[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.918015][ T27] audit: type=1800 audit(1579275088.113:25): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.937857][ T27] audit: type=1800 audit(1579275088.113:26): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.963546][ T27] audit: type=1800 audit(1579275088.113:27): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 570.554064][ T1082] INFO: task syz-executor938:9594 blocked for more than 143 seconds. [ 570.554085][ T1082] Not tainted 5.5.0-rc6-syzkaller #0 [ 570.554092][ T1082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.554099][ T1082] syz-executor938 D28280 9594 9593 0x20020004 [ 570.554202][ T1082] Call Trace: [ 570.554293][ T1082] __schedule+0x934/0x1f90 [ 570.554319][ T1082] ? __sched_text_start+0x8/0x8 [ 570.554360][ T1082] ? lock_downgrade+0x920/0x920 [ 570.554401][ T1082] ? rwlock_bug.part.0+0x90/0x90 [ 570.554425][ T1082] schedule+0xdc/0x2b0 [ 570.554446][ T1082] schedule_preempt_disabled+0x13/0x20 [ 570.554464][ T1082] __mutex_lock+0x7ab/0x13c0 [ 570.554535][ T1082] ? fb_open+0xd7/0x450 [ 570.554558][ T1082] ? mutex_trylock+0x2d0/0x2d0 [ 570.554600][ T1082] ? __kasan_check_write+0x14/0x20 [ 570.554618][ T1082] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 570.554656][ T1082] ? chrdev_open+0xca/0x6b0 [ 570.554690][ T1082] mutex_lock_nested+0x16/0x20 [ 570.554708][ T1082] ? mutex_lock_nested+0x16/0x20 [ 570.554723][ T1082] fb_open+0xd7/0x450 [ 570.554743][ T1082] ? get_fb_info.part.0+0x80/0x80 [ 570.554756][ T1082] chrdev_open+0x245/0x6b0 [ 570.554773][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.554889][ T1082] ? security_file_open+0x87/0x300 [ 570.554964][ T1082] do_dentry_open+0x4e6/0x1380 [ 570.554982][ T1082] ? __kasan_check_read+0x11/0x20 [ 570.554997][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.555019][ T1082] ? chown_common+0x5c0/0x5c0 [ 570.555038][ T1082] ? inode_permission+0xb4/0x520 [ 570.555057][ T1082] vfs_open+0xa0/0xd0 [ 570.555099][ T1082] path_openat+0x118b/0x3180 [ 570.555132][ T1082] ? path_lookupat.isra.0+0x470/0x470 [ 570.555145][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 570.555194][ T1082] ? __alloc_fd+0x487/0x620 [ 570.555221][ T1082] do_filp_open+0x1a1/0x280 [ 570.555240][ T1082] ? may_open_dev+0x100/0x100 [ 570.555270][ T1082] ? do_raw_spin_unlock+0x181/0x270 [ 570.555381][ T1082] do_sys_open+0x3fe/0x5d0 [ 570.555399][ T1082] ? filp_open+0x80/0x80 [ 570.555474][ T1082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 570.555493][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.555541][ T1082] ? entry_SYSENTER_compat+0x70/0x7f [ 570.555559][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.555579][ T1082] __ia32_compat_sys_openat+0x98/0xf0 [ 570.555601][ T1082] do_fast_syscall_32+0x27b/0xe16 [ 570.555623][ T1082] entry_SYSENTER_compat+0x70/0x7f [ 570.555635][ T1082] RIP: 0023:0xf7fa7a39 [ 570.555698][ T1082] Code: Bad RIP value. [ 570.555705][ T1082] RSP: 002b:00000000ffb416dc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 570.555720][ T1082] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 570.555730][ T1082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 570.555739][ T1082] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 570.555748][ T1082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.555757][ T1082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.555787][ T1082] INFO: task syz-executor938:9595 blocked for more than 143 seconds. [ 570.555796][ T1082] Not tainted 5.5.0-rc6-syzkaller #0 [ 570.555802][ T1082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.555809][ T1082] syz-executor938 D28280 9595 9590 0x20020004 [ 570.555833][ T1082] Call Trace: [ 570.555856][ T1082] __schedule+0x934/0x1f90 [ 570.555881][ T1082] ? __sched_text_start+0x8/0x8 [ 570.555896][ T1082] ? lock_downgrade+0x920/0x920 [ 570.555914][ T1082] ? rwlock_bug.part.0+0x90/0x90 [ 570.555939][ T1082] schedule+0xdc/0x2b0 [ 570.555961][ T1082] schedule_preempt_disabled+0x13/0x20 [ 570.555979][ T1082] __mutex_lock+0x7ab/0x13c0 [ 570.555999][ T1082] ? fb_open+0xd7/0x450 [ 570.556022][ T1082] ? mutex_trylock+0x2d0/0x2d0 [ 570.556041][ T1082] ? __kasan_check_write+0x14/0x20 [ 570.556059][ T1082] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 570.556073][ T1082] ? chrdev_open+0xca/0x6b0 [ 570.556107][ T1082] mutex_lock_nested+0x16/0x20 [ 570.556125][ T1082] ? mutex_lock_nested+0x16/0x20 [ 570.556139][ T1082] fb_open+0xd7/0x450 [ 570.556158][ T1082] ? get_fb_info.part.0+0x80/0x80 [ 570.556387][ T1082] chrdev_open+0x245/0x6b0 [ 570.556410][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.556432][ T1082] ? security_file_open+0x87/0x300 [ 570.556455][ T1082] do_dentry_open+0x4e6/0x1380 [ 570.556469][ T1082] ? __kasan_check_read+0x11/0x20 [ 570.556485][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.556508][ T1082] ? chown_common+0x5c0/0x5c0 [ 570.556527][ T1082] ? inode_permission+0xb4/0x520 [ 570.556549][ T1082] vfs_open+0xa0/0xd0 [ 570.556568][ T1082] path_openat+0x118b/0x3180 [ 570.556603][ T1082] ? path_lookupat.isra.0+0x470/0x470 [ 570.556617][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 570.556641][ T1082] ? __alloc_fd+0x487/0x620 [ 570.556664][ T1082] do_filp_open+0x1a1/0x280 [ 570.556683][ T1082] ? may_open_dev+0x100/0x100 [ 570.556712][ T1082] ? do_raw_spin_unlock+0x181/0x270 [ 570.556748][ T1082] do_sys_open+0x3fe/0x5d0 [ 570.556767][ T1082] ? filp_open+0x80/0x80 [ 570.556790][ T1082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 570.556808][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.556825][ T1082] ? entry_SYSENTER_compat+0x70/0x7f [ 570.556843][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.556863][ T1082] __ia32_compat_sys_openat+0x98/0xf0 [ 570.556885][ T1082] do_fast_syscall_32+0x27b/0xe16 [ 570.556907][ T1082] entry_SYSENTER_compat+0x70/0x7f [ 570.556919][ T1082] RIP: 0023:0xf7fa7a39 [ 570.556937][ T1082] Code: Bad RIP value. [ 570.556946][ T1082] RSP: 002b:00000000ffb416dc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 570.556962][ T1082] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 570.556971][ T1082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 570.556980][ T1082] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 570.556989][ T1082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.556998][ T1082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.557028][ T1082] INFO: task syz-executor938:9596 blocked for more than 143 seconds. [ 570.557037][ T1082] Not tainted 5.5.0-rc6-syzkaller #0 [ 570.557044][ T1082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.557051][ T1082] syz-executor938 D28280 9596 9592 0x20024004 [ 570.557083][ T1082] Call Trace: [ 570.557105][ T1082] __schedule+0x934/0x1f90 [ 570.557130][ T1082] ? __sched_text_start+0x8/0x8 [ 570.557142][ T1082] ? lock_downgrade+0x920/0x920 [ 570.557159][ T1082] ? rwlock_bug.part.0+0x90/0x90 [ 570.557209][ T1082] schedule+0xdc/0x2b0 [ 570.557231][ T1082] schedule_preempt_disabled+0x13/0x20 [ 570.557249][ T1082] __mutex_lock+0x7ab/0x13c0 [ 570.557268][ T1082] ? fb_open+0xd7/0x450 [ 570.557291][ T1082] ? mutex_trylock+0x2d0/0x2d0 [ 570.557308][ T1082] ? __kasan_check_write+0x14/0x20 [ 570.557327][ T1082] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 570.557342][ T1082] ? chrdev_open+0xca/0x6b0 [ 570.557376][ T1082] mutex_lock_nested+0x16/0x20 [ 570.557395][ T1082] ? mutex_lock_nested+0x16/0x20 [ 570.557411][ T1082] fb_open+0xd7/0x450 [ 570.557431][ T1082] ? get_fb_info.part.0+0x80/0x80 [ 570.557445][ T1082] chrdev_open+0x245/0x6b0 [ 570.557463][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.557483][ T1082] ? security_file_open+0x87/0x300 [ 570.557505][ T1082] do_dentry_open+0x4e6/0x1380 [ 570.557519][ T1082] ? __kasan_check_read+0x11/0x20 [ 570.557535][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.557557][ T1082] ? chown_common+0x5c0/0x5c0 [ 570.557577][ T1082] ? inode_permission+0xb4/0x520 [ 570.557598][ T1082] vfs_open+0xa0/0xd0 [ 570.557616][ T1082] path_openat+0x118b/0x3180 [ 570.557650][ T1082] ? path_lookupat.isra.0+0x470/0x470 [ 570.557663][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 570.557686][ T1082] ? __alloc_fd+0x487/0x620 [ 570.557710][ T1082] do_filp_open+0x1a1/0x280 [ 570.557730][ T1082] ? may_open_dev+0x100/0x100 [ 570.557760][ T1082] ? do_raw_spin_unlock+0x181/0x270 [ 570.557795][ T1082] do_sys_open+0x3fe/0x5d0 [ 570.557826][ T1082] ? filp_open+0x80/0x80 [ 570.557847][ T1082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 570.557865][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.557881][ T1082] ? entry_SYSENTER_compat+0x70/0x7f [ 570.557898][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.557921][ T1082] __ia32_compat_sys_openat+0x98/0xf0 [ 570.557941][ T1082] do_fast_syscall_32+0x27b/0xe16 [ 570.557964][ T1082] entry_SYSENTER_compat+0x70/0x7f [ 570.557974][ T1082] RIP: 0023:0xf7fa7a39 [ 570.557989][ T1082] Code: Bad RIP value. [ 570.557998][ T1082] RSP: 002b:00000000ffb416dc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 570.558012][ T1082] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 570.558021][ T1082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 570.558030][ T1082] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 570.558039][ T1082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.558048][ T1082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.558076][ T1082] INFO: task syz-executor938:9597 blocked for more than 143 seconds. [ 570.558085][ T1082] Not tainted 5.5.0-rc6-syzkaller #0 [ 570.558091][ T1082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.558099][ T1082] syz-executor938 D28280 9597 9591 0x20024004 [ 570.558120][ T1082] Call Trace: [ 570.558142][ T1082] __schedule+0x934/0x1f90 [ 570.558166][ T1082] ? __sched_text_start+0x8/0x8 [ 570.558183][ T1082] ? lock_downgrade+0x920/0x920 [ 570.558200][ T1082] ? rwlock_bug.part.0+0x90/0x90 [ 570.558224][ T1082] schedule+0xdc/0x2b0 [ 570.558245][ T1082] schedule_preempt_disabled+0x13/0x20 [ 570.558263][ T1082] __mutex_lock+0x7ab/0x13c0 [ 570.558281][ T1082] ? fb_open+0xd7/0x450 [ 570.558304][ T1082] ? mutex_trylock+0x2d0/0x2d0 [ 570.558322][ T1082] ? __kasan_check_write+0x14/0x20 [ 570.558341][ T1082] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 570.558355][ T1082] ? chrdev_open+0xca/0x6b0 [ 570.558389][ T1082] mutex_lock_nested+0x16/0x20 [ 570.558407][ T1082] ? mutex_lock_nested+0x16/0x20 [ 570.558423][ T1082] fb_open+0xd7/0x450 [ 570.558443][ T1082] ? get_fb_info.part.0+0x80/0x80 [ 570.558457][ T1082] chrdev_open+0x245/0x6b0 [ 570.558474][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.558494][ T1082] ? security_file_open+0x87/0x300 [ 570.558517][ T1082] do_dentry_open+0x4e6/0x1380 [ 570.558530][ T1082] ? __kasan_check_read+0x11/0x20 [ 570.558545][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.558567][ T1082] ? chown_common+0x5c0/0x5c0 [ 570.558586][ T1082] ? inode_permission+0xb4/0x520 [ 570.558606][ T1082] vfs_open+0xa0/0xd0 [ 570.558624][ T1082] path_openat+0x118b/0x3180 [ 570.558656][ T1082] ? path_lookupat.isra.0+0x470/0x470 [ 570.558669][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 570.558692][ T1082] ? __alloc_fd+0x487/0x620 [ 570.558715][ T1082] do_filp_open+0x1a1/0x280 [ 570.558734][ T1082] ? may_open_dev+0x100/0x100 [ 570.558765][ T1082] ? do_raw_spin_unlock+0x181/0x270 [ 570.558800][ T1082] do_sys_open+0x3fe/0x5d0 [ 570.558817][ T1082] ? filp_open+0x80/0x80 [ 570.558839][ T1082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 570.558857][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.558873][ T1082] ? entry_SYSENTER_compat+0x70/0x7f [ 570.558889][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.558909][ T1082] __ia32_compat_sys_openat+0x98/0xf0 [ 570.558930][ T1082] do_fast_syscall_32+0x27b/0xe16 [ 570.558952][ T1082] entry_SYSENTER_compat+0x70/0x7f [ 570.558963][ T1082] RIP: 0023:0xf7fa7a39 [ 570.558978][ T1082] Code: Bad RIP value. [ 570.558987][ T1082] RSP: 002b:00000000ffb416dc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 570.559001][ T1082] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 570.559010][ T1082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 570.559019][ T1082] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 570.559028][ T1082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.559037][ T1082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.559064][ T1082] INFO: task syz-executor938:9598 blocked for more than 143 seconds. [ 570.559073][ T1082] Not tainted 5.5.0-rc6-syzkaller #0 [ 570.559079][ T1082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.559085][ T1082] syz-executor938 D27992 9598 9588 0x20020004 [ 570.559106][ T1082] Call Trace: [ 570.559127][ T1082] __schedule+0x934/0x1f90 [ 570.559151][ T1082] ? __sched_text_start+0x8/0x8 [ 570.559164][ T1082] ? lock_downgrade+0x920/0x920 [ 570.559185][ T1082] ? rwlock_bug.part.0+0x90/0x90 [ 570.559208][ T1082] schedule+0xdc/0x2b0 [ 570.559230][ T1082] schedule_preempt_disabled+0x13/0x20 [ 570.559247][ T1082] __mutex_lock+0x7ab/0x13c0 [ 570.559266][ T1082] ? fb_open+0xd7/0x450 [ 570.559289][ T1082] ? mutex_trylock+0x2d0/0x2d0 [ 570.559306][ T1082] ? __kasan_check_write+0x14/0x20 [ 570.559324][ T1082] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 570.559338][ T1082] ? chrdev_open+0xca/0x6b0 [ 570.559371][ T1082] mutex_lock_nested+0x16/0x20 [ 570.559389][ T1082] ? mutex_lock_nested+0x16/0x20 [ 570.559405][ T1082] fb_open+0xd7/0x450 [ 570.559424][ T1082] ? get_fb_info.part.0+0x80/0x80 [ 570.559437][ T1082] chrdev_open+0x245/0x6b0 [ 570.559455][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.559475][ T1082] ? security_file_open+0x87/0x300 [ 570.559497][ T1082] do_dentry_open+0x4e6/0x1380 [ 570.559510][ T1082] ? __kasan_check_read+0x11/0x20 [ 570.559525][ T1082] ? cdev_put.part.0+0x50/0x50 [ 570.559547][ T1082] ? chown_common+0x5c0/0x5c0 [ 570.559566][ T1082] ? inode_permission+0xb4/0x520 [ 570.559585][ T1082] vfs_open+0xa0/0xd0 [ 570.559603][ T1082] path_openat+0x118b/0x3180 [ 570.559636][ T1082] ? path_lookupat.isra.0+0x470/0x470 [ 570.559649][ T1082] ? __lock_acquire+0x16f2/0x4a00 [ 570.559671][ T1082] ? __alloc_fd+0x487/0x620 [ 570.559695][ T1082] do_filp_open+0x1a1/0x280 [ 570.559714][ T1082] ? may_open_dev+0x100/0x100 [ 570.559744][ T1082] ? do_raw_spin_unlock+0x181/0x270 [ 570.559779][ T1082] do_sys_open+0x3fe/0x5d0 [ 570.559797][ T1082] ? filp_open+0x80/0x80 [ 570.559819][ T1082] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 570.559836][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.559852][ T1082] ? entry_SYSENTER_compat+0x70/0x7f [ 570.559869][ T1082] ? do_fast_syscall_32+0xd1/0xe16 [ 570.559889][ T1082] __ia32_compat_sys_openat+0x98/0xf0 [ 570.559910][ T1082] do_fast_syscall_32+0x27b/0xe16 [ 570.559932][ T1082] entry_SYSENTER_compat+0x70/0x7f [ 570.559943][ T1082] RIP: 0023:0xf7fa7a39 [ 570.559957][ T1082] Code: Bad RIP value. [ 570.559966][ T1082] RSP: 002b:00000000ffb416dc EFLAGS: 00000207 ORIG_RAX: 0000000000000127 [ 570.559980][ T1082] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 570.559989][ T1082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000080bc5bf [ 570.559998][ T1082] RBP: 0000000000000012 R08: 0000000000000000 R09: 0000000000000000 [ 570.560006][ T1082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.560015][ T1082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.560038][ T1082] [ 570.560038][ T1082] Showing all locks held in the system: [ 570.560054][ T1082] 1 lock held by khungtaskd/1082: [ 570.560059][ T1082] #0: ffffffff899a3f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 570.560125][ T1082] 1 lock held by rsyslogd/9468: [ 570.560130][ T1082] #0: ffff888097a875e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 570.560162][ T1082] 2 locks held by getty/9558: [ 570.560167][ T1082] #0: ffff88809708e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560199][ T1082] #1: ffffc900018ab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560318][ T1082] 2 locks held by getty/9559: [ 570.560324][ T1082] #0: ffff8880a6696090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560350][ T1082] #1: ffffc900018cb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560384][ T1082] 2 locks held by getty/9560: [ 570.560389][ T1082] #0: ffff88808fa8e090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560415][ T1082] #1: ffffc9000189b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560449][ T1082] 2 locks held by getty/9561: [ 570.560454][ T1082] #0: ffff88808feca090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560480][ T1082] #1: ffffc900018bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560514][ T1082] 2 locks held by getty/9562: [ 570.560519][ T1082] #0: ffff888095459090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560546][ T1082] #1: ffffc9000186b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560580][ T1082] 2 locks held by getty/9563: [ 570.560585][ T1082] #0: ffff88808cdde090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560611][ T1082] #1: ffffc9000188b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560645][ T1082] 2 locks held by getty/9564: [ 570.560650][ T1082] #0: ffff8880a1114090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 570.560675][ T1082] #1: ffffc9000180b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 570.560711][ T1082] 2 locks held by syz-executor938/9589: [ 570.560722][ T1082] 1 lock held by syz-executor938/9594: [ 570.560727][ T1082] #0: ffff888218d22070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 570.560760][ T1082] 1 lock held by syz-executor938/9595: [ 570.560765][ T1082] #0: ffff888218d22070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 570.560797][ T1082] 1 lock held by syz-executor938/9596: [ 570.560802][ T1082] #0: ffff888218d22070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 570.560834][ T1082] 1 lock held by syz-executor938/9597: [ 570.560839][ T1082] #0: ffff888218d22070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 570.560872][ T1082] 1 lock held by syz-executor938/9598: [ 570.560877][ T1082] #0: ffff888218d22070 (&fb_info->lock){+.+.}, at: fb_open+0xd7/0x450 [ 570.560905][ T1082] [ 570.560911][ T1082] ============================================= [ 570.560911][ T1082] [ 570.560918][ T1082] NMI backtrace for cpu 0 [ 570.560939][ T1082] CPU: 0 PID: 1082 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 570.560974][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.560979][ T1082] Call Trace: [ 570.561025][ T1082] dump_stack+0x197/0x210 [ 570.561049][ T1082] nmi_cpu_backtrace.cold+0x70/0xb2 [ 570.561091][ T1082] ? vprintk_func+0x86/0x189 [ 570.561132][ T1082] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 570.561151][ T1082] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 570.561179][ T1082] arch_trigger_cpumask_backtrace+0x14/0x20 [ 570.561224][ T1082] watchdog+0xb11/0x10c0 [ 570.561276][ T1082] kthread+0x361/0x430 [ 570.561292][ T1082] ? reset_hung_task_detector+0x30/0x30 [ 570.561305][ T1082] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 570.561321][ T1082] ret_from_fork+0x24/0x30 [ 570.561346][ T1082] Sending NMI from CPU 0 to CPUs 1: [ 570.562384][ T1082] NMI backtrace for cpu 1 [ 570.562389][ T1082] CPU: 1 PID: 9589 Comm: syz-executor938 Not tainted 5.5.0-rc6-syzkaller #0 [ 570.562394][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.562397][ T1082] RIP: 0010:bitfill_aligned+0x129/0x210 [ 570.562406][ T1082] Code: 89 f7 e8 fa ed b3 fd 49 89 1f 49 89 5f 08 49 89 5f 10 49 89 5f 18 49 89 5f 20 49 89 5f 28 49 8d 47 38 49 89 5f 30 49 83 c7 40 <48> 89 18 41 83 ed 08 bf 07 00 00 00 44 89 ee e8 43 ef b3 fd 41 83 [ 570.562409][ T1082] RSP: 0018:ffffc90001fa6e38 EFLAGS: 00000282 [ 570.562415][ T1082] RAX: ffff8880000a0178 RBX: 0000000000000000 RCX: ffffffff83c107bd [ 570.562419][ T1082] RDX: 0000000000000000 RSI: ffffffff83c10786 RDI: 0000000000000005 [ 570.562423][ T1082] RBP: ffffc90001fa6e78 R08: ffff88809ea04340 R09: 0000000000000040 [ 570.562427][ T1082] R10: ffffed10431a2e6b R11: ffff888218d1735f R12: 0000000000000050 [ 570.562430][ T1082] R13: 0000000000000028 R14: ffff8880000a0000 R15: ffff8880000a0180 [ 570.562435][ T1082] FS: 0000000000000000(0000) GS:ffff8880ae900000(0063) knlGS:0000000008d66840 [ 570.562438][ T1082] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 570.562442][ T1082] CR2: ffffffffff600400 CR3: 000000008f191000 CR4: 00000000001406e0 [ 570.562446][ T1082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.562451][ T1082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 570.562453][ T1082] Call Trace: [ 570.562456][ T1082] cfb_fillrect+0x423/0x7c0 [ 570.562459][ T1082] ? cfb_fillrect+0x7c0/0x7c0 [ 570.562462][ T1082] vga16fb_fillrect+0x6ce/0x19b0 [ 570.562465][ T1082] bit_clear_margins+0x30b/0x530 [ 570.562468][ T1082] ? bit_bmove+0x270/0x270 [ 570.562471][ T1082] ? efifb_probe.cold+0x181f/0x181f [ 570.562475][ T1082] fbcon_clear_margins+0x1e9/0x250 [ 570.562478][ T1082] fbcon_switch+0xd7f/0x17f0 [ 570.562481][ T1082] ? fbcon_set_def_font+0x360/0x360 [ 570.562484][ T1082] ? fbcon_cursor+0x48c/0x660 [ 570.562488][ T1082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.562491][ T1082] ? fbcon_set_origin+0x2b/0x50 [ 570.562495][ T1082] ? fbcon_scrolldelta+0x1220/0x1220 [ 570.562499][ T1082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.562501][ T1082] redraw_screen+0x2b6/0x7d0 [ 570.562505][ T1082] ? efifb_probe.cold+0x181f/0x181f [ 570.562508][ T1082] ? respond_string+0x2c0/0x2c0 [ 570.562511][ T1082] ? fbcon_set_palette+0x3c4/0x4a0 [ 570.562514][ T1082] fbcon_modechanged+0x5c3/0x790 [ 570.562517][ T1082] fbcon_update_vcs+0x42/0x50 [ 570.562520][ T1082] fb_set_var+0xb32/0xdd0 [ 570.562523][ T1082] ? fb_blank+0x1a0/0x1a0 [ 570.562526][ T1082] ? vga16fb_imageblit+0x1eb/0x2200 [ 570.562529][ T1082] ? bit_cursor+0xaf6/0x1a60 [ 570.562532][ T1082] ? fb_videomode_to_var+0x14/0x630 [ 570.562536][ T1082] fbcon_switch+0x556/0x17f0 [ 570.562539][ T1082] ? fbcon_set_def_font+0x360/0x360 [ 570.562542][ T1082] ? fbcon_cursor+0x48c/0x660 [ 570.562546][ T1082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.562549][ T1082] ? fbcon_set_origin+0x2b/0x50 [ 570.562552][ T1082] ? fbcon_scrolldelta+0x1220/0x1220 [ 570.562556][ T1082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.562559][ T1082] redraw_screen+0x2b6/0x7d0 [ 570.562563][ T1082] ? efifb_probe.cold+0x181f/0x181f [ 570.562566][ T1082] ? respond_string+0x2c0/0x2c0 [ 570.562569][ T1082] ? fbcon_set_palette+0x3c4/0x4a0 [ 570.562572][ T1082] fbcon_modechanged+0x5c3/0x790 [ 570.562576][ T1082] fbcon_update_vcs+0x42/0x50 [ 570.562579][ T1082] fb_set_var+0xb32/0xdd0 [ 570.562583][ T1082] ? fb_blank+0x1a0/0x1a0 [ 570.562586][ T1082] ? lock_acquire+0x190/0x410 [ 570.562589][ T1082] ? __mutex_lock+0x458/0x13c0 [ 570.562592][ T1082] ? down+0x50/0x90 [ 570.562595][ T1082] ? do_fb_ioctl+0x335/0x7d0 [ 570.562598][ T1082] do_fb_ioctl+0x390/0x7d0 [ 570.562600][ T1082] ? fb_mmap+0x520/0x520 [ 570.562604][ T1082] ? lockdep_hardirqs_on+0x421/0x5e0 [ 570.562607][ T1082] ? tomoyo_path_number_perm+0x454/0x520 [ 570.562611][ T1082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 570.562615][ T1082] ? tomoyo_path_number_perm+0x25e/0x520 [ 570.562619][ T1082] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 570.562622][ T1082] fb_compat_ioctl+0x305/0xc50 [ 570.562626][ T1082] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 570.562629][ T1082] ? fb_release+0x150/0x150 [ 570.562633][ T1082] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 570.562636][ T1082] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 570.562640][ T1082] ? tomoyo_file_ioctl+0x23/0x30 [ 570.562644][ T1082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.562647][ T1082] ? security_file_ioctl+0x8d/0xc0 [ 570.562650][ T1082] __ia32_compat_sys_ioctl+0x233/0x610 [ 570.562653][ T1082] ? fb_release+0x150/0x150 [ 570.562657][ T1082] do_fast_syscall_32+0x27b/0xe16 [ 570.562660][ T1082] entry_SYSENTER_compat+0x70/0x7f [ 570.562663][ T1082] RIP: 0023:0xf7fa7a39 [ 570.562674][ T1082] Code: 00 00 00 89 d3 5b 5e 5f 5d c3 b8 80 96 98 00 eb c4 8b 04 24 c3 8b 1c 24 c3 8b 34 24 c3 8b 3c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 570.562678][ T1082] RSP: 002b:00000000ffb416ec EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 570.562686][ T1082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 570.562691][ T1082] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 00000000ffb41804 [ 570.562696][ T1082] RBP: 00000000ffb4180c R08: 0000000000000000 R09: 0000000000000000 [ 570.562700][ T1082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 570.562705][ T1082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 570.562714][ T1082] Kernel panic - not syncing: hung_task: blocked tasks [ 570.562730][ T1082] CPU: 0 PID: 1082 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 570.562738][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.562743][ T1082] Call Trace: [ 570.562759][ T1082] dump_stack+0x197/0x210 [ 570.562808][ T1082] panic+0x2e3/0x75c [ 570.562824][ T1082] ? add_taint.cold+0x16/0x16 [ 570.562843][ T1082] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 570.562858][ T1082] ? printk_safe_flush+0xf2/0x140 [ 570.562874][ T1082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 570.562895][ T1082] ? nmi_trigger_cpumask_backtrace+0x224/0x28b [ 570.562913][ T1082] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 570.562933][ T1082] watchdog+0xb22/0x10c0 [ 570.562955][ T1082] kthread+0x361/0x430 [ 570.562971][ T1082] ? reset_hung_task_detector+0x30/0x30 [ 570.562983][ T1082] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 570.563000][ T1082] ret_from_fork+0x24/0x30 [ 570.564784][ T1082] Kernel Offset: disabled [ 573.031440][ T1082] Rebooting in 86400 seconds..