/0x27d0 [ 575.722219][ T1138] ? path_lookupat.isra.0+0x530/0x530 [ 575.722238][ T1138] ? lock_acquire+0x1f2/0x8f0 [ 575.722266][ T1138] do_filp_open+0x192/0x260 [ 575.722281][ T1138] ? may_open_dev+0xf0/0xf0 [ 575.722303][ T1138] ? do_raw_spin_lock+0x129/0x2e0 [ 575.722328][ T1138] ? _raw_spin_unlock+0x24/0x40 [ 575.722342][ T1138] ? __alloc_fd+0x46d/0x600 [ 575.722365][ T1138] do_sys_openat2+0x585/0x7d0 [ 575.722382][ T1138] ? file_open_root+0x400/0x400 [ 575.722405][ T1138] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.722423][ T1138] do_sys_open+0xc3/0x140 [ 575.722437][ T1138] ? filp_open+0x70/0x70 [ 575.722456][ T1138] ? fpregs_mark_activate+0x320/0x320 [ 575.722471][ T1138] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.722495][ T1138] do_syscall_64+0xf6/0x7d0 [ 575.722519][ T1138] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.722529][ T1138] RIP: 0033:0x441469 [ 575.722541][ T1138] Code: Bad RIP value. [ 575.722549][ T1138] RSP: 002b:00007ffc6f3828d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.722562][ T1138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441469 [ 575.722571][ T1138] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.722580][ T1138] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.722588][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021e0 [ 575.722596][ T1138] R13: 0000000000402270 R14: 0000000000000000 R15: 0000000000000000 [ 575.722623][ T1138] INFO: task syz-executor098:7081 blocked for more than 143 seconds. [ 575.722631][ T1138] Not tainted 5.7.0-rc2-syzkaller #0 [ 575.722637][ T1138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.722643][ T1138] syz-executor098 D28128 7081 7073 0x00004004 [ 575.722662][ T1138] Call Trace: [ 575.722683][ T1138] ? __schedule+0x937/0x1ff0 [ 575.722705][ T1138] ? __sched_text_start+0x8/0x8 [ 575.722731][ T1138] schedule+0xd0/0x2a0 [ 575.722751][ T1138] schedule_preempt_disabled+0xf/0x20 [ 575.722763][ T1138] __mutex_lock+0x7ab/0x13c0 [ 575.722779][ T1138] ? fb_open+0xd3/0x430 [ 575.722797][ T1138] ? mutex_trylock+0x2c0/0x2c0 [ 575.722815][ T1138] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.722828][ T1138] ? chrdev_open+0xc4/0x5c0 [ 575.722851][ T1138] ? lock_downgrade+0x840/0x840 [ 575.722876][ T1138] ? fb_open+0xd3/0x430 [ 575.722888][ T1138] fb_open+0xd3/0x430 [ 575.722905][ T1138] ? get_fb_info.part.0+0x80/0x80 [ 575.722918][ T1138] chrdev_open+0x219/0x5c0 [ 575.722934][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.722951][ T1138] ? security_file_open+0x84/0x410 [ 575.722968][ T1138] do_dentry_open+0x4ba/0x1290 [ 575.722984][ T1138] ? cdev_put.part.0+0x50/0x50 [ 575.723003][ T1138] ? security_inode_permission+0xc4/0xf0 [ 575.723016][ T1138] ? chown_common+0x550/0x550 [ 575.723033][ T1138] ? inode_permission+0xab/0x500 [ 575.723054][ T1138] path_openat+0x1e59/0x27d0 [ 575.723078][ T1138] ? path_lookupat.isra.0+0x530/0x530 [ 575.723097][ T1138] ? lock_acquire+0x1f2/0x8f0 [ 575.723121][ T1138] do_filp_open+0x192/0x260 [ 575.723136][ T1138] ? may_open_dev+0xf0/0xf0 [ 575.723158][ T1138] ? do_raw_spin_lock+0x129/0x2e0 [ 575.723184][ T1138] ? _raw_spin_unlock+0x24/0x40 [ 575.723198][ T1138] ? __alloc_fd+0x46d/0x600 [ 575.723220][ T1138] do_sys_openat2+0x585/0x7d0 [ 575.723237][ T1138] ? file_open_root+0x400/0x400 [ 575.723260][ T1138] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.723279][ T1138] do_sys_open+0xc3/0x140 [ 575.723293][ T1138] ? filp_open+0x70/0x70 [ 575.723311][ T1138] ? fpregs_mark_activate+0x320/0x320 [ 575.723327][ T1138] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.723350][ T1138] do_syscall_64+0xf6/0x7d0 [ 575.723369][ T1138] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.723379][ T1138] RIP: 0033:0x441469 [ 575.723393][ T1138] Code: Bad RIP value. [ 575.723401][ T1138] RSP: 002b:00007ffc6f3828d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.723413][ T1138] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441469 [ 575.723422][ T1138] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.723431][ T1138] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.723439][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021e0 [ 575.723448][ T1138] R13: 0000000000402270 R14: 0000000000000000 R15: 0000000000000000 [ 575.723470][ T1138] [ 575.723470][ T1138] Showing all locks held in the system: [ 575.723486][ T1138] 1 lock held by khungtaskd/1138: [ 575.723491][ T1138] #0: ffffffff899beb00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 575.723561][ T1138] 1 lock held by in:imklog/6740: [ 575.723566][ T1138] #0: ffff888093e62130 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 575.723605][ T1138] 2 locks held by syz-executor098/7072: [ 575.723615][ T1138] 1 lock held by syz-executor098/7077: [ 575.723620][ T1138] #0: ffff8880a3be1078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.723651][ T1138] 1 lock held by syz-executor098/7078: [ 575.723656][ T1138] #0: ffff8880a3be1078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.723687][ T1138] 1 lock held by syz-executor098/7079: [ 575.723691][ T1138] #0: ffff8880a3be1078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.723722][ T1138] 1 lock held by syz-executor098/7080: [ 575.723727][ T1138] #0: ffff8880a3be1078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.723757][ T1138] 1 lock held by syz-executor098/7081: [ 575.723762][ T1138] #0: ffff8880a3be1078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.723788][ T1138] [ 575.723793][ T1138] ============================================= [ 575.723793][ T1138] [ 575.723800][ T1138] NMI backtrace for cpu 1 [ 575.723814][ T1138] CPU: 1 PID: 1138 Comm: khungtaskd Not tainted 5.7.0-rc2-syzkaller #0 [ 575.723822][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.723826][ T1138] Call Trace: [ 575.723887][ T1138] dump_stack+0x188/0x20d [ 575.723906][ T1138] nmi_cpu_backtrace.cold+0x70/0xb1 [ 575.723948][ T1138] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 575.723966][ T1138] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 575.724000][ T1138] watchdog+0xa8c/0x1010 [ 575.724019][ T1138] ? reset_hung_task_detector+0x30/0x30 [ 575.724055][ T1138] kthread+0x388/0x470 [ 575.724070][ T1138] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 575.724086][ T1138] ret_from_fork+0x24/0x30 [ 575.724113][ T1138] Sending NMI from CPU 1 to CPUs 0: [ 575.724766][ C0] NMI backtrace for cpu 0 [ 575.724772][ C0] CPU: 0 PID: 7072 Comm: syz-executor098 Not tainted 5.7.0-rc2-syzkaller #0 [ 575.724777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.724781][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x20 [ 575.724791][ C0] Code: 84 00 00 00 00 00 48 8b 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 ec fe ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 ce fe ff ff 0f 1f 40 00 66 2e 0f 1f [ 575.724794][ C0] RSP: 0018:ffffc90001917590 EFLAGS: 00000246 [ 575.724801][ C0] RAX: ffff888097ae42c0 RBX: 0000000000000050 RCX: ffffffff83c360ea [ 575.724806][ C0] RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000000000 [ 575.724810][ C0] RBP: 0000000000000000 R08: ffff888097ae42c0 R09: ffffed101479aa24 [ 575.724815][ C0] R10: ffff8880a3cd511f R11: ffffed101479aa23 R12: ffff8880000a0050 [ 575.724819][ C0] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000e9b85a22 [ 575.724825][ C0] FS: 0000000002433880(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 575.724828][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.724833][ C0] CR2: 00000000006cc080 CR3: 000000009f305000 CR4: 00000000001406f0 [ 575.724837][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.724842][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.724844][ C0] Call Trace: [ 575.724848][ C0] vga16fb_fillrect+0x9ba/0x1960 [ 575.724850][ C0] ? memcpy+0x39/0x60 [ 575.724853][ C0] bit_clear_margins+0x2d5/0x4a0 [ 575.724856][ C0] ? bit_bmove+0x210/0x210 [ 575.724860][ C0] ? vesafb_probe.cold+0x1162/0x1162 [ 575.724863][ C0] fbcon_clear_margins+0x1de/0x240 [ 575.724866][ C0] fbcon_switch+0xd21/0x1740 [ 575.724869][ C0] ? fbcon_set_def_font+0x370/0x370 [ 575.724872][ C0] ? fbcon_cursor+0x477/0x650 [ 575.724875][ C0] ? bit_clear+0x4e0/0x4e0 [ 575.724878][ C0] ? is_console_locked+0x5/0x10 [ 575.724881][ C0] ? fbcon_set_origin+0x26/0x50 [ 575.724884][ C0] redraw_screen+0x2ae/0x770 [ 575.724888][ C0] ? vesafb_probe.cold+0x1162/0x1162 [ 575.724891][ C0] ? respond_string+0x290/0x290 [ 575.724894][ C0] ? fbcon_set_palette+0x3b1/0x4a0 [ 575.724897][ C0] fbcon_modechanged+0x5c3/0x790 [ 575.724900][ C0] fbcon_update_vcs+0x3a/0x50 [ 575.724903][ C0] fb_set_var+0xad0/0xd40 [ 575.724906][ C0] ? fb_blank+0x190/0x190 [ 575.724909][ C0] ? mark_held_locks+0xe0/0xe0 [ 575.724912][ C0] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 575.724915][ C0] do_fb_ioctl+0x390/0x6e0 [ 575.724918][ C0] ? fb_mmap+0x550/0x550 [ 575.724922][ C0] ? tomoyo_execute_permission+0x470/0x470 [ 575.724925][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 575.724928][ C0] ? do_vfs_ioctl+0x50c/0x12d0 [ 575.724931][ C0] ? up_read+0x1ab/0x750 [ 575.724934][ C0] ? down_read_nested+0x420/0x420 [ 575.724937][ C0] fb_ioctl+0xdd/0x130 [ 575.724940][ C0] ? do_fb_ioctl+0x6e0/0x6e0 [ 575.724943][ C0] ksys_ioctl+0x11a/0x180 [ 575.724946][ C0] __x64_sys_ioctl+0x6f/0xb0 [ 575.724949][ C0] ? lockdep_hardirqs_on+0x463/0x620 [ 575.724952][ C0] do_syscall_64+0xf6/0x7d0 [ 575.724956][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.724959][ C0] RIP: 0033:0x441469 [ 575.724968][ C0] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.724972][ C0] RSP: 002b:00007ffc6f3828d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.724979][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441469 [ 575.724984][ C0] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 575.724988][ C0] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 575.724993][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000004021e0 [ 575.724997][ C0] R13: 0000000000402270 R14: 0000000000000000 R15: 0000000000000000 [ 575.725131][ T1138] Kernel panic - not syncing: hung_task: blocked tasks [ 575.725142][ T1138] CPU: 1 PID: 1138 Comm: khungtaskd Not tainted 5.7.0-rc2-syzkaller #0 [ 575.725147][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.725150][ T1138] Call Trace: [ 575.725163][ T1138] dump_stack+0x188/0x20d [ 575.725225][ T1138] panic+0x2e3/0x75c [ 575.725237][ T1138] ? add_taint.cold+0x16/0x16 [ 575.725251][ T1138] ? cpumask_next+0x3c/0x40 [ 575.725262][ T1138] ? printk_safe_flush+0xd9/0x120 [ 575.725271][ T1138] ? watchdog+0xa8c/0x1010 [ 575.725282][ T1138] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 575.725295][ T1138] watchdog+0xa9d/0x1010 [ 575.725309][ T1138] ? reset_hung_task_detector+0x30/0x30 [ 575.725321][ T1138] kthread+0x388/0x470 [ 575.725332][ T1138] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 575.725345][ T1138] ret_from_fork+0x24/0x30 [ 575.727160][ T1138] Kernel Offset: disabled [ 577.872435][ T1138] Rebooting in 86400 seconds..