[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 88.237941][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 88.237952][ T27] audit: type=1800 audit(1579233898.448:29): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 88.265029][ T27] audit: type=1800 audit(1579233898.448:30): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 532.672975][ T1129] INFO: task syz-executor197:9852 blocked for more than 143 seconds. [ 532.672999][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 532.673006][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.673013][ T1129] syz-executor197 D28296 9852 9850 0x00004004 [ 532.673094][ T1129] Call Trace: [ 532.673174][ T1129] __schedule+0x934/0x1f90 [ 532.673199][ T1129] ? __sched_text_start+0x8/0x8 [ 532.673233][ T1129] ? lock_downgrade+0x920/0x920 [ 532.673266][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 532.673290][ T1129] schedule+0xdc/0x2b0 [ 532.673311][ T1129] schedule_preempt_disabled+0x13/0x20 [ 532.673328][ T1129] __mutex_lock+0x7ab/0x13c0 [ 532.673401][ T1129] ? fb_open+0xd7/0x450 [ 532.673424][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 532.673459][ T1129] ? __kasan_check_write+0x14/0x20 [ 532.673478][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 532.673508][ T1129] ? chrdev_open+0xca/0x6b0 [ 532.673542][ T1129] mutex_lock_nested+0x16/0x20 [ 532.673560][ T1129] ? mutex_lock_nested+0x16/0x20 [ 532.673576][ T1129] fb_open+0xd7/0x450 [ 532.673596][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 532.673609][ T1129] chrdev_open+0x245/0x6b0 [ 532.673626][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.673682][ T1129] ? security_file_open+0x87/0x300 [ 532.673738][ T1129] do_dentry_open+0x4e6/0x1380 [ 532.673752][ T1129] ? __kasan_check_read+0x11/0x20 [ 532.673766][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.673789][ T1129] ? chown_common+0x5c0/0x5c0 [ 532.673807][ T1129] ? inode_permission+0xb4/0x520 [ 532.673834][ T1129] vfs_open+0xa0/0xd0 [ 532.673868][ T1129] path_openat+0x118b/0x3180 [ 532.673901][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 532.673914][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 532.673955][ T1129] ? __alloc_fd+0x487/0x620 [ 532.673978][ T1129] do_filp_open+0x1a1/0x280 [ 532.673997][ T1129] ? may_open_dev+0x100/0x100 [ 532.674027][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 532.674061][ T1129] do_sys_open+0x3fe/0x5d0 [ 532.674079][ T1129] ? filp_open+0x80/0x80 [ 532.674117][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.674134][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.674151][ T1129] ? do_syscall_64+0x26/0x790 [ 532.674184][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.674200][ T1129] ? do_syscall_64+0x26/0x790 [ 532.674219][ T1129] __x64_sys_openat+0x9d/0x100 [ 532.674239][ T1129] do_syscall_64+0xfa/0x790 [ 532.674260][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.674271][ T1129] RIP: 0033:0x441419 [ 532.674338][ T1129] Code: Bad RIP value. [ 532.674346][ T1129] RSP: 002b:00007ffe116310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.674362][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 532.674371][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 532.674381][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 532.674390][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 532.674399][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 532.674428][ T1129] INFO: task syz-executor197:9853 blocked for more than 143 seconds. [ 532.674437][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 532.674443][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.674449][ T1129] syz-executor197 D28296 9853 9851 0x00004004 [ 532.674472][ T1129] Call Trace: [ 532.674493][ T1129] __schedule+0x934/0x1f90 [ 532.674517][ T1129] ? __sched_text_start+0x8/0x8 [ 532.674530][ T1129] ? lock_downgrade+0x920/0x920 [ 532.674547][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 532.674571][ T1129] schedule+0xdc/0x2b0 [ 532.674592][ T1129] schedule_preempt_disabled+0x13/0x20 [ 532.674608][ T1129] __mutex_lock+0x7ab/0x13c0 [ 532.674627][ T1129] ? fb_open+0xd7/0x450 [ 532.674650][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 532.674667][ T1129] ? __kasan_check_write+0x14/0x20 [ 532.674684][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 532.674698][ T1129] ? chrdev_open+0xca/0x6b0 [ 532.674732][ T1129] mutex_lock_nested+0x16/0x20 [ 532.674750][ T1129] ? mutex_lock_nested+0x16/0x20 [ 532.674765][ T1129] fb_open+0xd7/0x450 [ 532.674785][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 532.674798][ T1129] chrdev_open+0x245/0x6b0 [ 532.674815][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.674840][ T1129] ? security_file_open+0x87/0x300 [ 532.674861][ T1129] do_dentry_open+0x4e6/0x1380 [ 532.674875][ T1129] ? __kasan_check_read+0x11/0x20 [ 532.674890][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.674912][ T1129] ? chown_common+0x5c0/0x5c0 [ 532.674931][ T1129] ? inode_permission+0xb4/0x520 [ 532.674951][ T1129] vfs_open+0xa0/0xd0 [ 532.674968][ T1129] path_openat+0x118b/0x3180 [ 532.675001][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 532.675014][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 532.675036][ T1129] ? __alloc_fd+0x487/0x620 [ 532.675059][ T1129] do_filp_open+0x1a1/0x280 [ 532.675078][ T1129] ? may_open_dev+0x100/0x100 [ 532.675108][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 532.675143][ T1129] do_sys_open+0x3fe/0x5d0 [ 532.675160][ T1129] ? filp_open+0x80/0x80 [ 532.675180][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.675198][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.675215][ T1129] ? do_syscall_64+0x26/0x790 [ 532.675231][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.675247][ T1129] ? do_syscall_64+0x26/0x790 [ 532.675266][ T1129] __x64_sys_openat+0x9d/0x100 [ 532.675286][ T1129] do_syscall_64+0xfa/0x790 [ 532.675307][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.675317][ T1129] RIP: 0033:0x441419 [ 532.675332][ T1129] Code: Bad RIP value. [ 532.675341][ T1129] RSP: 002b:00007ffe116310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.675355][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 532.675364][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 532.675373][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 532.675383][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 532.675392][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 532.675419][ T1129] INFO: task syz-executor197:9854 blocked for more than 143 seconds. [ 532.675428][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 532.675434][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.675447][ T1129] syz-executor197 D28296 9854 9849 0x00004004 [ 532.675466][ T1129] Call Trace: [ 532.675487][ T1129] __schedule+0x934/0x1f90 [ 532.675511][ T1129] ? __sched_text_start+0x8/0x8 [ 532.675524][ T1129] ? lock_downgrade+0x920/0x920 [ 532.675540][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 532.675564][ T1129] schedule+0xdc/0x2b0 [ 532.675585][ T1129] schedule_preempt_disabled+0x13/0x20 [ 532.675602][ T1129] __mutex_lock+0x7ab/0x13c0 [ 532.675621][ T1129] ? fb_open+0xd7/0x450 [ 532.675644][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 532.675661][ T1129] ? __kasan_check_write+0x14/0x20 [ 532.675679][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 532.675693][ T1129] ? chrdev_open+0xca/0x6b0 [ 532.675727][ T1129] mutex_lock_nested+0x16/0x20 [ 532.675744][ T1129] ? mutex_lock_nested+0x16/0x20 [ 532.675759][ T1129] fb_open+0xd7/0x450 [ 532.675779][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 532.675792][ T1129] chrdev_open+0x245/0x6b0 [ 532.675809][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.675833][ T1129] ? security_file_open+0x87/0x300 [ 532.675855][ T1129] do_dentry_open+0x4e6/0x1380 [ 532.675868][ T1129] ? __kasan_check_read+0x11/0x20 [ 532.675883][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.675906][ T1129] ? chown_common+0x5c0/0x5c0 [ 532.675925][ T1129] ? inode_permission+0xb4/0x520 [ 532.675944][ T1129] vfs_open+0xa0/0xd0 [ 532.675963][ T1129] path_openat+0x118b/0x3180 [ 532.675995][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 532.676008][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 532.676031][ T1129] ? __alloc_fd+0x487/0x620 [ 532.676054][ T1129] do_filp_open+0x1a1/0x280 [ 532.676074][ T1129] ? may_open_dev+0x100/0x100 [ 532.676104][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 532.676137][ T1129] do_sys_open+0x3fe/0x5d0 [ 532.676155][ T1129] ? filp_open+0x80/0x80 [ 532.676175][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.676193][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.676209][ T1129] ? do_syscall_64+0x26/0x790 [ 532.676225][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.676241][ T1129] ? do_syscall_64+0x26/0x790 [ 532.676260][ T1129] __x64_sys_openat+0x9d/0x100 [ 532.676280][ T1129] do_syscall_64+0xfa/0x790 [ 532.676301][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.676311][ T1129] RIP: 0033:0x441419 [ 532.676326][ T1129] Code: Bad RIP value. [ 532.676334][ T1129] RSP: 002b:00007ffe116310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.676348][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 532.676358][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 532.676367][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 532.676376][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 532.676385][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 532.676412][ T1129] INFO: task syz-executor197:9855 blocked for more than 143 seconds. [ 532.676421][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 532.676427][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.676433][ T1129] syz-executor197 D28296 9855 9848 0x00004004 [ 532.676454][ T1129] Call Trace: [ 532.676475][ T1129] __schedule+0x934/0x1f90 [ 532.676498][ T1129] ? __sched_text_start+0x8/0x8 [ 532.676511][ T1129] ? lock_downgrade+0x920/0x920 [ 532.676527][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 532.676551][ T1129] schedule+0xdc/0x2b0 [ 532.676572][ T1129] schedule_preempt_disabled+0x13/0x20 [ 532.676590][ T1129] __mutex_lock+0x7ab/0x13c0 [ 532.676609][ T1129] ? fb_open+0xd7/0x450 [ 532.676631][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 532.676648][ T1129] ? __kasan_check_write+0x14/0x20 [ 532.676666][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 532.676679][ T1129] ? chrdev_open+0xca/0x6b0 [ 532.676713][ T1129] mutex_lock_nested+0x16/0x20 [ 532.676731][ T1129] ? mutex_lock_nested+0x16/0x20 [ 532.676746][ T1129] fb_open+0xd7/0x450 [ 532.676765][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 532.676778][ T1129] chrdev_open+0x245/0x6b0 [ 532.676796][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.676815][ T1129] ? security_file_open+0x87/0x300 [ 532.676842][ T1129] do_dentry_open+0x4e6/0x1380 [ 532.676856][ T1129] ? __kasan_check_read+0x11/0x20 [ 532.676871][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.676893][ T1129] ? chown_common+0x5c0/0x5c0 [ 532.676911][ T1129] ? inode_permission+0xb4/0x520 [ 532.676929][ T1129] vfs_open+0xa0/0xd0 [ 532.676948][ T1129] path_openat+0x118b/0x3180 [ 532.676980][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 532.676999][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 532.677022][ T1129] ? __alloc_fd+0x487/0x620 [ 532.677045][ T1129] do_filp_open+0x1a1/0x280 [ 532.677064][ T1129] ? may_open_dev+0x100/0x100 [ 532.677094][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 532.677129][ T1129] do_sys_open+0x3fe/0x5d0 [ 532.677146][ T1129] ? filp_open+0x80/0x80 [ 532.677166][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.677184][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.677201][ T1129] ? do_syscall_64+0x26/0x790 [ 532.677216][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.677232][ T1129] ? do_syscall_64+0x26/0x790 [ 532.677251][ T1129] __x64_sys_openat+0x9d/0x100 [ 532.677271][ T1129] do_syscall_64+0xfa/0x790 [ 532.677291][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.677301][ T1129] RIP: 0033:0x441419 [ 532.677315][ T1129] Code: Bad RIP value. [ 532.677324][ T1129] RSP: 002b:00007ffe116310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.677337][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 532.677346][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 532.677355][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 532.677364][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 532.677374][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 532.677401][ T1129] INFO: task syz-executor197:9856 blocked for more than 143 seconds. [ 532.677409][ T1129] Not tainted 5.5.0-rc6-syzkaller #0 [ 532.677415][ T1129] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.677421][ T1129] syz-executor197 D28296 9856 9846 0x00004004 [ 532.677443][ T1129] Call Trace: [ 532.677463][ T1129] __schedule+0x934/0x1f90 [ 532.677488][ T1129] ? __sched_text_start+0x8/0x8 [ 532.677501][ T1129] ? lock_downgrade+0x920/0x920 [ 532.677518][ T1129] ? rwlock_bug.part.0+0x90/0x90 [ 532.677541][ T1129] schedule+0xdc/0x2b0 [ 532.677563][ T1129] schedule_preempt_disabled+0x13/0x20 [ 532.677580][ T1129] __mutex_lock+0x7ab/0x13c0 [ 532.677599][ T1129] ? fb_open+0xd7/0x450 [ 532.677621][ T1129] ? mutex_trylock+0x2d0/0x2d0 [ 532.677638][ T1129] ? __kasan_check_write+0x14/0x20 [ 532.677656][ T1129] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 532.677670][ T1129] ? chrdev_open+0xca/0x6b0 [ 532.677704][ T1129] mutex_lock_nested+0x16/0x20 [ 532.677722][ T1129] ? mutex_lock_nested+0x16/0x20 [ 532.677737][ T1129] fb_open+0xd7/0x450 [ 532.677757][ T1129] ? get_fb_info.part.0+0x80/0x80 [ 532.677770][ T1129] chrdev_open+0x245/0x6b0 [ 532.677788][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.677808][ T1129] ? security_file_open+0x87/0x300 [ 532.677835][ T1129] do_dentry_open+0x4e6/0x1380 [ 532.677848][ T1129] ? __kasan_check_read+0x11/0x20 [ 532.677863][ T1129] ? cdev_put.part.0+0x50/0x50 [ 532.677885][ T1129] ? chown_common+0x5c0/0x5c0 [ 532.677904][ T1129] ? inode_permission+0xb4/0x520 [ 532.677923][ T1129] vfs_open+0xa0/0xd0 [ 532.677942][ T1129] path_openat+0x118b/0x3180 [ 532.677974][ T1129] ? path_lookupat.isra.0+0x470/0x470 [ 532.677987][ T1129] ? __lock_acquire+0x16f2/0x4a00 [ 532.678009][ T1129] ? __alloc_fd+0x487/0x620 [ 532.678033][ T1129] do_filp_open+0x1a1/0x280 [ 532.678052][ T1129] ? may_open_dev+0x100/0x100 [ 532.678082][ T1129] ? do_raw_spin_unlock+0x181/0x270 [ 532.678116][ T1129] do_sys_open+0x3fe/0x5d0 [ 532.678134][ T1129] ? filp_open+0x80/0x80 [ 532.678153][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.678171][ T1129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 532.678188][ T1129] ? do_syscall_64+0x26/0x790 [ 532.678203][ T1129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.678220][ T1129] ? do_syscall_64+0x26/0x790 [ 532.678239][ T1129] __x64_sys_openat+0x9d/0x100 [ 532.678259][ T1129] do_syscall_64+0xfa/0x790 [ 532.678279][ T1129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.678289][ T1129] RIP: 0033:0x441419 [ 532.678305][ T1129] Code: Bad RIP value. [ 532.678313][ T1129] RSP: 002b:00007ffe116310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 532.678327][ T1129] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 532.678336][ T1129] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 532.678345][ T1129] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 532.678354][ T1129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 532.678363][ T1129] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 532.678386][ T1129] [ 532.678386][ T1129] Showing all locks held in the system: [ 532.678401][ T1129] 1 lock held by khungtaskd/1129: [ 532.678406][ T1129] #0: ffffffff899a3f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 532.678473][ T1129] 1 lock held by rsyslogd/9726: [ 532.678478][ T1129] #0: ffff88809fb518a0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 532.678509][ T1129] 2 locks held by getty/9816: [ 532.678514][ T1129] #0: ffff8880a8320090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678541][ T1129] #1: ffffc900017bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.678620][ T1129] 2 locks held by getty/9817: [ 532.678625][ T1129] #0: ffff88809741c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678651][ T1129] #1: ffffc900017fb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.678686][ T1129] 2 locks held by getty/9818: [ 532.678690][ T1129] #0: ffff8880a2430090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678716][ T1129] #1: ffffc900017eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.678751][ T1129] 2 locks held by getty/9819: [ 532.678756][ T1129] #0: ffff888092f98090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678782][ T1129] #1: ffffc9000181b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.678815][ T1129] 2 locks held by getty/9820: [ 532.678819][ T1129] #0: ffff88809ffb8090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678849][ T1129] #1: ffffc9000180b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.678884][ T1129] 2 locks held by getty/9821: [ 532.678889][ T1129] #0: ffff88809fd0d090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678915][ T1129] #1: ffffc9000178b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.678948][ T1129] 2 locks held by getty/9822: [ 532.678953][ T1129] #0: ffff88809791b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 532.678979][ T1129] #1: ffffc900017632e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 532.679015][ T1129] 2 locks held by syz-executor197/9847: [ 532.679025][ T1129] 1 lock held by syz-executor197/9852: [ 532.679029][ T1129] #0: ffff888218cf1070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 532.679062][ T1129] 1 lock held by syz-executor197/9853: [ 532.679067][ T1129] #0: ffff888218cf1070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 532.679100][ T1129] 1 lock held by syz-executor197/9854: [ 532.679104][ T1129] #0: ffff888218cf1070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 532.679137][ T1129] 1 lock held by syz-executor197/9855: [ 532.679142][ T1129] #0: ffff888218cf1070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 532.679174][ T1129] 1 lock held by syz-executor197/9856: [ 532.679179][ T1129] #0: ffff888218cf1070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 532.679207][ T1129] [ 532.679212][ T1129] ============================================= [ 532.679212][ T1129] [ 532.679220][ T1129] NMI backtrace for cpu 1 [ 532.679234][ T1129] CPU: 1 PID: 1129 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 532.679265][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.679269][ T1129] Call Trace: [ 532.679303][ T1129] dump_stack+0x197/0x210 [ 532.679326][ T1129] nmi_cpu_backtrace.cold+0x70/0xb2 [ 532.679368][ T1129] ? vprintk_func+0x86/0x189 [ 532.679407][ T1129] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 532.679426][ T1129] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 532.679448][ T1129] arch_trigger_cpumask_backtrace+0x14/0x20 [ 532.679491][ T1129] watchdog+0xb11/0x10c0 [ 532.679530][ T1129] kthread+0x361/0x430 [ 532.679547][ T1129] ? reset_hung_task_detector+0x30/0x30 [ 532.679560][ T1129] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 532.679577][ T1129] ret_from_fork+0x24/0x30 [ 532.679602][ T1129] Sending NMI from CPU 1 to CPUs 0: [ 532.680382][ C0] NMI backtrace for cpu 0 [ 532.680389][ C0] CPU: 0 PID: 9847 Comm: syz-executor197 Not tainted 5.5.0-rc6-syzkaller #0 [ 532.680396][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.680400][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x1/0x20 [ 532.680412][ C0] Code: 5d c3 0f 1f 80 00 00 00 00 55 0f b7 d6 0f b7 f7 bf 02 00 00 00 48 89 e5 48 8b 4d 08 e8 58 ff ff ff 5d c3 66 0f 1f 44 00 00 55 <89> f2 89 fe bf 04 00 00 00 48 89 e5 48 8b 4d 08 e8 3a ff ff ff 5d [ 532.680417][ C0] RSP: 0018:ffffc900020d7398 EFLAGS: 00000286 [ 532.680425][ C0] RAX: ffff888090c185c0 RBX: 0000000000000050 RCX: ffffffff83c53210 [ 532.680430][ C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000050 [ 532.680436][ C0] RBP: ffffc900020d7408 R08: ffff888090c185c0 R09: ffffed10147cf684 [ 532.680441][ C0] R10: ffffed10147cf683 R11: ffff8880a3e7b41f R12: 0000000000000005 [ 532.680447][ C0] R13: ffff8880000a0005 R14: ffff8880000a0000 R15: 0000000000000000 [ 532.680453][ C0] FS: 0000000001e1e880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 532.680458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.680464][ C0] CR2: 00000000006cb090 CR3: 000000009e07c000 CR4: 00000000001406f0 [ 532.680469][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.680475][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 532.680478][ C0] Call Trace: [ 532.680482][ C0] ? vga16fb_fillrect+0xa20/0x19b0 [ 532.680485][ C0] bit_clear_margins+0x30b/0x530 [ 532.680489][ C0] ? bit_bmove+0x270/0x270 [ 532.680492][ C0] ? efifb_probe.cold+0x181f/0x181f [ 532.680496][ C0] fbcon_clear_margins+0x1e9/0x250 [ 532.680499][ C0] fbcon_switch+0xd7f/0x17f0 [ 532.680503][ C0] ? fbcon_set_def_font+0x360/0x360 [ 532.680507][ C0] ? fbcon_cursor+0x48c/0x660 [ 532.680511][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.680515][ C0] ? fbcon_set_origin+0x2b/0x50 [ 532.680519][ C0] ? fbcon_scrolldelta+0x1220/0x1220 [ 532.680524][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.680527][ C0] redraw_screen+0x2b6/0x7d0 [ 532.680531][ C0] ? efifb_probe.cold+0x181f/0x181f [ 532.680534][ C0] ? respond_string+0x2c0/0x2c0 [ 532.680538][ C0] ? fbcon_set_palette+0x3c4/0x4a0 [ 532.680542][ C0] fbcon_modechanged+0x5c3/0x790 [ 532.680545][ C0] fbcon_update_vcs+0x42/0x50 [ 532.680549][ C0] fb_set_var+0xb32/0xdd0 [ 532.680552][ C0] ? fb_blank+0x1a0/0x1a0 [ 532.680555][ C0] ? lock_acquire+0x190/0x410 [ 532.680559][ C0] ? __mutex_lock+0x458/0x13c0 [ 532.680562][ C0] ? down+0x50/0x90 [ 532.680565][ C0] ? do_fb_ioctl+0x335/0x7d0 [ 532.680569][ C0] do_fb_ioctl+0x390/0x7d0 [ 532.680572][ C0] ? fb_mmap+0x520/0x520 [ 532.680576][ C0] ? tomoyo_path_number_perm+0x214/0x520 [ 532.680580][ C0] ? find_held_lock+0x35/0x130 [ 532.680584][ C0] ? tomoyo_path_number_perm+0x214/0x520 [ 532.680587][ C0] ? lock_downgrade+0x920/0x920 [ 532.680591][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 532.680595][ C0] ? tomoyo_path_number_perm+0x454/0x520 [ 532.680599][ C0] ? __do_page_fault+0x56a/0xd80 [ 532.680602][ C0] fb_ioctl+0xe6/0x130 [ 532.680605][ C0] ? do_fb_ioctl+0x7d0/0x7d0 [ 532.680609][ C0] do_vfs_ioctl+0x977/0x14e0 [ 532.680613][ C0] ? compat_ioctl_preallocate+0x220/0x220 [ 532.680616][ C0] ? __kasan_check_write+0x14/0x20 [ 532.680619][ C0] ? up_read+0x1cd/0x810 [ 532.680622][ C0] ? tomoyo_file_ioctl+0x23/0x30 [ 532.680625][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.680628][ C0] ? security_file_ioctl+0x8d/0xc0 [ 532.680631][ C0] ksys_ioctl+0xab/0xd0 [ 532.680634][ C0] __x64_sys_ioctl+0x73/0xb0 [ 532.680637][ C0] do_syscall_64+0xfa/0x790 [ 532.680641][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.680643][ C0] RIP: 0033:0x441419 [ 532.680654][ C0] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.680657][ C0] RSP: 002b:00007ffe116310b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.680665][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 532.680670][ C0] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 532.680674][ C0] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 532.680679][ C0] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 532.680684][ C0] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 532.680694][ T1129] Kernel panic - not syncing: hung_task: blocked tasks [ 532.680706][ T1129] CPU: 1 PID: 1129 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 532.680713][ T1129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.680717][ T1129] Call Trace: [ 532.680733][ T1129] dump_stack+0x197/0x210 [ 532.680775][ T1129] panic+0x2e3/0x75c [ 532.680791][ T1129] ? add_taint.cold+0x16/0x16 [ 532.680809][ T1129] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 532.680825][ T1129] ? printk_safe_flush+0xf2/0x140 [ 532.680846][ T1129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.680867][ T1129] ? nmi_trigger_cpumask_backtrace+0x224/0x28b [ 532.680885][ T1129] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 532.680904][ T1129] watchdog+0xb22/0x10c0 [ 532.680925][ T1129] kthread+0x361/0x430 [ 532.680941][ T1129] ? reset_hung_task_detector+0x30/0x30 [ 532.680954][ T1129] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 532.680971][ T1129] ret_from_fork+0x24/0x30 [ 532.682517][ T1129] Kernel Offset: disabled [ 535.083681][ T1129] Rebooting in 86400 seconds..