[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.940645][ T27] audit: type=1800 audit(1583976622.739:25): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.960590][ T27] audit: type=1800 audit(1583976622.739:26): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 84.006590][ T27] audit: type=1800 audit(1583976622.739:27): pid=9555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.1' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 611.244477][ T1137] INFO: task syz-executor520:9715 blocked for more than 143 seconds. [ 611.244498][ T1137] Not tainted 5.6.0-rc5-syzkaller #0 [ 611.244503][ T1137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.244511][ T1137] syz-executor520 D28328 9715 9714 0x00004004 [ 611.244534][ T1137] Call Trace: [ 611.244739][ T1137] ? __schedule+0x934/0x1f90 [ 611.244768][ T1137] ? __sched_text_start+0x8/0x8 [ 611.244800][ T1137] schedule+0xd0/0x2a0 [ 611.244821][ T1137] schedule_preempt_disabled+0xf/0x20 [ 611.244835][ T1137] __mutex_lock+0x7ab/0x13c0 [ 611.244905][ T1137] ? fb_open+0xd3/0x430 [ 611.244930][ T1137] ? mutex_trylock+0x2c0/0x2c0 [ 611.244953][ T1137] ? __mutex_unlock_slowpath+0xe2/0x660 [ 611.245007][ T1137] ? chrdev_open+0xc4/0x5c0 [ 611.245057][ T1137] ? lock_downgrade+0x7f0/0x7f0 [ 611.245085][ T1137] ? fb_open+0xd3/0x430 [ 611.245096][ T1137] fb_open+0xd3/0x430 [ 611.245114][ T1137] ? get_fb_info.part.0+0x80/0x80 [ 611.245128][ T1137] chrdev_open+0x219/0x5c0 [ 611.245143][ T1137] ? rwlock_bug.part.0+0x90/0x90 [ 611.245158][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.245190][ T1137] do_dentry_open+0x4a2/0x1250 [ 611.245207][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.245248][ T1137] ? security_inode_permission+0xc4/0xf0 [ 611.245263][ T1137] ? chown_common+0x550/0x550 [ 611.245278][ T1137] ? inode_permission+0xab/0x500 [ 611.245306][ T1137] path_openat+0x122a/0x32b0 [ 611.245343][ T1137] ? path_mountpoint.isra.0+0x370/0x370 [ 611.245355][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.245376][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.245407][ T1137] do_filp_open+0x192/0x260 [ 611.245424][ T1137] ? may_open_dev+0xf0/0xf0 [ 611.245454][ T1137] ? do_raw_spin_lock+0x129/0x2e0 [ 611.245487][ T1137] ? _raw_spin_unlock+0x24/0x40 [ 611.245520][ T1137] ? __alloc_fd+0x46d/0x600 [ 611.245551][ T1137] do_sys_openat2+0x54c/0x740 [ 611.245572][ T1137] ? file_open_root+0x3d0/0x3d0 [ 611.245722][ T1137] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 611.245749][ T1137] do_sys_open+0xc3/0x140 [ 611.245766][ T1137] ? filp_open+0x70/0x70 [ 611.245808][ T1137] ? fpregs_mark_activate+0x320/0x320 [ 611.245845][ T1137] ? trace_hardirqs_off_caller+0x55/0x230 [ 611.245880][ T1137] do_syscall_64+0xf6/0x7d0 [ 611.245901][ T1137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.245914][ T1137] RIP: 0033:0x441419 [ 611.245961][ T1137] Code: Bad RIP value. [ 611.245969][ T1137] RSP: 002b:00007ffcaaa8f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.245983][ T1137] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 611.245992][ T1137] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 611.246001][ T1137] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 611.246009][ T1137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 611.246017][ T1137] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 611.246056][ T1137] INFO: task syz-executor520:9716 blocked for more than 143 seconds. [ 611.246063][ T1137] Not tainted 5.6.0-rc5-syzkaller #0 [ 611.246068][ T1137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.246075][ T1137] syz-executor520 D28328 9716 9713 0x00000004 [ 611.246097][ T1137] Call Trace: [ 611.246121][ T1137] ? __schedule+0x934/0x1f90 [ 611.246147][ T1137] ? __sched_text_start+0x8/0x8 [ 611.246179][ T1137] schedule+0xd0/0x2a0 [ 611.246199][ T1137] schedule_preempt_disabled+0xf/0x20 [ 611.246212][ T1137] __mutex_lock+0x7ab/0x13c0 [ 611.246231][ T1137] ? fb_open+0xd3/0x430 [ 611.246255][ T1137] ? mutex_trylock+0x2c0/0x2c0 [ 611.246278][ T1137] ? __mutex_unlock_slowpath+0xe2/0x660 [ 611.246292][ T1137] ? chrdev_open+0xc4/0x5c0 [ 611.246314][ T1137] ? lock_downgrade+0x7f0/0x7f0 [ 611.246343][ T1137] ? fb_open+0xd3/0x430 [ 611.246354][ T1137] fb_open+0xd3/0x430 [ 611.246372][ T1137] ? get_fb_info.part.0+0x80/0x80 [ 611.246385][ T1137] chrdev_open+0x219/0x5c0 [ 611.246400][ T1137] ? rwlock_bug.part.0+0x90/0x90 [ 611.246415][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.246447][ T1137] do_dentry_open+0x4a2/0x1250 [ 611.246465][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.246484][ T1137] ? security_inode_permission+0xc4/0xf0 [ 611.246499][ T1137] ? chown_common+0x550/0x550 [ 611.246513][ T1137] ? inode_permission+0xab/0x500 [ 611.246548][ T1137] path_openat+0x122a/0x32b0 [ 611.246601][ T1137] ? path_mountpoint.isra.0+0x370/0x370 [ 611.246613][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.246634][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.246664][ T1137] do_filp_open+0x192/0x260 [ 611.246682][ T1137] ? may_open_dev+0xf0/0xf0 [ 611.246712][ T1137] ? do_raw_spin_lock+0x129/0x2e0 [ 611.246744][ T1137] ? _raw_spin_unlock+0x24/0x40 [ 611.246759][ T1137] ? __alloc_fd+0x46d/0x600 [ 611.246789][ T1137] do_sys_openat2+0x54c/0x740 [ 611.246810][ T1137] ? file_open_root+0x3d0/0x3d0 [ 611.246835][ T1137] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 611.246863][ T1137] do_sys_open+0xc3/0x140 [ 611.246879][ T1137] ? filp_open+0x70/0x70 [ 611.246897][ T1137] ? fpregs_mark_activate+0x320/0x320 [ 611.246914][ T1137] ? trace_hardirqs_off_caller+0x55/0x230 [ 611.246942][ T1137] do_syscall_64+0xf6/0x7d0 [ 611.246961][ T1137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.246972][ T1137] RIP: 0033:0x441419 [ 611.246988][ T1137] Code: Bad RIP value. [ 611.246996][ T1137] RSP: 002b:00007ffcaaa8f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.247009][ T1137] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 611.247018][ T1137] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 611.247026][ T1137] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 611.247035][ T1137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 611.247043][ T1137] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 611.247080][ T1137] INFO: task syz-executor520:9717 blocked for more than 143 seconds. [ 611.247089][ T1137] Not tainted 5.6.0-rc5-syzkaller #0 [ 611.247094][ T1137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.247101][ T1137] syz-executor520 D28328 9717 9711 0x00004004 [ 611.247122][ T1137] Call Trace: [ 611.247144][ T1137] ? __schedule+0x934/0x1f90 [ 611.247171][ T1137] ? __sched_text_start+0x8/0x8 [ 611.247203][ T1137] schedule+0xd0/0x2a0 [ 611.247222][ T1137] schedule_preempt_disabled+0xf/0x20 [ 611.247235][ T1137] __mutex_lock+0x7ab/0x13c0 [ 611.247253][ T1137] ? fb_open+0xd3/0x430 [ 611.247277][ T1137] ? mutex_trylock+0x2c0/0x2c0 [ 611.247300][ T1137] ? __mutex_unlock_slowpath+0xe2/0x660 [ 611.247313][ T1137] ? chrdev_open+0xc4/0x5c0 [ 611.247335][ T1137] ? lock_downgrade+0x7f0/0x7f0 [ 611.247364][ T1137] ? fb_open+0xd3/0x430 [ 611.247375][ T1137] fb_open+0xd3/0x430 [ 611.247393][ T1137] ? get_fb_info.part.0+0x80/0x80 [ 611.247406][ T1137] chrdev_open+0x219/0x5c0 [ 611.247433][ T1137] ? rwlock_bug.part.0+0x90/0x90 [ 611.247449][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.247481][ T1137] do_dentry_open+0x4a2/0x1250 [ 611.247499][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.247518][ T1137] ? security_inode_permission+0xc4/0xf0 [ 611.247533][ T1137] ? chown_common+0x550/0x550 [ 611.247547][ T1137] ? inode_permission+0xab/0x500 [ 611.247580][ T1137] path_openat+0x122a/0x32b0 [ 611.247618][ T1137] ? path_mountpoint.isra.0+0x370/0x370 [ 611.247640][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.247671][ T1137] do_filp_open+0x192/0x260 [ 611.247688][ T1137] ? may_open_dev+0xf0/0xf0 [ 611.247718][ T1137] ? do_raw_spin_lock+0x129/0x2e0 [ 611.247751][ T1137] ? _raw_spin_unlock+0x24/0x40 [ 611.247765][ T1137] ? __alloc_fd+0x46d/0x600 [ 611.247795][ T1137] do_sys_openat2+0x54c/0x740 [ 611.247816][ T1137] ? file_open_root+0x3d0/0x3d0 [ 611.247841][ T1137] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 611.247864][ T1137] do_sys_open+0xc3/0x140 [ 611.247879][ T1137] ? filp_open+0x70/0x70 [ 611.247897][ T1137] ? fpregs_mark_activate+0x320/0x320 [ 611.247914][ T1137] ? trace_hardirqs_off_caller+0x55/0x230 [ 611.247942][ T1137] do_syscall_64+0xf6/0x7d0 [ 611.247961][ T1137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.247971][ T1137] RIP: 0033:0x441419 [ 611.247987][ T1137] Code: Bad RIP value. [ 611.247995][ T1137] RSP: 002b:00007ffcaaa8f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.248008][ T1137] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 611.248017][ T1137] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 611.248025][ T1137] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 611.248034][ T1137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 611.248042][ T1137] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 611.248078][ T1137] INFO: task syz-executor520:9718 blocked for more than 143 seconds. [ 611.248087][ T1137] Not tainted 5.6.0-rc5-syzkaller #0 [ 611.248092][ T1137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.248098][ T1137] syz-executor520 D28328 9718 9712 0x00000004 [ 611.248119][ T1137] Call Trace: [ 611.248142][ T1137] ? __schedule+0x934/0x1f90 [ 611.248168][ T1137] ? __sched_text_start+0x8/0x8 [ 611.248200][ T1137] schedule+0xd0/0x2a0 [ 611.248219][ T1137] schedule_preempt_disabled+0xf/0x20 [ 611.248232][ T1137] __mutex_lock+0x7ab/0x13c0 [ 611.248251][ T1137] ? fb_open+0xd3/0x430 [ 611.248274][ T1137] ? mutex_trylock+0x2c0/0x2c0 [ 611.248297][ T1137] ? __mutex_unlock_slowpath+0xe2/0x660 [ 611.248311][ T1137] ? chrdev_open+0xc4/0x5c0 [ 611.248333][ T1137] ? lock_downgrade+0x7f0/0x7f0 [ 611.248361][ T1137] ? fb_open+0xd3/0x430 [ 611.248372][ T1137] fb_open+0xd3/0x430 [ 611.248390][ T1137] ? get_fb_info.part.0+0x80/0x80 [ 611.248403][ T1137] chrdev_open+0x219/0x5c0 [ 611.248418][ T1137] ? rwlock_bug.part.0+0x90/0x90 [ 611.248433][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.248465][ T1137] do_dentry_open+0x4a2/0x1250 [ 611.248483][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.248502][ T1137] ? security_inode_permission+0xc4/0xf0 [ 611.248516][ T1137] ? chown_common+0x550/0x550 [ 611.248531][ T1137] ? inode_permission+0xab/0x500 [ 611.248565][ T1137] path_openat+0x122a/0x32b0 [ 611.248604][ T1137] ? path_mountpoint.isra.0+0x370/0x370 [ 611.248615][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.248636][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.248666][ T1137] do_filp_open+0x192/0x260 [ 611.248684][ T1137] ? may_open_dev+0xf0/0xf0 [ 611.248714][ T1137] ? do_raw_spin_lock+0x129/0x2e0 [ 611.248746][ T1137] ? _raw_spin_unlock+0x24/0x40 [ 611.248761][ T1137] ? __alloc_fd+0x46d/0x600 [ 611.248791][ T1137] do_sys_openat2+0x54c/0x740 [ 611.248811][ T1137] ? file_open_root+0x3d0/0x3d0 [ 611.248836][ T1137] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 611.248859][ T1137] do_sys_open+0xc3/0x140 [ 611.248874][ T1137] ? filp_open+0x70/0x70 [ 611.248893][ T1137] ? fpregs_mark_activate+0x320/0x320 [ 611.248910][ T1137] ? trace_hardirqs_off_caller+0x55/0x230 [ 611.248937][ T1137] do_syscall_64+0xf6/0x7d0 [ 611.248957][ T1137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.248967][ T1137] RIP: 0033:0x441419 [ 611.248982][ T1137] Code: Bad RIP value. [ 611.248990][ T1137] RSP: 002b:00007ffcaaa8f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.249003][ T1137] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 611.249012][ T1137] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 611.249020][ T1137] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 611.249028][ T1137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 611.249037][ T1137] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 611.249074][ T1137] INFO: task syz-executor520:9719 blocked for more than 143 seconds. [ 611.249081][ T1137] Not tainted 5.6.0-rc5-syzkaller #0 [ 611.249087][ T1137] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.249093][ T1137] syz-executor520 D28328 9719 9709 0x00004004 [ 611.249114][ T1137] Call Trace: [ 611.249136][ T1137] ? __schedule+0x934/0x1f90 [ 611.249162][ T1137] ? __sched_text_start+0x8/0x8 [ 611.249194][ T1137] schedule+0xd0/0x2a0 [ 611.249213][ T1137] schedule_preempt_disabled+0xf/0x20 [ 611.249226][ T1137] __mutex_lock+0x7ab/0x13c0 [ 611.249245][ T1137] ? fb_open+0xd3/0x430 [ 611.249268][ T1137] ? mutex_trylock+0x2c0/0x2c0 [ 611.249291][ T1137] ? __mutex_unlock_slowpath+0xe2/0x660 [ 611.249305][ T1137] ? chrdev_open+0xc4/0x5c0 [ 611.249327][ T1137] ? lock_downgrade+0x7f0/0x7f0 [ 611.249355][ T1137] ? fb_open+0xd3/0x430 [ 611.249367][ T1137] fb_open+0xd3/0x430 [ 611.249384][ T1137] ? get_fb_info.part.0+0x80/0x80 [ 611.249398][ T1137] chrdev_open+0x219/0x5c0 [ 611.249412][ T1137] ? rwlock_bug.part.0+0x90/0x90 [ 611.249427][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.249459][ T1137] do_dentry_open+0x4a2/0x1250 [ 611.249477][ T1137] ? cdev_put.part.0+0x50/0x50 [ 611.249496][ T1137] ? security_inode_permission+0xc4/0xf0 [ 611.249510][ T1137] ? chown_common+0x550/0x550 [ 611.249525][ T1137] ? inode_permission+0xab/0x500 [ 611.249557][ T1137] path_openat+0x122a/0x32b0 [ 611.249596][ T1137] ? path_mountpoint.isra.0+0x370/0x370 [ 611.249607][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.249628][ T1137] ? __lock_acquire+0x14bd/0x3ca0 [ 611.249658][ T1137] do_filp_open+0x192/0x260 [ 611.249676][ T1137] ? may_open_dev+0xf0/0xf0 [ 611.249706][ T1137] ? do_raw_spin_lock+0x129/0x2e0 [ 611.249738][ T1137] ? _raw_spin_unlock+0x24/0x40 [ 611.249752][ T1137] ? __alloc_fd+0x46d/0x600 [ 611.249782][ T1137] do_sys_openat2+0x54c/0x740 [ 611.249803][ T1137] ? file_open_root+0x3d0/0x3d0 [ 611.249828][ T1137] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 611.249851][ T1137] do_sys_open+0xc3/0x140 [ 611.249866][ T1137] ? filp_open+0x70/0x70 [ 611.249884][ T1137] ? fpregs_mark_activate+0x320/0x320 [ 611.249901][ T1137] ? trace_hardirqs_off_caller+0x55/0x230 [ 611.249929][ T1137] do_syscall_64+0xf6/0x7d0 [ 611.249948][ T1137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.249958][ T1137] RIP: 0033:0x441419 [ 611.249974][ T1137] Code: Bad RIP value. [ 611.249982][ T1137] RSP: 002b:00007ffcaaa8f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.249995][ T1137] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 611.250004][ T1137] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 611.250012][ T1137] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 611.250021][ T1137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 611.250029][ T1137] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 611.250061][ T1137] [ 611.250061][ T1137] Showing all locks held in the system: [ 611.250074][ T1137] 1 lock held by khungtaskd/1137: [ 611.250079][ T1137] #0: ffffffff897accc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x260 [ 611.250128][ T1137] 1 lock held by rsyslogd/9593: [ 611.250133][ T1137] #0: ffff8880934cfda0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 611.250164][ T1137] 2 locks held by getty/9683: [ 611.250168][ T1137] #0: ffff8880a6de4090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250228][ T1137] #1: ffffc900018ce2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250257][ T1137] 2 locks held by getty/9684: [ 611.250262][ T1137] #0: ffff8880a87a2090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250287][ T1137] #1: ffffc900017132e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250316][ T1137] 2 locks held by getty/9685: [ 611.250320][ T1137] #0: ffff8880a8b5a090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250345][ T1137] #1: ffffc900016ab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250373][ T1137] 2 locks held by getty/9686: [ 611.250378][ T1137] #0: ffff8880a7929090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250403][ T1137] #1: ffffc900018db2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250432][ T1137] 2 locks held by getty/9687: [ 611.250436][ T1137] #0: ffff8880a0c79090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250461][ T1137] #1: ffffc900018eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250490][ T1137] 2 locks held by getty/9688: [ 611.250494][ T1137] #0: ffff8880a31ca090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250519][ T1137] #1: ffffc900017172e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250548][ T1137] 2 locks held by getty/9689: [ 611.250558][ T1137] #0: ffff888094fb0090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 611.250583][ T1137] #1: ffffc9000168b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 611.250613][ T1137] 2 locks held by syz-executor520/9710: [ 611.250623][ T1137] 1 lock held by syz-executor520/9715: [ 611.250627][ T1137] #0: ffff8880a41bf070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 611.250655][ T1137] 1 lock held by syz-executor520/9716: [ 611.250660][ T1137] #0: ffff8880a41bf070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 611.250687][ T1137] 1 lock held by syz-executor520/9717: [ 611.250692][ T1137] #0: ffff8880a41bf070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 611.250719][ T1137] 1 lock held by syz-executor520/9718: [ 611.250724][ T1137] #0: ffff8880a41bf070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 611.250751][ T1137] 1 lock held by syz-executor520/9719: [ 611.250756][ T1137] #0: ffff8880a41bf070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 611.250779][ T1137] [ 611.250784][ T1137] ============================================= [ 611.250784][ T1137] [ 611.250791][ T1137] NMI backtrace for cpu 0 [ 611.250805][ T1137] CPU: 0 PID: 1137 Comm: khungtaskd Not tainted 5.6.0-rc5-syzkaller #0 [ 611.250812][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.250816][ T1137] Call Trace: [ 611.250887][ T1137] dump_stack+0x188/0x20d [ 611.250912][ T1137] nmi_cpu_backtrace.cold+0x70/0xb1 [ 611.250966][ T1137] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 611.250983][ T1137] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 611.251039][ T1137] watchdog+0xa8c/0x1010 [ 611.251063][ T1137] ? reset_hung_task_detector+0x30/0x30 [ 611.251099][ T1137] kthread+0x357/0x430 [ 611.251114][ T1137] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 611.251131][ T1137] ret_from_fork+0x24/0x30 [ 611.251167][ T1137] Sending NMI from CPU 0 to CPUs 1: [ 611.251951][ C1] NMI backtrace for cpu 1 [ 611.251957][ C1] CPU: 1 PID: 9710 Comm: syz-executor520 Not tainted 5.6.0-rc5-syzkaller #0 [ 611.251963][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.251967][ C1] RIP: 0010:write_comp_data+0x1e/0x70 [ 611.251977][ C1] Code: 48 89 11 c3 0f 1f 84 00 00 00 00 00 65 4c 8b 04 25 c0 1e 02 00 65 8b 05 78 08 90 7e a9 00 01 1f 00 75 51 41 8b 80 80 13 00 00 <83> f8 03 75 45 49 8b 80 88 13 00 00 45 8b 80 84 13 00 00 4c 8b 08 [ 611.251981][ C1] RSP: 0018:ffffc90001fb7590 EFLAGS: 00000246 [ 611.251988][ C1] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff83b6b74a [ 611.251993][ C1] RDX: 000000000000002b RSI: 0000000000000050 RDI: 0000000000000004 [ 611.251998][ C1] RBP: 000000000000002b R08: ffff88809435c1c0 R09: ffffed101484a5ec [ 611.252002][ C1] R10: ffffed101484a5eb R11: ffff8880a4252f5f R12: ffff8880000a002b [ 611.252007][ C1] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000ebd15c7d [ 611.252012][ C1] FS: 000000000186c880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 611.252016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.252021][ C1] CR2: 0000000020000180 CR3: 00000000a88ef000 CR4: 00000000001406e0 [ 611.252026][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.252031][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.252033][ C1] Call Trace: [ 611.252037][ C1] vga16fb_fillrect+0x9da/0x1960 [ 611.252040][ C1] ? memcpy+0x35/0x50 [ 611.252043][ C1] bit_clear_margins+0x2d5/0x4a0 [ 611.252046][ C1] ? bit_bmove+0x210/0x210 [ 611.252050][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 611.252060][ C1] fbcon_clear_margins+0x1de/0x240 [ 611.252063][ C1] fbcon_switch+0xd1b/0x1740 [ 611.252067][ C1] ? fbcon_set_def_font+0x370/0x370 [ 611.252070][ C1] ? fbcon_cursor+0x477/0x650 [ 611.252073][ C1] ? bit_clear+0x4e0/0x4e0 [ 611.252077][ C1] ? is_console_locked+0x5/0x10 [ 611.252080][ C1] ? fbcon_set_origin+0x26/0x50 [ 611.252083][ C1] redraw_screen+0x2a8/0x770 [ 611.252087][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 611.252090][ C1] ? respond_string+0x290/0x290 [ 611.252094][ C1] ? fbcon_set_palette+0x3b1/0x4a0 [ 611.252097][ C1] fbcon_modechanged+0x5bd/0x780 [ 611.252101][ C1] fbcon_update_vcs+0x3a/0x50 [ 611.252104][ C1] fb_set_var+0xad0/0xd40 [ 611.252107][ C1] ? fb_blank+0x190/0x190 [ 611.252110][ C1] ? do_fb_ioctl+0x348/0x7d0 [ 611.252114][ C1] ? lock_acquire+0x197/0x420 [ 611.252117][ C1] ? do_fb_ioctl+0x335/0x7d0 [ 611.252120][ C1] do_fb_ioctl+0x390/0x7d0 [ 611.252123][ C1] ? fb_mmap+0x550/0x550 [ 611.252127][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 611.252131][ C1] ? do_wp_page+0x50b/0x13c0 [ 611.252134][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 611.252138][ C1] ? do_vfs_ioctl+0x506/0x12c0 [ 611.252141][ C1] ? up_read+0x1ab/0x750 [ 611.252144][ C1] ? mark_held_locks+0x9f/0xe0 [ 611.252147][ C1] fb_ioctl+0xdd/0x130 [ 611.252151][ C1] ? do_fb_ioctl+0x7d0/0x7d0 [ 611.252154][ C1] ksys_ioctl+0x11a/0x180 [ 611.252157][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 611.252161][ C1] ? lockdep_hardirqs_on+0x417/0x5d0 [ 611.252164][ C1] do_syscall_64+0xf6/0x7d0 [ 611.252168][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.252171][ C1] RIP: 0033:0x441419 [ 611.252181][ C1] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.252185][ C1] RSP: 002b:00007ffcaaa8f9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.252193][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 611.252198][ C1] RDX: 0000000020000340 RSI: 0000000000004601 RDI: 0000000000000003 [ 611.252203][ C1] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 611.252208][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 611.252213][ C1] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 611.252222][ T1137] Kernel panic - not syncing: hung_task: blocked tasks [ 611.252234][ T1137] CPU: 0 PID: 1137 Comm: khungtaskd Not tainted 5.6.0-rc5-syzkaller #0 [ 611.252240][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.252244][ T1137] Call Trace: [ 611.252257][ T1137] dump_stack+0x188/0x20d [ 611.252303][ T1137] panic+0x2e3/0x75c [ 611.252322][ T1137] ? add_taint.cold+0x16/0x16 [ 611.252343][ T1137] ? cpumask_next+0x3c/0x40 [ 611.252361][ T1137] ? printk_safe_flush+0xd9/0x120 [ 611.252379][ T1137] ? watchdog+0xa8c/0x1010 [ 611.252398][ T1137] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 611.252424][ T1137] watchdog+0xa9d/0x1010 [ 611.252452][ T1137] ? reset_hung_task_detector+0x30/0x30 [ 611.252468][ T1137] kthread+0x357/0x430 [ 611.252485][ T1137] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 611.252502][ T1137] ret_from_fork+0x24/0x30 [ 611.253830][ T1137] Kernel Offset: disabled [ 613.460612][ T1137] Rebooting in 86400 seconds..