Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 554.470765][ T910] INFO: task syz-executor050:9772 blocked for more than 143 seconds. [ 554.470787][ T910] Not tainted 5.5.0-rc7-syzkaller #0 [ 554.470793][ T910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.470801][ T910] syz-executor050 D28280 9772 9768 0x20020004 [ 554.470884][ T910] Call Trace: [ 554.470940][ T910] __schedule+0x934/0x1f90 [ 554.470966][ T910] ? __sched_text_start+0x8/0x8 [ 554.471012][ T910] ? lock_downgrade+0x920/0x920 [ 554.471030][ T910] ? rwlock_bug.part.0+0x90/0x90 [ 554.471054][ T910] schedule+0xdc/0x2b0 [ 554.471076][ T910] schedule_preempt_disabled+0x13/0x20 [ 554.471123][ T910] __mutex_lock+0x7ab/0x13c0 [ 554.471166][ T910] ? fb_open+0xd7/0x450 [ 554.471188][ T910] ? mutex_trylock+0x2d0/0x2d0 [ 554.471226][ T910] ? __kasan_check_write+0x14/0x20 [ 554.471246][ T910] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 554.471280][ T910] ? chrdev_open+0xca/0x6b0 [ 554.471311][ T910] mutex_lock_nested+0x16/0x20 [ 554.471325][ T910] ? mutex_lock_nested+0x16/0x20 [ 554.471340][ T910] fb_open+0xd7/0x450 [ 554.471360][ T910] ? get_fb_info.part.0+0x80/0x80 [ 554.471374][ T910] chrdev_open+0x245/0x6b0 [ 554.471392][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.471435][ T910] ? security_file_open+0x87/0x300 [ 554.471476][ T910] do_dentry_open+0x4e6/0x1380 [ 554.471490][ T910] ? __kasan_check_read+0x11/0x20 [ 554.471505][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.471527][ T910] ? chown_common+0x5c0/0x5c0 [ 554.471567][ T910] ? inode_permission+0xb4/0x520 [ 554.471593][ T910] vfs_open+0xa0/0xd0 [ 554.471612][ T910] path_openat+0x118b/0x3180 [ 554.471645][ T910] ? path_lookupat.isra.0+0x470/0x470 [ 554.471658][ T910] ? __lock_acquire+0x16f2/0x4a00 [ 554.471687][ T910] ? __alloc_fd+0x487/0x620 [ 554.471711][ T910] do_filp_open+0x1a1/0x280 [ 554.471731][ T910] ? may_open_dev+0x100/0x100 [ 554.471761][ T910] ? do_raw_spin_unlock+0x181/0x270 [ 554.471796][ T910] do_sys_open+0x3fe/0x5d0 [ 554.471814][ T910] ? filp_open+0x80/0x80 [ 554.471859][ T910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 554.471878][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.471894][ T910] ? entry_SYSENTER_compat+0x70/0x7f [ 554.471911][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.471931][ T910] __ia32_compat_sys_openat+0x98/0xf0 [ 554.471952][ T910] do_fast_syscall_32+0x27b/0xe16 [ 554.471975][ T910] entry_SYSENTER_compat+0x70/0x7f [ 554.471987][ T910] RIP: 0023:0xf7f2c9a9 [ 554.472035][ T910] Code: Bad RIP value. [ 554.472044][ T910] RSP: 002b:00000000ffaeff0c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 554.472059][ T910] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 554.472068][ T910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 554.472078][ T910] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 554.472086][ T910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.472095][ T910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.472124][ T910] INFO: task syz-executor050:9773 blocked for more than 143 seconds. [ 554.472132][ T910] Not tainted 5.5.0-rc7-syzkaller #0 [ 554.472139][ T910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.472145][ T910] syz-executor050 D28280 9773 9771 0x20024004 [ 554.472168][ T910] Call Trace: [ 554.472189][ T910] __schedule+0x934/0x1f90 [ 554.472214][ T910] ? __sched_text_start+0x8/0x8 [ 554.472227][ T910] ? lock_downgrade+0x920/0x920 [ 554.472244][ T910] ? rwlock_bug.part.0+0x90/0x90 [ 554.472268][ T910] schedule+0xdc/0x2b0 [ 554.472289][ T910] schedule_preempt_disabled+0x13/0x20 [ 554.472303][ T910] __mutex_lock+0x7ab/0x13c0 [ 554.472322][ T910] ? fb_open+0xd7/0x450 [ 554.472341][ T910] ? mutex_trylock+0x2d0/0x2d0 [ 554.472358][ T910] ? __kasan_check_write+0x14/0x20 [ 554.472376][ T910] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 554.472390][ T910] ? chrdev_open+0xca/0x6b0 [ 554.472420][ T910] mutex_lock_nested+0x16/0x20 [ 554.472434][ T910] ? mutex_lock_nested+0x16/0x20 [ 554.472450][ T910] fb_open+0xd7/0x450 [ 554.472470][ T910] ? get_fb_info.part.0+0x80/0x80 [ 554.472484][ T910] chrdev_open+0x245/0x6b0 [ 554.472501][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.472521][ T910] ? security_file_open+0x87/0x300 [ 554.472543][ T910] do_dentry_open+0x4e6/0x1380 [ 554.472557][ T910] ? __kasan_check_read+0x11/0x20 [ 554.472572][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.472600][ T910] ? chown_common+0x5c0/0x5c0 [ 554.472619][ T910] ? inode_permission+0xb4/0x520 [ 554.472639][ T910] vfs_open+0xa0/0xd0 [ 554.472658][ T910] path_openat+0x118b/0x3180 [ 554.472690][ T910] ? path_lookupat.isra.0+0x470/0x470 [ 554.472704][ T910] ? __lock_acquire+0x16f2/0x4a00 [ 554.472726][ T910] ? __alloc_fd+0x487/0x620 [ 554.472750][ T910] do_filp_open+0x1a1/0x280 [ 554.472770][ T910] ? may_open_dev+0x100/0x100 [ 554.472800][ T910] ? do_raw_spin_unlock+0x181/0x270 [ 554.472835][ T910] do_sys_open+0x3fe/0x5d0 [ 554.472853][ T910] ? filp_open+0x80/0x80 [ 554.472875][ T910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 554.472892][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.472908][ T910] ? entry_SYSENTER_compat+0x70/0x7f [ 554.472925][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.472945][ T910] __ia32_compat_sys_openat+0x98/0xf0 [ 554.472966][ T910] do_fast_syscall_32+0x27b/0xe16 [ 554.472988][ T910] entry_SYSENTER_compat+0x70/0x7f [ 554.472999][ T910] RIP: 0023:0xf7f2c9a9 [ 554.473009][ T910] Code: Bad RIP value. [ 554.473018][ T910] RSP: 002b:00000000ffaeff0c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 554.473032][ T910] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 554.473041][ T910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 554.473051][ T910] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 554.473060][ T910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.473068][ T910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.473095][ T910] INFO: task syz-executor050:9774 blocked for more than 143 seconds. [ 554.473104][ T910] Not tainted 5.5.0-rc7-syzkaller #0 [ 554.473110][ T910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.473117][ T910] syz-executor050 D28280 9774 9770 0x20024004 [ 554.473138][ T910] Call Trace: [ 554.473160][ T910] __schedule+0x934/0x1f90 [ 554.473184][ T910] ? __sched_text_start+0x8/0x8 [ 554.473198][ T910] ? lock_downgrade+0x920/0x920 [ 554.473214][ T910] ? rwlock_bug.part.0+0x90/0x90 [ 554.473238][ T910] schedule+0xdc/0x2b0 [ 554.473260][ T910] schedule_preempt_disabled+0x13/0x20 [ 554.473273][ T910] __mutex_lock+0x7ab/0x13c0 [ 554.473292][ T910] ? fb_open+0xd7/0x450 [ 554.473311][ T910] ? mutex_trylock+0x2d0/0x2d0 [ 554.473328][ T910] ? __kasan_check_write+0x14/0x20 [ 554.473347][ T910] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 554.473361][ T910] ? chrdev_open+0xca/0x6b0 [ 554.473391][ T910] mutex_lock_nested+0x16/0x20 [ 554.473405][ T910] ? mutex_lock_nested+0x16/0x20 [ 554.473420][ T910] fb_open+0xd7/0x450 [ 554.473440][ T910] ? get_fb_info.part.0+0x80/0x80 [ 554.473454][ T910] chrdev_open+0x245/0x6b0 [ 554.473471][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.473491][ T910] ? security_file_open+0x87/0x300 [ 554.473513][ T910] do_dentry_open+0x4e6/0x1380 [ 554.473527][ T910] ? __kasan_check_read+0x11/0x20 [ 554.473541][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.473564][ T910] ? chown_common+0x5c0/0x5c0 [ 554.473588][ T910] ? inode_permission+0xb4/0x520 [ 554.473609][ T910] vfs_open+0xa0/0xd0 [ 554.473627][ T910] path_openat+0x118b/0x3180 [ 554.473660][ T910] ? path_lookupat.isra.0+0x470/0x470 [ 554.473673][ T910] ? __lock_acquire+0x16f2/0x4a00 [ 554.473696][ T910] ? __alloc_fd+0x487/0x620 [ 554.473719][ T910] do_filp_open+0x1a1/0x280 [ 554.473739][ T910] ? may_open_dev+0x100/0x100 [ 554.473769][ T910] ? do_raw_spin_unlock+0x181/0x270 [ 554.473804][ T910] do_sys_open+0x3fe/0x5d0 [ 554.473822][ T910] ? filp_open+0x80/0x80 [ 554.473844][ T910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 554.473861][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.473877][ T910] ? entry_SYSENTER_compat+0x70/0x7f [ 554.473894][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.473914][ T910] __ia32_compat_sys_openat+0x98/0xf0 [ 554.473935][ T910] do_fast_syscall_32+0x27b/0xe16 [ 554.473958][ T910] entry_SYSENTER_compat+0x70/0x7f [ 554.473968][ T910] RIP: 0023:0xf7f2c9a9 [ 554.473978][ T910] Code: Bad RIP value. [ 554.473986][ T910] RSP: 002b:00000000ffaeff0c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 554.474001][ T910] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 554.474010][ T910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 554.474019][ T910] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 554.474028][ T910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.474036][ T910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.474064][ T910] INFO: task syz-executor050:9775 blocked for more than 143 seconds. [ 554.474073][ T910] Not tainted 5.5.0-rc7-syzkaller #0 [ 554.474079][ T910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.474084][ T910] syz-executor050 D28248 9775 9766 0x20020004 [ 554.474106][ T910] Call Trace: [ 554.474127][ T910] __schedule+0x934/0x1f90 [ 554.474152][ T910] ? __sched_text_start+0x8/0x8 [ 554.474165][ T910] ? lock_downgrade+0x920/0x920 [ 554.474182][ T910] ? rwlock_bug.part.0+0x90/0x90 [ 554.474206][ T910] schedule+0xdc/0x2b0 [ 554.474227][ T910] schedule_preempt_disabled+0x13/0x20 [ 554.474241][ T910] __mutex_lock+0x7ab/0x13c0 [ 554.474260][ T910] ? fb_open+0xd7/0x450 [ 554.474279][ T910] ? mutex_trylock+0x2d0/0x2d0 [ 554.474296][ T910] ? __kasan_check_write+0x14/0x20 [ 554.474314][ T910] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 554.474328][ T910] ? chrdev_open+0xca/0x6b0 [ 554.474358][ T910] mutex_lock_nested+0x16/0x20 [ 554.474372][ T910] ? mutex_lock_nested+0x16/0x20 [ 554.474388][ T910] fb_open+0xd7/0x450 [ 554.474408][ T910] ? get_fb_info.part.0+0x80/0x80 [ 554.474421][ T910] chrdev_open+0x245/0x6b0 [ 554.474439][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.474458][ T910] ? security_file_open+0x87/0x300 [ 554.474480][ T910] do_dentry_open+0x4e6/0x1380 [ 554.474494][ T910] ? __kasan_check_read+0x11/0x20 [ 554.474509][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.474532][ T910] ? chown_common+0x5c0/0x5c0 [ 554.474551][ T910] ? inode_permission+0xb4/0x520 [ 554.474571][ T910] vfs_open+0xa0/0xd0 [ 554.474594][ T910] path_openat+0x118b/0x3180 [ 554.474627][ T910] ? path_lookupat.isra.0+0x470/0x470 [ 554.474640][ T910] ? __lock_acquire+0x16f2/0x4a00 [ 554.474663][ T910] ? __alloc_fd+0x487/0x620 [ 554.474687][ T910] do_filp_open+0x1a1/0x280 [ 554.474706][ T910] ? may_open_dev+0x100/0x100 [ 554.474736][ T910] ? do_raw_spin_unlock+0x181/0x270 [ 554.474771][ T910] do_sys_open+0x3fe/0x5d0 [ 554.474789][ T910] ? filp_open+0x80/0x80 [ 554.474811][ T910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 554.474828][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.474844][ T910] ? entry_SYSENTER_compat+0x70/0x7f [ 554.474861][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.474881][ T910] __ia32_compat_sys_openat+0x98/0xf0 [ 554.474902][ T910] do_fast_syscall_32+0x27b/0xe16 [ 554.474925][ T910] entry_SYSENTER_compat+0x70/0x7f [ 554.474935][ T910] RIP: 0023:0xf7f2c9a9 [ 554.474945][ T910] Code: Bad RIP value. [ 554.474953][ T910] RSP: 002b:00000000ffaeff0c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 554.474968][ T910] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 554.474977][ T910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 554.474986][ T910] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 554.474995][ T910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.475004][ T910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.475031][ T910] INFO: task syz-executor050:9776 blocked for more than 143 seconds. [ 554.475040][ T910] Not tainted 5.5.0-rc7-syzkaller #0 [ 554.475046][ T910] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.475053][ T910] syz-executor050 D28280 9776 9769 0x20020004 [ 554.475073][ T910] Call Trace: [ 554.475094][ T910] __schedule+0x934/0x1f90 [ 554.475118][ T910] ? __sched_text_start+0x8/0x8 [ 554.475131][ T910] ? lock_downgrade+0x920/0x920 [ 554.475148][ T910] ? rwlock_bug.part.0+0x90/0x90 [ 554.475172][ T910] schedule+0xdc/0x2b0 [ 554.475193][ T910] schedule_preempt_disabled+0x13/0x20 [ 554.475207][ T910] __mutex_lock+0x7ab/0x13c0 [ 554.475226][ T910] ? fb_open+0xd7/0x450 [ 554.475245][ T910] ? mutex_trylock+0x2d0/0x2d0 [ 554.475262][ T910] ? __kasan_check_write+0x14/0x20 [ 554.475280][ T910] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 554.475294][ T910] ? chrdev_open+0xca/0x6b0 [ 554.475325][ T910] mutex_lock_nested+0x16/0x20 [ 554.475339][ T910] ? mutex_lock_nested+0x16/0x20 [ 554.475355][ T910] fb_open+0xd7/0x450 [ 554.475375][ T910] ? get_fb_info.part.0+0x80/0x80 [ 554.475388][ T910] chrdev_open+0x245/0x6b0 [ 554.475405][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.475425][ T910] ? security_file_open+0x87/0x300 [ 554.475447][ T910] do_dentry_open+0x4e6/0x1380 [ 554.475461][ T910] ? __kasan_check_read+0x11/0x20 [ 554.475476][ T910] ? cdev_put.part.0+0x50/0x50 [ 554.475499][ T910] ? chown_common+0x5c0/0x5c0 [ 554.475517][ T910] ? inode_permission+0xb4/0x520 [ 554.475537][ T910] vfs_open+0xa0/0xd0 [ 554.475556][ T910] path_openat+0x118b/0x3180 [ 554.475593][ T910] ? path_lookupat.isra.0+0x470/0x470 [ 554.475607][ T910] ? __lock_acquire+0x16f2/0x4a00 [ 554.475635][ T910] ? __alloc_fd+0x487/0x620 [ 554.475659][ T910] do_filp_open+0x1a1/0x280 [ 554.475678][ T910] ? may_open_dev+0x100/0x100 [ 554.475709][ T910] ? do_raw_spin_unlock+0x181/0x270 [ 554.475743][ T910] do_sys_open+0x3fe/0x5d0 [ 554.475762][ T910] ? filp_open+0x80/0x80 [ 554.475783][ T910] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 554.475801][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.475817][ T910] ? entry_SYSENTER_compat+0x70/0x7f [ 554.475834][ T910] ? do_fast_syscall_32+0xd1/0xe16 [ 554.475854][ T910] __ia32_compat_sys_openat+0x98/0xf0 [ 554.475876][ T910] do_fast_syscall_32+0x27b/0xe16 [ 554.475898][ T910] entry_SYSENTER_compat+0x70/0x7f [ 554.475909][ T910] RIP: 0023:0xf7f2c9a9 [ 554.475919][ T910] Code: Bad RIP value. [ 554.475927][ T910] RSP: 002b:00000000ffaeff0c EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 554.475941][ T910] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 554.475950][ T910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 554.475959][ T910] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 554.475968][ T910] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.475977][ T910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.476001][ T910] [ 554.476001][ T910] Showing all locks held in the system: [ 554.476015][ T910] 1 lock held by khungtaskd/910: [ 554.476020][ T910] #0: ffffffff899a3dc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 554.476079][ T910] 1 lock held by rsyslogd/9649: [ 554.476084][ T910] #0: ffff8880a6c388e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 554.476116][ T910] 2 locks held by getty/9739: [ 554.476121][ T910] #0: ffff8880a810e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476148][ T910] #1: ffffc900017272e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476212][ T910] 2 locks held by getty/9740: [ 554.476217][ T910] #0: ffff888098590090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476244][ T910] #1: ffffc9000179b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476278][ T910] 2 locks held by getty/9741: [ 554.476283][ T910] #0: ffff888097a03090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476310][ T910] #1: ffffc9000173b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476344][ T910] 2 locks held by getty/9742: [ 554.476349][ T910] #0: ffff8880980f0090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476375][ T910] #1: ffffc9000171f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476410][ T910] 2 locks held by getty/9743: [ 554.476415][ T910] #0: ffff88809e450090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476441][ T910] #1: ffffc9000176b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476476][ T910] 2 locks held by getty/9744: [ 554.476481][ T910] #0: ffff8880a74db090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476507][ T910] #1: ffffc9000178b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476542][ T910] 2 locks held by getty/9745: [ 554.476546][ T910] #0: ffff8880a3437090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 554.476573][ T910] #1: ffffc900016eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 554.476614][ T910] 2 locks held by syz-executor050/9767: [ 554.476624][ T910] 1 lock held by syz-executor050/9772: [ 554.476629][ T910] #0: ffff8880a3f71070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 554.476662][ T910] 1 lock held by syz-executor050/9773: [ 554.476667][ T910] #0: ffff8880a3f71070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 554.476699][ T910] 1 lock held by syz-executor050/9774: [ 554.476704][ T910] #0: ffff8880a3f71070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 554.476737][ T910] 1 lock held by syz-executor050/9775: [ 554.476742][ T910] #0: ffff8880a3f71070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 554.476775][ T910] 1 lock held by syz-executor050/9776: [ 554.476780][ T910] #0: ffff8880a3f71070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 554.476808][ T910] [ 554.476814][ T910] ============================================= [ 554.476814][ T910] [ 554.476822][ T910] NMI backtrace for cpu 0 [ 554.476837][ T910] CPU: 0 PID: 910 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 554.476868][ T910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.476872][ T910] Call Trace: [ 554.476928][ T910] dump_stack+0x197/0x210 [ 554.476953][ T910] nmi_cpu_backtrace.cold+0x70/0xb2 [ 554.476986][ T910] ? vprintk_func+0x86/0x189 [ 554.477045][ T910] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 554.477065][ T910] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 554.477085][ T910] arch_trigger_cpumask_backtrace+0x14/0x20 [ 554.477135][ T910] watchdog+0xb11/0x10c0 [ 554.477175][ T910] kthread+0x361/0x430 [ 554.477192][ T910] ? reset_hung_task_detector+0x30/0x30 [ 554.477206][ T910] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 554.477223][ T910] ret_from_fork+0x24/0x30 [ 554.477249][ T910] Sending NMI from CPU 0 to CPUs 1: [ 554.478564][ C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.121 msecs [ 554.478599][ C1] NMI backtrace for cpu 1 [ 554.478606][ C1] CPU: 1 PID: 9767 Comm: syz-executor050 Not tainted 5.5.0-rc7-syzkaller #0 [ 554.478613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.478618][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 554.478630][ C1] Code: 8b 80 98 13 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 65 48 8b 04 25 c0 1e 02 00 65 8b 15 14 27 8d 7e <81> e2 00 01 1f 00 48 8b 75 08 75 2b 8b 90 80 13 00 00 83 fa 02 75 [ 554.478635][ C1] RSP: 0018:ffffc900020cee90 EFLAGS: 00000216 [ 554.478644][ C1] RAX: ffff888095bd8300 RBX: 0000000000000050 RCX: ffffffff83c542c0 [ 554.478650][ C1] RDX: 0000000080000000 RSI: 0000000000000050 RDI: 0000000000000004 [ 554.478655][ C1] RBP: ffffc900020cee90 R08: ffff888095bd8300 R09: ffffed10147b4174 [ 554.478662][ C1] R10: ffffed10147b4173 R11: ffff8880a3da0b9f R12: 000000000000002e [ 554.478667][ C1] R13: ffff8880000a002e R14: ffff8880000a0000 R15: 0000000000000000 [ 554.478673][ C1] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:00000000087fc840 [ 554.478679][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 554.478684][ C1] CR2: 0000000020000180 CR3: 00000000a0157000 CR4: 00000000001406e0 [ 554.478689][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 554.478695][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 554.478698][ C1] Call Trace: [ 554.478702][ C1] vga16fb_fillrect+0xa0a/0x19b0 [ 554.478705][ C1] bit_clear_margins+0x30b/0x530 [ 554.478708][ C1] ? bit_bmove+0x270/0x270 [ 554.478712][ C1] ? efifb_probe.cold+0x181f/0x181f [ 554.478716][ C1] fbcon_clear_margins+0x1e9/0x250 [ 554.478720][ C1] fbcon_switch+0xd7f/0x17f0 [ 554.478724][ C1] ? fbcon_set_def_font+0x360/0x360 [ 554.478727][ C1] ? fbcon_cursor+0x48c/0x660 [ 554.478732][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.478736][ C1] ? fbcon_set_origin+0x2b/0x50 [ 554.478739][ C1] ? fbcon_scrolldelta+0x1220/0x1220 [ 554.478744][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.478748][ C1] redraw_screen+0x2b6/0x7d0 [ 554.478751][ C1] ? efifb_probe.cold+0x181f/0x181f [ 554.478755][ C1] ? respond_string+0x2c0/0x2c0 [ 554.478759][ C1] ? fbcon_set_palette+0x3c4/0x4a0 [ 554.478764][ C1] fbcon_modechanged+0x5c3/0x790 [ 554.478767][ C1] fbcon_update_vcs+0x42/0x50 [ 554.478771][ C1] fb_set_var+0xb32/0xdd0 [ 554.478775][ C1] ? fb_blank+0x1a0/0x1a0 [ 554.478780][ C1] ? __raw_callee_save___kvm_vcpu_is_preempted+0x20/0x20 [ 554.478783][ C1] ? vga16fb_imageblit+0x758/0x2200 [ 554.478787][ C1] ? vga16fb_imageblit+0x766/0x2200 [ 554.478791][ C1] ? vga16fb_imageblit+0x771/0x2200 [ 554.478795][ C1] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 554.478799][ C1] ? vga16fb_imageblit+0x1eb/0x2200 [ 554.478803][ C1] ? bit_cursor+0xaf6/0x1a60 [ 554.478806][ C1] ? fb_videomode_to_var+0x14/0x630 [ 554.478810][ C1] fbcon_switch+0x556/0x17f0 [ 554.478814][ C1] ? fbcon_set_def_font+0x360/0x360 [ 554.478817][ C1] ? fbcon_cursor+0x48c/0x660 [ 554.478822][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.478825][ C1] ? fbcon_set_origin+0x2b/0x50 [ 554.478829][ C1] ? fbcon_scrolldelta+0x1220/0x1220 [ 554.478834][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.478837][ C1] redraw_screen+0x2b6/0x7d0 [ 554.478841][ C1] ? efifb_probe.cold+0x181f/0x181f [ 554.478845][ C1] ? respond_string+0x2c0/0x2c0 [ 554.478849][ C1] ? fbcon_set_palette+0x3c4/0x4a0 [ 554.478852][ C1] fbcon_modechanged+0x5c3/0x790 [ 554.478856][ C1] fbcon_set_all_vcs+0x3cc/0x480 [ 554.478859][ C1] fbcon_update_vcs+0x2b/0x50 [ 554.478863][ C1] fb_set_var+0xb32/0xdd0 [ 554.478866][ C1] ? fb_blank+0x1a0/0x1a0 [ 554.478869][ C1] ? lock_acquire+0x190/0x410 [ 554.478873][ C1] ? __mutex_lock+0x458/0x13c0 [ 554.478876][ C1] ? down+0x50/0x90 [ 554.478879][ C1] ? do_fb_ioctl+0x335/0x7d0 [ 554.478883][ C1] do_fb_ioctl+0x390/0x7d0 [ 554.478886][ C1] ? fb_mmap+0x520/0x520 [ 554.478890][ C1] ? lockdep_hardirqs_on+0x421/0x5e0 [ 554.478894][ C1] ? tomoyo_path_number_perm+0x454/0x520 [ 554.478898][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 554.478902][ C1] ? tomoyo_path_number_perm+0x25e/0x520 [ 554.478907][ C1] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 554.478910][ C1] fb_compat_ioctl+0x305/0xc50 [ 554.478914][ C1] ? fb_release+0x150/0x150 [ 554.478917][ C1] ? do_sys_open+0x31d/0x5d0 [ 554.478921][ C1] ? tomoyo_file_ioctl+0x23/0x30 [ 554.478925][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 554.478930][ C1] ? security_file_ioctl+0x8d/0xc0 [ 554.478934][ C1] __ia32_compat_sys_ioctl+0x233/0x610 [ 554.478937][ C1] ? fb_release+0x150/0x150 [ 554.478941][ C1] do_fast_syscall_32+0x27b/0xe16 [ 554.478945][ C1] entry_SYSENTER_compat+0x70/0x7f [ 554.478948][ C1] RIP: 0023:0xf7f2c9a9 [ 554.478960][ C1] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 554.478964][ C1] RSP: 002b:00000000ffaeff1c EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.478974][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 554.478980][ C1] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 00000000ffaf0034 [ 554.478985][ C1] RBP: 00000000ffaf003c R08: 0000000000000000 R09: 0000000000000000 [ 554.478991][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 554.478996][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 554.486299][ T910] Kernel panic - not syncing: hung_task: blocked tasks [ 554.486320][ T910] CPU: 0 PID: 910 Comm: khungtaskd Not tainted 5.5.0-rc7-syzkaller #0 [ 554.486329][ T910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.486339][ T910] Call Trace: [ 554.486363][ T910] dump_stack+0x197/0x210 [ 554.486442][ T910] panic+0x2e3/0x75c [ 554.486459][ T910] ? add_taint.cold+0x16/0x16 [ 554.486478][ T910] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 554.486499][ T910] ? ___preempt_schedule+0x16/0x18 [ 554.486521][ T910] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 554.486540][ T910] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 554.486558][ T910] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 554.486577][ T910] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 554.486598][ T910] watchdog+0xb22/0x10c0 [ 554.486622][ T910] kthread+0x361/0x430 [ 554.486639][ T910] ? reset_hung_task_detector+0x30/0x30 [ 554.486653][ T910] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 554.486672][ T910] ret_from_fork+0x24/0x30 [ 554.488385][ T910] Kernel Offset: disabled [ 556.976125][ T910] Rebooting in 86400 seconds..