[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 85.376868][ T27] audit: type=1800 audit(1584822277.669:25): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 85.396770][ T27] audit: type=1800 audit(1584822277.669:26): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 85.459624][ T27] audit: type=1800 audit(1584822277.679:27): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 592.615865][ T1134] INFO: task syz-executor003:9501 blocked for more than 143 seconds. [ 592.615884][ T1134] Not tainted 5.6.0-rc6-syzkaller #0 [ 592.615889][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.615895][ T1134] syz-executor003 D28328 9501 9497 0x00004004 [ 592.615919][ T1134] Call Trace: [ 592.616034][ T1134] ? __schedule+0x934/0x1f90 [ 592.616080][ T1134] ? __sched_text_start+0x8/0x8 [ 592.616111][ T1134] schedule+0xd0/0x2a0 [ 592.616131][ T1134] schedule_preempt_disabled+0xf/0x20 [ 592.616144][ T1134] __mutex_lock+0x7ab/0x13c0 [ 592.616210][ T1134] ? fb_open+0xd3/0x430 [ 592.616234][ T1134] ? mutex_trylock+0x2c0/0x2c0 [ 592.616256][ T1134] ? __mutex_unlock_slowpath+0xe2/0x660 [ 592.616293][ T1134] ? chrdev_open+0xc4/0x5c0 [ 592.616339][ T1134] ? lock_downgrade+0x7f0/0x7f0 [ 592.616367][ T1134] ? fb_open+0xd3/0x430 [ 592.616378][ T1134] fb_open+0xd3/0x430 [ 592.616395][ T1134] ? get_fb_info.part.0+0x80/0x80 [ 592.616408][ T1134] chrdev_open+0x219/0x5c0 [ 592.616423][ T1134] ? rwlock_bug.part.0+0x90/0x90 [ 592.616437][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.616492][ T1134] do_dentry_open+0x4a2/0x1250 [ 592.616510][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.616579][ T1134] ? security_inode_permission+0xc4/0xf0 [ 592.616594][ T1134] ? chown_common+0x550/0x550 [ 592.616633][ T1134] ? inode_permission+0xab/0x500 [ 592.616659][ T1134] path_openat+0x122a/0x32b0 [ 592.616696][ T1134] ? path_mountpoint.isra.0+0x370/0x370 [ 592.616707][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.616728][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.616757][ T1134] do_filp_open+0x192/0x260 [ 592.616774][ T1134] ? may_open_dev+0xf0/0xf0 [ 592.616803][ T1134] ? do_raw_spin_lock+0x129/0x2e0 [ 592.616855][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 592.616888][ T1134] ? __alloc_fd+0x46d/0x600 [ 592.616917][ T1134] do_sys_openat2+0x54c/0x740 [ 592.616937][ T1134] ? file_open_root+0x3d0/0x3d0 [ 592.617009][ T1134] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 592.617032][ T1134] do_sys_open+0xc3/0x140 [ 592.617052][ T1134] ? filp_open+0x70/0x70 [ 592.617088][ T1134] ? fpregs_mark_activate+0x320/0x320 [ 592.617156][ T1134] ? trace_hardirqs_off_caller+0x55/0x230 [ 592.617216][ T1134] do_syscall_64+0xf6/0x7d0 [ 592.617235][ T1134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.617247][ T1134] RIP: 0033:0x441419 [ 592.617283][ T1134] Code: Bad RIP value. [ 592.617290][ T1134] RSP: 002b:00007ffd4e8c2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.617303][ T1134] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 592.617312][ T1134] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 592.617320][ T1134] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 592.617328][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 592.617335][ T1134] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 592.617385][ T1134] INFO: task syz-executor003:9502 blocked for more than 143 seconds. [ 592.617392][ T1134] Not tainted 5.6.0-rc6-syzkaller #0 [ 592.617397][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.617403][ T1134] syz-executor003 D28328 9502 9500 0x00004004 [ 592.617423][ T1134] Call Trace: [ 592.617443][ T1134] ? __schedule+0x934/0x1f90 [ 592.617468][ T1134] ? __sched_text_start+0x8/0x8 [ 592.617498][ T1134] schedule+0xd0/0x2a0 [ 592.617516][ T1134] schedule_preempt_disabled+0xf/0x20 [ 592.617528][ T1134] __mutex_lock+0x7ab/0x13c0 [ 592.617544][ T1134] ? fb_open+0xd3/0x430 [ 592.617567][ T1134] ? mutex_trylock+0x2c0/0x2c0 [ 592.617588][ T1134] ? __mutex_unlock_slowpath+0xe2/0x660 [ 592.617601][ T1134] ? chrdev_open+0xc4/0x5c0 [ 592.617622][ T1134] ? lock_downgrade+0x7f0/0x7f0 [ 592.617648][ T1134] ? fb_open+0xd3/0x430 [ 592.617658][ T1134] fb_open+0xd3/0x430 [ 592.617675][ T1134] ? get_fb_info.part.0+0x80/0x80 [ 592.617687][ T1134] chrdev_open+0x219/0x5c0 [ 592.617701][ T1134] ? rwlock_bug.part.0+0x90/0x90 [ 592.617715][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.617744][ T1134] do_dentry_open+0x4a2/0x1250 [ 592.617761][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.617779][ T1134] ? security_inode_permission+0xc4/0xf0 [ 592.617792][ T1134] ? chown_common+0x550/0x550 [ 592.617806][ T1134] ? inode_permission+0xab/0x500 [ 592.617832][ T1134] path_openat+0x122a/0x32b0 [ 592.617866][ T1134] ? path_mountpoint.isra.0+0x370/0x370 [ 592.617877][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.617897][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.617925][ T1134] do_filp_open+0x192/0x260 [ 592.617941][ T1134] ? may_open_dev+0xf0/0xf0 [ 592.617969][ T1134] ? do_raw_spin_lock+0x129/0x2e0 [ 592.617999][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 592.618012][ T1134] ? __alloc_fd+0x46d/0x600 [ 592.618046][ T1134] do_sys_openat2+0x54c/0x740 [ 592.618065][ T1134] ? file_open_root+0x3d0/0x3d0 [ 592.618089][ T1134] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 592.618110][ T1134] do_sys_open+0xc3/0x140 [ 592.618124][ T1134] ? filp_open+0x70/0x70 [ 592.618141][ T1134] ? fpregs_mark_activate+0x320/0x320 [ 592.618156][ T1134] ? trace_hardirqs_off_caller+0x55/0x230 [ 592.618182][ T1134] do_syscall_64+0xf6/0x7d0 [ 592.618201][ T1134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.618210][ T1134] RIP: 0033:0x441419 [ 592.618217][ T1134] Code: Bad RIP value. [ 592.618224][ T1134] RSP: 002b:00007ffd4e8c2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.618236][ T1134] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 592.618243][ T1134] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 592.618251][ T1134] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 592.618258][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 592.618265][ T1134] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 592.618300][ T1134] INFO: task syz-executor003:9503 blocked for more than 143 seconds. [ 592.618307][ T1134] Not tainted 5.6.0-rc6-syzkaller #0 [ 592.618312][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.618318][ T1134] syz-executor003 D28328 9503 9499 0x00000004 [ 592.618337][ T1134] Call Trace: [ 592.618357][ T1134] ? __schedule+0x934/0x1f90 [ 592.618381][ T1134] ? __sched_text_start+0x8/0x8 [ 592.618411][ T1134] schedule+0xd0/0x2a0 [ 592.618429][ T1134] schedule_preempt_disabled+0xf/0x20 [ 592.618441][ T1134] __mutex_lock+0x7ab/0x13c0 [ 592.618458][ T1134] ? fb_open+0xd3/0x430 [ 592.618480][ T1134] ? mutex_trylock+0x2c0/0x2c0 [ 592.618501][ T1134] ? __mutex_unlock_slowpath+0xe2/0x660 [ 592.618514][ T1134] ? chrdev_open+0xc4/0x5c0 [ 592.618534][ T1134] ? lock_downgrade+0x7f0/0x7f0 [ 592.618578][ T1134] ? fb_open+0xd3/0x430 [ 592.618588][ T1134] fb_open+0xd3/0x430 [ 592.618605][ T1134] ? get_fb_info.part.0+0x80/0x80 [ 592.618618][ T1134] chrdev_open+0x219/0x5c0 [ 592.618632][ T1134] ? rwlock_bug.part.0+0x90/0x90 [ 592.618647][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.618677][ T1134] do_dentry_open+0x4a2/0x1250 [ 592.618695][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.618713][ T1134] ? security_inode_permission+0xc4/0xf0 [ 592.618727][ T1134] ? chown_common+0x550/0x550 [ 592.618741][ T1134] ? inode_permission+0xab/0x500 [ 592.618767][ T1134] path_openat+0x122a/0x32b0 [ 592.618815][ T1134] ? path_mountpoint.isra.0+0x370/0x370 [ 592.618826][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.618845][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.618873][ T1134] do_filp_open+0x192/0x260 [ 592.618890][ T1134] ? may_open_dev+0xf0/0xf0 [ 592.618918][ T1134] ? do_raw_spin_lock+0x129/0x2e0 [ 592.618948][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 592.618961][ T1134] ? __alloc_fd+0x46d/0x600 [ 592.618989][ T1134] do_sys_openat2+0x54c/0x740 [ 592.619008][ T1134] ? file_open_root+0x3d0/0x3d0 [ 592.619031][ T1134] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 592.619057][ T1134] do_sys_open+0xc3/0x140 [ 592.619071][ T1134] ? filp_open+0x70/0x70 [ 592.619093][ T1134] ? fpregs_mark_activate+0x320/0x320 [ 592.619109][ T1134] ? trace_hardirqs_off_caller+0x55/0x230 [ 592.619135][ T1134] do_syscall_64+0xf6/0x7d0 [ 592.619171][ T1134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.619180][ T1134] RIP: 0033:0x441419 [ 592.619188][ T1134] Code: Bad RIP value. [ 592.619195][ T1134] RSP: 002b:00007ffd4e8c2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.619207][ T1134] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 592.619215][ T1134] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 592.619223][ T1134] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 592.619230][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 592.619238][ T1134] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 592.619273][ T1134] INFO: task syz-executor003:9504 blocked for more than 143 seconds. [ 592.619281][ T1134] Not tainted 5.6.0-rc6-syzkaller #0 [ 592.619286][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.619292][ T1134] syz-executor003 D28304 9504 9495 0x00004004 [ 592.619310][ T1134] Call Trace: [ 592.619331][ T1134] ? __schedule+0x934/0x1f90 [ 592.619356][ T1134] ? __sched_text_start+0x8/0x8 [ 592.619387][ T1134] schedule+0xd0/0x2a0 [ 592.619405][ T1134] schedule_preempt_disabled+0xf/0x20 [ 592.619418][ T1134] __mutex_lock+0x7ab/0x13c0 [ 592.619435][ T1134] ? fb_open+0xd3/0x430 [ 592.619458][ T1134] ? mutex_trylock+0x2c0/0x2c0 [ 592.619480][ T1134] ? __mutex_unlock_slowpath+0xe2/0x660 [ 592.619493][ T1134] ? chrdev_open+0xc4/0x5c0 [ 592.619515][ T1134] ? lock_downgrade+0x7f0/0x7f0 [ 592.619541][ T1134] ? fb_open+0xd3/0x430 [ 592.619552][ T1134] fb_open+0xd3/0x430 [ 592.619569][ T1134] ? get_fb_info.part.0+0x80/0x80 [ 592.619582][ T1134] chrdev_open+0x219/0x5c0 [ 592.619596][ T1134] ? rwlock_bug.part.0+0x90/0x90 [ 592.619611][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.619641][ T1134] do_dentry_open+0x4a2/0x1250 [ 592.619659][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.619677][ T1134] ? security_inode_permission+0xc4/0xf0 [ 592.619691][ T1134] ? chown_common+0x550/0x550 [ 592.619705][ T1134] ? inode_permission+0xab/0x500 [ 592.619732][ T1134] path_openat+0x122a/0x32b0 [ 592.619768][ T1134] ? path_mountpoint.isra.0+0x370/0x370 [ 592.619790][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.619819][ T1134] do_filp_open+0x192/0x260 [ 592.619835][ T1134] ? may_open_dev+0xf0/0xf0 [ 592.619864][ T1134] ? do_raw_spin_lock+0x129/0x2e0 [ 592.619895][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 592.619909][ T1134] ? __alloc_fd+0x46d/0x600 [ 592.619938][ T1134] do_sys_openat2+0x54c/0x740 [ 592.619957][ T1134] ? file_open_root+0x3d0/0x3d0 [ 592.619982][ T1134] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 592.620004][ T1134] do_sys_open+0xc3/0x140 [ 592.620018][ T1134] ? filp_open+0x70/0x70 [ 592.620042][ T1134] ? fpregs_mark_activate+0x320/0x320 [ 592.620059][ T1134] ? trace_hardirqs_off_caller+0x55/0x230 [ 592.620085][ T1134] do_syscall_64+0xf6/0x7d0 [ 592.620105][ T1134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.620113][ T1134] RIP: 0033:0x441419 [ 592.620122][ T1134] Code: Bad RIP value. [ 592.620129][ T1134] RSP: 002b:00007ffd4e8c2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.620141][ T1134] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 592.620149][ T1134] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 592.620156][ T1134] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 592.620164][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 592.620172][ T1134] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 592.620207][ T1134] INFO: task syz-executor003:9505 blocked for more than 143 seconds. [ 592.620215][ T1134] Not tainted 5.6.0-rc6-syzkaller #0 [ 592.620220][ T1134] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.620225][ T1134] syz-executor003 D28328 9505 9498 0x00004004 [ 592.620244][ T1134] Call Trace: [ 592.620265][ T1134] ? __schedule+0x934/0x1f90 [ 592.620290][ T1134] ? __sched_text_start+0x8/0x8 [ 592.620321][ T1134] schedule+0xd0/0x2a0 [ 592.620340][ T1134] schedule_preempt_disabled+0xf/0x20 [ 592.620353][ T1134] __mutex_lock+0x7ab/0x13c0 [ 592.620370][ T1134] ? fb_open+0xd3/0x430 [ 592.620393][ T1134] ? mutex_trylock+0x2c0/0x2c0 [ 592.620415][ T1134] ? __mutex_unlock_slowpath+0xe2/0x660 [ 592.620428][ T1134] ? chrdev_open+0xc4/0x5c0 [ 592.620449][ T1134] ? lock_downgrade+0x7f0/0x7f0 [ 592.620476][ T1134] ? fb_open+0xd3/0x430 [ 592.620487][ T1134] fb_open+0xd3/0x430 [ 592.620504][ T1134] ? get_fb_info.part.0+0x80/0x80 [ 592.620517][ T1134] chrdev_open+0x219/0x5c0 [ 592.620531][ T1134] ? rwlock_bug.part.0+0x90/0x90 [ 592.620545][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.620575][ T1134] do_dentry_open+0x4a2/0x1250 [ 592.620592][ T1134] ? cdev_put.part.0+0x50/0x50 [ 592.620611][ T1134] ? security_inode_permission+0xc4/0xf0 [ 592.620625][ T1134] ? chown_common+0x550/0x550 [ 592.620639][ T1134] ? inode_permission+0xab/0x500 [ 592.620666][ T1134] path_openat+0x122a/0x32b0 [ 592.620702][ T1134] ? path_mountpoint.isra.0+0x370/0x370 [ 592.620723][ T1134] ? __lock_acquire+0x14bd/0x3ca0 [ 592.620752][ T1134] do_filp_open+0x192/0x260 [ 592.620769][ T1134] ? may_open_dev+0xf0/0xf0 [ 592.620798][ T1134] ? do_raw_spin_lock+0x129/0x2e0 [ 592.620829][ T1134] ? _raw_spin_unlock+0x24/0x40 [ 592.620843][ T1134] ? __alloc_fd+0x46d/0x600 [ 592.620872][ T1134] do_sys_openat2+0x54c/0x740 [ 592.620891][ T1134] ? file_open_root+0x3d0/0x3d0 [ 592.620916][ T1134] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 592.620938][ T1134] do_sys_open+0xc3/0x140 [ 592.620952][ T1134] ? filp_open+0x70/0x70 [ 592.620970][ T1134] ? fpregs_mark_activate+0x320/0x320 [ 592.620986][ T1134] ? trace_hardirqs_off_caller+0x55/0x230 [ 592.621013][ T1134] do_syscall_64+0xf6/0x7d0 [ 592.621032][ T1134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.621045][ T1134] RIP: 0033:0x441419 [ 592.621054][ T1134] Code: Bad RIP value. [ 592.621061][ T1134] RSP: 002b:00007ffd4e8c2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 592.621072][ T1134] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 592.621080][ T1134] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 592.621088][ T1134] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 592.621096][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 592.621104][ T1134] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 592.621136][ T1134] [ 592.621136][ T1134] Showing all locks held in the system: [ 592.621149][ T1134] 1 lock held by khungtaskd/1134: [ 592.621153][ T1134] #0: ffffffff897accc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x260 [ 592.621206][ T1134] 1 lock held by rsyslogd/9379: [ 592.621210][ T1134] #0: ffff88809420d420 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xe3/0x100 [ 592.621238][ T1134] 2 locks held by getty/9469: [ 592.621242][ T1134] #0: ffff888099fd5090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621296][ T1134] #1: ffffc9000181b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621324][ T1134] 2 locks held by getty/9470: [ 592.621328][ T1134] #0: ffff88808a9dd090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621351][ T1134] #1: ffffc9000184b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621378][ T1134] 2 locks held by getty/9471: [ 592.621383][ T1134] #0: ffff888096e0c090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621406][ T1134] #1: ffffc9000183b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621433][ T1134] 2 locks held by getty/9472: [ 592.621437][ T1134] #0: ffff888096ef7090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621461][ T1134] #1: ffffc9000186b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621487][ T1134] 2 locks held by getty/9473: [ 592.621492][ T1134] #0: ffff88809fe74090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621515][ T1134] #1: ffffc9000182b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621542][ T1134] 2 locks held by getty/9474: [ 592.621546][ T1134] #0: ffff88808db2b090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621570][ T1134] #1: ffffc9000185b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621597][ T1134] 2 locks held by getty/9475: [ 592.621601][ T1134] #0: ffff888098380090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 592.621625][ T1134] #1: ffffc900017ab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 592.621654][ T1134] 2 locks held by syz-executor003/9496: [ 592.621662][ T1134] 1 lock held by syz-executor003/9501: [ 592.621666][ T1134] #0: ffff8880a40d4070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 592.621692][ T1134] 1 lock held by syz-executor003/9502: [ 592.621697][ T1134] #0: ffff8880a40d4070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 592.621722][ T1134] 1 lock held by syz-executor003/9503: [ 592.621727][ T1134] #0: ffff8880a40d4070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 592.621752][ T1134] 1 lock held by syz-executor003/9504: [ 592.621756][ T1134] #0: ffff8880a40d4070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 592.621782][ T1134] 1 lock held by syz-executor003/9505: [ 592.621787][ T1134] #0: ffff8880a40d4070 (&fb_info->lock){+.+.}, at: fb_open+0xd3/0x430 [ 592.621809][ T1134] [ 592.621813][ T1134] ============================================= [ 592.621813][ T1134] [ 592.621820][ T1134] NMI backtrace for cpu 0 [ 592.621832][ T1134] CPU: 0 PID: 1134 Comm: khungtaskd Not tainted 5.6.0-rc6-syzkaller #0 [ 592.621840][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.621844][ T1134] Call Trace: [ 592.621925][ T1134] dump_stack+0x188/0x20d [ 592.621947][ T1134] nmi_cpu_backtrace.cold+0x70/0xb1 [ 592.622000][ T1134] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 592.622016][ T1134] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 592.622078][ T1134] watchdog+0xa8c/0x1010 [ 592.622103][ T1134] ? reset_hung_task_detector+0x30/0x30 [ 592.622137][ T1134] kthread+0x357/0x430 [ 592.622151][ T1134] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 592.622168][ T1134] ret_from_fork+0x24/0x30 [ 592.622202][ T1134] Sending NMI from CPU 0 to CPUs 1: [ 592.622955][ C1] NMI backtrace for cpu 1 [ 592.622960][ C1] CPU: 1 PID: 9496 Comm: syz-executor003 Not tainted 5.6.0-rc6-syzkaller #0 [ 592.622966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.622969][ C1] RIP: 0010:bitfill_aligned+0x123/0x200 [ 592.622979][ C1] Code: 3d bf fd 48 89 5d 00 48 89 5d 08 48 89 5d 10 48 89 5d 18 48 89 5d 20 48 89 5d 28 48 8d 45 38 48 89 5d 30 48 83 c5 40 48 89 18 <41> 83 ef 08 bf 07 00 00 00 44 89 fe e8 6c 3e bf fd 41 83 ff 07 77 [ 592.622983][ C1] RSP: 0018:ffffc900021374d8 EFLAGS: 00000286 [ 592.622990][ C1] RAX: ffff8880000a01b8 RBX: 0000000000000000 RCX: ffffffff83b2e824 [ 592.622994][ C1] RDX: 0000000000000000 RSI: ffffffff83b2e7ec RDI: 0000000000000005 [ 592.622999][ C1] RBP: ffff8880000a01c0 R08: ffff888097216240 R09: 0000000000000040 [ 592.623003][ C1] R10: ffffed10148245bb R11: ffff8880a4122ddf R12: 0000000000000050 [ 592.623008][ C1] R13: ffff8880000a0000 R14: 0000000000000000 R15: 0000000000000020 [ 592.623013][ C1] FS: 0000000000b96880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 592.623017][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.623021][ C1] CR2: 0000000020000180 CR3: 0000000097f48000 CR4: 00000000001406e0 [ 592.623026][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 592.623030][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 592.623033][ C1] Call Trace: [ 592.623036][ C1] cfb_fillrect+0x418/0x7a0 [ 592.623039][ C1] ? cfb_fillrect+0x7a0/0x7a0 [ 592.623042][ C1] vga16fb_fillrect+0x68f/0x1960 [ 592.623045][ C1] ? memcpy+0x35/0x50 [ 592.623048][ C1] bit_clear_margins+0x2d5/0x4a0 [ 592.623051][ C1] ? bit_bmove+0x210/0x210 [ 592.623054][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 592.623057][ C1] fbcon_clear_margins+0x1de/0x240 [ 592.623060][ C1] fbcon_switch+0xd1b/0x1740 [ 592.623063][ C1] ? fbcon_set_def_font+0x370/0x370 [ 592.623066][ C1] ? fbcon_cursor+0x477/0x650 [ 592.623069][ C1] ? bit_clear+0x4e0/0x4e0 [ 592.623072][ C1] ? is_console_locked+0x5/0x10 [ 592.623075][ C1] ? fbcon_set_origin+0x26/0x50 [ 592.623078][ C1] redraw_screen+0x2a8/0x770 [ 592.623081][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 592.623084][ C1] ? respond_string+0x290/0x290 [ 592.623087][ C1] ? fbcon_set_palette+0x3b1/0x4a0 [ 592.623090][ C1] fbcon_modechanged+0x5bd/0x780 [ 592.623093][ C1] fbcon_update_vcs+0x3a/0x50 [ 592.623096][ C1] fb_set_var+0xad0/0xd40 [ 592.623099][ C1] ? fb_blank+0x190/0x190 [ 592.623102][ C1] ? do_fb_ioctl+0x348/0x7d0 [ 592.623105][ C1] ? lock_acquire+0x197/0x420 [ 592.623108][ C1] ? do_fb_ioctl+0x335/0x7d0 [ 592.623110][ C1] do_fb_ioctl+0x390/0x7d0 [ 592.623113][ C1] ? fb_mmap+0x550/0x550 [ 592.623116][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 592.623119][ C1] ? do_wp_page+0x50b/0x13c0 [ 592.623123][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 592.623126][ C1] ? do_vfs_ioctl+0x506/0x12c0 [ 592.623129][ C1] ? up_read+0x1ab/0x750 [ 592.623132][ C1] ? mark_held_locks+0x9f/0xe0 [ 592.623134][ C1] fb_ioctl+0xdd/0x130 [ 592.623137][ C1] ? do_fb_ioctl+0x7d0/0x7d0 [ 592.623140][ C1] ksys_ioctl+0x11a/0x180 [ 592.623143][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 592.623146][ C1] ? lockdep_hardirqs_on+0x417/0x5d0 [ 592.623149][ C1] do_syscall_64+0xf6/0x7d0 [ 592.623152][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.623155][ C1] RIP: 0033:0x441419 [ 592.623164][ C1] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.623167][ C1] RSP: 002b:00007ffd4e8c2e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.623175][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 592.623179][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 592.623183][ C1] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 592.623188][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 592.623192][ C1] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 592.623219][ T1134] Kernel panic - not syncing: hung_task: blocked tasks [ 592.623230][ T1134] CPU: 0 PID: 1134 Comm: khungtaskd Not tainted 5.6.0-rc6-syzkaller #0 [ 592.623235][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.623238][ T1134] Call Trace: [ 592.623251][ T1134] dump_stack+0x188/0x20d [ 592.623310][ T1134] panic+0x2e3/0x75c [ 592.623325][ T1134] ? add_taint.cold+0x16/0x16 [ 592.623348][ T1134] ? cpumask_next+0x3c/0x40 [ 592.623364][ T1134] ? printk_safe_flush+0xd9/0x120 [ 592.623378][ T1134] ? watchdog+0xa8c/0x1010 [ 592.623394][ T1134] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 592.623416][ T1134] watchdog+0xa9d/0x1010 [ 592.623441][ T1134] ? reset_hung_task_detector+0x30/0x30 [ 592.623455][ T1134] kthread+0x357/0x430 [ 592.623469][ T1134] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 592.623484][ T1134] ret_from_fork+0x24/0x30 [ 592.625065][ T1134] Kernel Offset: disabled [ 594.837819][ T1134] Rebooting in 86400 seconds..