[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 575.412481][ T1139] INFO: task syz-executor186:7043 blocked for more than 143 seconds. [ 575.412501][ T1139] Not tainted 5.7.0-rc1-syzkaller #0 [ 575.412507][ T1139] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.412513][ T1139] syz-executor186 D28128 7043 7041 0x00000004 [ 575.412536][ T1139] Call Trace: [ 575.412721][ T1139] ? __schedule+0x937/0x1ff0 [ 575.412744][ T1139] ? __sched_text_start+0x8/0x8 [ 575.412768][ T1139] schedule+0xd0/0x2a0 [ 575.412786][ T1139] schedule_preempt_disabled+0xf/0x20 [ 575.412798][ T1139] __mutex_lock+0x7ab/0x13c0 [ 575.412843][ T1139] ? fb_open+0xd3/0x430 [ 575.412861][ T1139] ? mutex_trylock+0x2c0/0x2c0 [ 575.412878][ T1139] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.412917][ T1139] ? chrdev_open+0xc4/0x5c0 [ 575.412964][ T1139] ? lock_downgrade+0x840/0x840 [ 575.412986][ T1139] ? fb_open+0xd3/0x430 [ 575.412996][ T1139] fb_open+0xd3/0x430 [ 575.413012][ T1139] ? get_fb_info.part.0+0x80/0x80 [ 575.413024][ T1139] chrdev_open+0x219/0x5c0 [ 575.413039][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.413079][ T1139] ? security_file_open+0x84/0x410 [ 575.413096][ T1139] do_dentry_open+0x4ba/0x1290 [ 575.413112][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.413129][ T1139] ? security_inode_permission+0xc4/0xf0 [ 575.413142][ T1139] ? chown_common+0x550/0x550 [ 575.413180][ T1139] ? inode_permission+0xab/0x500 [ 575.413201][ T1139] path_openat+0x1e59/0x27d0 [ 575.413225][ T1139] ? path_lookupat.isra.0+0x530/0x530 [ 575.413242][ T1139] ? print_usage_bug+0x240/0x240 [ 575.413265][ T1139] do_filp_open+0x192/0x260 [ 575.413280][ T1139] ? may_open_dev+0xf0/0xf0 [ 575.413301][ T1139] ? do_raw_spin_lock+0x129/0x2e0 [ 575.413325][ T1139] ? _raw_spin_unlock+0x24/0x40 [ 575.413345][ T1139] ? __alloc_fd+0x46d/0x600 [ 575.413368][ T1139] do_sys_openat2+0x585/0x7d0 [ 575.413384][ T1139] ? file_open_root+0x400/0x400 [ 575.413444][ T1139] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.413462][ T1139] do_sys_open+0xc3/0x140 [ 575.413476][ T1139] ? filp_open+0x70/0x70 [ 575.413513][ T1139] ? fpregs_mark_activate+0x320/0x320 [ 575.413556][ T1139] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.413585][ T1139] do_syscall_64+0xf6/0x7d0 [ 575.413603][ T1139] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.413615][ T1139] RIP: 0033:0x441419 [ 575.413637][ T1139] Code: Bad RIP value. [ 575.413645][ T1139] RSP: 002b:00007ffd65001a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.413658][ T1139] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 575.413667][ T1139] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.413675][ T1139] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.413683][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 575.413691][ T1139] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 575.413718][ T1139] INFO: task syz-executor186:7044 blocked for more than 143 seconds. [ 575.413726][ T1139] Not tainted 5.7.0-rc1-syzkaller #0 [ 575.413731][ T1139] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.413737][ T1139] syz-executor186 D28128 7044 7040 0x00004004 [ 575.413758][ T1139] Call Trace: [ 575.413776][ T1139] ? __schedule+0x937/0x1ff0 [ 575.413797][ T1139] ? __sched_text_start+0x8/0x8 [ 575.413821][ T1139] schedule+0xd0/0x2a0 [ 575.413839][ T1139] schedule_preempt_disabled+0xf/0x20 [ 575.413850][ T1139] __mutex_lock+0x7ab/0x13c0 [ 575.413865][ T1139] ? fb_open+0xd3/0x430 [ 575.413882][ T1139] ? mutex_trylock+0x2c0/0x2c0 [ 575.413900][ T1139] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.413916][ T1139] ? chrdev_open+0xc4/0x5c0 [ 575.413934][ T1139] ? lock_downgrade+0x840/0x840 [ 575.413955][ T1139] ? fb_open+0xd3/0x430 [ 575.413966][ T1139] fb_open+0xd3/0x430 [ 575.413981][ T1139] ? get_fb_info.part.0+0x80/0x80 [ 575.413993][ T1139] chrdev_open+0x219/0x5c0 [ 575.414008][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.414025][ T1139] ? security_file_open+0x84/0x410 [ 575.414041][ T1139] do_dentry_open+0x4ba/0x1290 [ 575.414056][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.414073][ T1139] ? security_inode_permission+0xc4/0xf0 [ 575.414086][ T1139] ? chown_common+0x550/0x550 [ 575.414101][ T1139] ? inode_permission+0xab/0x500 [ 575.414121][ T1139] path_openat+0x1e59/0x27d0 [ 575.414144][ T1139] ? path_lookupat.isra.0+0x530/0x530 [ 575.414162][ T1139] ? lock_acquire+0x1f2/0x8f0 [ 575.414184][ T1139] do_filp_open+0x192/0x260 [ 575.414198][ T1139] ? may_open_dev+0xf0/0xf0 [ 575.414219][ T1139] ? do_raw_spin_lock+0x129/0x2e0 [ 575.414243][ T1139] ? _raw_spin_unlock+0x24/0x40 [ 575.414255][ T1139] ? __alloc_fd+0x46d/0x600 [ 575.414277][ T1139] do_sys_openat2+0x585/0x7d0 [ 575.414293][ T1139] ? file_open_root+0x400/0x400 [ 575.414314][ T1139] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.414331][ T1139] do_sys_open+0xc3/0x140 [ 575.414344][ T1139] ? filp_open+0x70/0x70 [ 575.414360][ T1139] ? fpregs_mark_activate+0x320/0x320 [ 575.414375][ T1139] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.414396][ T1139] do_syscall_64+0xf6/0x7d0 [ 575.414413][ T1139] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.414422][ T1139] RIP: 0033:0x441419 [ 575.414435][ T1139] Code: Bad RIP value. [ 575.414442][ T1139] RSP: 002b:00007ffd65001a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.414455][ T1139] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 575.414463][ T1139] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.414471][ T1139] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.414479][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 575.414487][ T1139] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 575.414513][ T1139] INFO: task syz-executor186:7045 blocked for more than 143 seconds. [ 575.414520][ T1139] Not tainted 5.7.0-rc1-syzkaller #0 [ 575.414525][ T1139] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.414531][ T1139] syz-executor186 D27856 7045 7037 0x00000004 [ 575.414556][ T1139] Call Trace: [ 575.414574][ T1139] ? __schedule+0x937/0x1ff0 [ 575.414595][ T1139] ? __sched_text_start+0x8/0x8 [ 575.414618][ T1139] schedule+0xd0/0x2a0 [ 575.414636][ T1139] schedule_preempt_disabled+0xf/0x20 [ 575.414647][ T1139] __mutex_lock+0x7ab/0x13c0 [ 575.414662][ T1139] ? fb_open+0xd3/0x430 [ 575.414679][ T1139] ? mutex_trylock+0x2c0/0x2c0 [ 575.414696][ T1139] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.414708][ T1139] ? chrdev_open+0xc4/0x5c0 [ 575.414726][ T1139] ? lock_downgrade+0x840/0x840 [ 575.414747][ T1139] ? fb_open+0xd3/0x430 [ 575.414758][ T1139] fb_open+0xd3/0x430 [ 575.414773][ T1139] ? get_fb_info.part.0+0x80/0x80 [ 575.414785][ T1139] chrdev_open+0x219/0x5c0 [ 575.414800][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.414816][ T1139] ? security_file_open+0x84/0x410 [ 575.414833][ T1139] do_dentry_open+0x4ba/0x1290 [ 575.414848][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.414865][ T1139] ? security_inode_permission+0xc4/0xf0 [ 575.414877][ T1139] ? chown_common+0x550/0x550 [ 575.414892][ T1139] ? inode_permission+0xab/0x500 [ 575.414940][ T1139] path_openat+0x1e59/0x27d0 [ 575.414964][ T1139] ? path_lookupat.isra.0+0x530/0x530 [ 575.414981][ T1139] ? print_usage_bug+0x240/0x240 [ 575.415004][ T1139] do_filp_open+0x192/0x260 [ 575.415019][ T1139] ? may_open_dev+0xf0/0xf0 [ 575.415040][ T1139] ? do_raw_spin_lock+0x129/0x2e0 [ 575.415064][ T1139] ? _raw_spin_unlock+0x24/0x40 [ 575.415076][ T1139] ? __alloc_fd+0x46d/0x600 [ 575.415098][ T1139] do_sys_openat2+0x585/0x7d0 [ 575.415114][ T1139] ? file_open_root+0x400/0x400 [ 575.415135][ T1139] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.415153][ T1139] do_sys_open+0xc3/0x140 [ 575.415165][ T1139] ? filp_open+0x70/0x70 [ 575.415182][ T1139] ? fpregs_mark_activate+0x320/0x320 [ 575.415196][ T1139] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.415217][ T1139] do_syscall_64+0xf6/0x7d0 [ 575.415235][ T1139] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.415244][ T1139] RIP: 0033:0x441419 [ 575.415256][ T1139] Code: Bad RIP value. [ 575.415264][ T1139] RSP: 002b:00007ffd65001a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.415276][ T1139] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 575.415284][ T1139] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.415292][ T1139] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.415300][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 575.415308][ T1139] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 575.415334][ T1139] INFO: task syz-executor186:7046 blocked for more than 143 seconds. [ 575.415341][ T1139] Not tainted 5.7.0-rc1-syzkaller #0 [ 575.415346][ T1139] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.415352][ T1139] syz-executor186 D28128 7046 7042 0x00004004 [ 575.415447][ T1139] Call Trace: [ 575.415465][ T1139] ? __schedule+0x937/0x1ff0 [ 575.415486][ T1139] ? __sched_text_start+0x8/0x8 [ 575.415510][ T1139] schedule+0xd0/0x2a0 [ 575.415527][ T1139] schedule_preempt_disabled+0xf/0x20 [ 575.415538][ T1139] __mutex_lock+0x7ab/0x13c0 [ 575.415553][ T1139] ? fb_open+0xd3/0x430 [ 575.415570][ T1139] ? mutex_trylock+0x2c0/0x2c0 [ 575.415587][ T1139] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.415599][ T1139] ? chrdev_open+0xc4/0x5c0 [ 575.415618][ T1139] ? lock_downgrade+0x840/0x840 [ 575.415639][ T1139] ? fb_open+0xd3/0x430 [ 575.415650][ T1139] fb_open+0xd3/0x430 [ 575.415665][ T1139] ? get_fb_info.part.0+0x80/0x80 [ 575.415676][ T1139] chrdev_open+0x219/0x5c0 [ 575.415691][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.415707][ T1139] ? security_file_open+0x84/0x410 [ 575.415724][ T1139] do_dentry_open+0x4ba/0x1290 [ 575.415738][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.415755][ T1139] ? security_inode_permission+0xc4/0xf0 [ 575.415768][ T1139] ? chown_common+0x550/0x550 [ 575.415783][ T1139] ? inode_permission+0xab/0x500 [ 575.415803][ T1139] path_openat+0x1e59/0x27d0 [ 575.415826][ T1139] ? path_lookupat.isra.0+0x530/0x530 [ 575.415843][ T1139] ? lock_acquire+0x1f2/0x8f0 [ 575.415866][ T1139] do_filp_open+0x192/0x260 [ 575.415880][ T1139] ? may_open_dev+0xf0/0xf0 [ 575.415901][ T1139] ? do_raw_spin_lock+0x129/0x2e0 [ 575.415930][ T1139] ? _raw_spin_unlock+0x24/0x40 [ 575.415942][ T1139] ? __alloc_fd+0x46d/0x600 [ 575.415964][ T1139] do_sys_openat2+0x585/0x7d0 [ 575.415980][ T1139] ? file_open_root+0x400/0x400 [ 575.416001][ T1139] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.416019][ T1139] do_sys_open+0xc3/0x140 [ 575.416032][ T1139] ? filp_open+0x70/0x70 [ 575.416049][ T1139] ? fpregs_mark_activate+0x320/0x320 [ 575.416063][ T1139] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.416084][ T1139] do_syscall_64+0xf6/0x7d0 [ 575.416101][ T1139] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.416110][ T1139] RIP: 0033:0x441419 [ 575.416124][ T1139] Code: Bad RIP value. [ 575.416132][ T1139] RSP: 002b:00007ffd65001a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.416144][ T1139] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 575.416152][ T1139] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.416160][ T1139] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.416168][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 575.416176][ T1139] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 575.416202][ T1139] INFO: task syz-executor186:7047 blocked for more than 143 seconds. [ 575.416210][ T1139] Not tainted 5.7.0-rc1-syzkaller #0 [ 575.416215][ T1139] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.416220][ T1139] syz-executor186 D28128 7047 7039 0x00004004 [ 575.416241][ T1139] Call Trace: [ 575.416259][ T1139] ? __schedule+0x937/0x1ff0 [ 575.416280][ T1139] ? __sched_text_start+0x8/0x8 [ 575.416304][ T1139] schedule+0xd0/0x2a0 [ 575.416321][ T1139] schedule_preempt_disabled+0xf/0x20 [ 575.416332][ T1139] __mutex_lock+0x7ab/0x13c0 [ 575.416347][ T1139] ? fb_open+0xd3/0x430 [ 575.416364][ T1139] ? mutex_trylock+0x2c0/0x2c0 [ 575.416381][ T1139] ? __mutex_unlock_slowpath+0xe2/0x660 [ 575.416393][ T1139] ? chrdev_open+0xc4/0x5c0 [ 575.416410][ T1139] ? lock_downgrade+0x840/0x840 [ 575.416431][ T1139] ? fb_open+0xd3/0x430 [ 575.416442][ T1139] fb_open+0xd3/0x430 [ 575.416457][ T1139] ? get_fb_info.part.0+0x80/0x80 [ 575.416469][ T1139] chrdev_open+0x219/0x5c0 [ 575.416484][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.416500][ T1139] ? security_file_open+0x84/0x410 [ 575.416517][ T1139] do_dentry_open+0x4ba/0x1290 [ 575.416532][ T1139] ? cdev_put.part.0+0x50/0x50 [ 575.416549][ T1139] ? security_inode_permission+0xc4/0xf0 [ 575.416561][ T1139] ? chown_common+0x550/0x550 [ 575.416576][ T1139] ? inode_permission+0xab/0x500 [ 575.416596][ T1139] path_openat+0x1e59/0x27d0 [ 575.416619][ T1139] ? path_lookupat.isra.0+0x530/0x530 [ 575.416636][ T1139] ? lock_acquire+0x1f2/0x8f0 [ 575.416659][ T1139] do_filp_open+0x192/0x260 [ 575.416673][ T1139] ? may_open_dev+0xf0/0xf0 [ 575.416694][ T1139] ? do_raw_spin_lock+0x129/0x2e0 [ 575.416718][ T1139] ? _raw_spin_unlock+0x24/0x40 [ 575.416730][ T1139] ? __alloc_fd+0x46d/0x600 [ 575.416752][ T1139] do_sys_openat2+0x585/0x7d0 [ 575.416768][ T1139] ? file_open_root+0x400/0x400 [ 575.416788][ T1139] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 575.416806][ T1139] do_sys_open+0xc3/0x140 [ 575.416819][ T1139] ? filp_open+0x70/0x70 [ 575.416836][ T1139] ? fpregs_mark_activate+0x320/0x320 [ 575.416850][ T1139] ? trace_hardirqs_off_caller+0x55/0x230 [ 575.416871][ T1139] do_syscall_64+0xf6/0x7d0 [ 575.416888][ T1139] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.416897][ T1139] RIP: 0033:0x441419 [ 575.416915][ T1139] Code: Bad RIP value. [ 575.416922][ T1139] RSP: 002b:00007ffd65001a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.416934][ T1139] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 575.416943][ T1139] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 575.416951][ T1139] RBP: 00000000006cb018 R08: 0000000000000004 R09: 00000000004002c8 [ 575.416959][ T1139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402190 [ 575.416967][ T1139] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 575.416989][ T1139] [ 575.416989][ T1139] Showing all locks held in the system: [ 575.417003][ T1139] 1 lock held by khungtaskd/1139: [ 575.417007][ T1139] #0: ffffffff899bed00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 575.417071][ T1139] 1 lock held by in:imklog/6714: [ 575.417075][ T1139] #0: ffff88809fe3f630 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 575.417109][ T1139] 2 locks held by syz-executor186/7038: [ 575.417118][ T1139] 1 lock held by syz-executor186/7043: [ 575.417122][ T1139] #0: ffff888218c29078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.417151][ T1139] 1 lock held by syz-executor186/7044: [ 575.417155][ T1139] #0: ffff888218c29078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.417184][ T1139] 1 lock held by syz-executor186/7045: [ 575.417188][ T1139] #0: ffff888218c29078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.417217][ T1139] 1 lock held by syz-executor186/7046: [ 575.417221][ T1139] #0: ffff888218c29078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.417250][ T1139] 1 lock held by syz-executor186/7047: [ 575.417255][ T1139] #0: ffff888218c29078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 575.417279][ T1139] [ 575.417284][ T1139] ============================================= [ 575.417284][ T1139] [ 575.417291][ T1139] NMI backtrace for cpu 0 [ 575.417303][ T1139] CPU: 0 PID: 1139 Comm: khungtaskd Not tainted 5.7.0-rc1-syzkaller #0 [ 575.417310][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.417315][ T1139] Call Trace: [ 575.417386][ T1139] dump_stack+0x188/0x20d [ 575.417403][ T1139] nmi_cpu_backtrace.cold+0x70/0xb1 [ 575.417441][ T1139] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 575.417456][ T1139] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 575.417493][ T1139] watchdog+0xa8c/0x1010 [ 575.417511][ T1139] ? reset_hung_task_detector+0x30/0x30 [ 575.417562][ T1139] kthread+0x388/0x470 [ 575.417575][ T1139] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 575.417590][ T1139] ret_from_fork+0x24/0x30 [ 575.417613][ T1139] Sending NMI from CPU 0 to CPUs 1: [ 575.418251][ C1] NMI backtrace for cpu 1 [ 575.418257][ C1] CPU: 1 PID: 7038 Comm: syz-executor186 Not tainted 5.7.0-rc1-syzkaller #0 [ 575.418263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.418266][ C1] RIP: 0010:write_comp_data+0x1e/0x70 [ 575.418277][ C1] Code: 48 89 11 c3 0f 1f 84 00 00 00 00 00 65 4c 8b 04 25 00 1f 02 00 65 8b 05 68 ea 8e 7e a9 00 01 1f 00 75 51 41 8b 80 d8 13 00 00 <83> f8 03 75 45 49 8b 80 e0 13 00 00 45 8b 80 dc 13 00 00 4c 8b 08 [ 575.418281][ C1] RSP: 0018:ffffc90001077590 EFLAGS: 00000246 [ 575.418288][ C1] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff83c35f6a [ 575.418293][ C1] RDX: 0000000000000040 RSI: 0000000000000050 RDI: 0000000000000004 [ 575.418297][ C1] RBP: 0000000000000040 R08: ffff8880a8cd21c0 R09: ffffed104319205c [ 575.418302][ C1] R10: ffff888218c902df R11: ffffed104319205b R12: ffff8880000a0040 [ 575.418307][ C1] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000e64bbfb7 [ 575.418312][ C1] FS: 0000000001704880(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 575.418316][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.418321][ C1] CR2: 00000000006cc080 CR3: 00000000a8cde000 CR4: 00000000001406e0 [ 575.418325][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.418330][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.418332][ C1] Call Trace: [ 575.418336][ C1] vga16fb_fillrect+0x9da/0x1960 [ 575.418339][ C1] ? memcpy+0x39/0x60 [ 575.418342][ C1] bit_clear_margins+0x2d5/0x4a0 [ 575.418345][ C1] ? bit_bmove+0x210/0x210 [ 575.418348][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 575.418352][ C1] fbcon_clear_margins+0x1de/0x240 [ 575.418355][ C1] fbcon_switch+0xd21/0x1740 [ 575.418358][ C1] ? fbcon_set_def_font+0x370/0x370 [ 575.418361][ C1] ? fbcon_cursor+0x477/0x650 [ 575.418364][ C1] ? bit_clear+0x4e0/0x4e0 [ 575.418367][ C1] ? is_console_locked+0x5/0x10 [ 575.418370][ C1] ? fbcon_set_origin+0x26/0x50 [ 575.418374][ C1] redraw_screen+0x2ae/0x770 [ 575.418377][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 575.418380][ C1] ? respond_string+0x290/0x290 [ 575.418383][ C1] ? fbcon_set_palette+0x3b1/0x4a0 [ 575.418387][ C1] fbcon_modechanged+0x5c3/0x790 [ 575.418390][ C1] fbcon_update_vcs+0x3a/0x50 [ 575.418392][ C1] fb_set_var+0xad0/0xd40 [ 575.418395][ C1] ? fb_blank+0x190/0x190 [ 575.418399][ C1] ? mark_held_locks+0xe0/0xe0 [ 575.418402][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 575.418405][ C1] do_fb_ioctl+0x390/0x6e0 [ 575.418413][ C1] ? fb_mmap+0x550/0x550 [ 575.418417][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 575.418420][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 575.418423][ C1] ? do_vfs_ioctl+0x50c/0x12d0 [ 575.418426][ C1] ? up_read+0x1ab/0x750 [ 575.418429][ C1] ? down_read_nested+0x420/0x420 [ 575.418432][ C1] fb_ioctl+0xdd/0x130 [ 575.418435][ C1] ? do_fb_ioctl+0x6e0/0x6e0 [ 575.418438][ C1] ksys_ioctl+0x11a/0x180 [ 575.418441][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 575.418444][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 575.418447][ C1] do_syscall_64+0xf6/0x7d0 [ 575.418451][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 575.418454][ C1] RIP: 0033:0x441419 [ 575.418464][ C1] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.418467][ C1] RSP: 002b:00007ffd65001a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.418475][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441419 [ 575.418480][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 575.418484][ C1] RBP: 00000000006cb018 R08: 00000000004002c8 R09: 00000000004002c8 [ 575.418489][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402190 [ 575.418493][ C1] R13: 0000000000402220 R14: 0000000000000000 R15: 0000000000000000 [ 575.418631][ T1139] Kernel panic - not syncing: hung_task: blocked tasks [ 575.418641][ T1139] CPU: 0 PID: 1139 Comm: khungtaskd Not tainted 5.7.0-rc1-syzkaller #0 [ 575.418646][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.418649][ T1139] Call Trace: [ 575.418661][ T1139] dump_stack+0x188/0x20d [ 575.418699][ T1139] panic+0x2e3/0x75c [ 575.418711][ T1139] ? add_taint.cold+0x16/0x16 [ 575.418724][ T1139] ? cpumask_next+0x3c/0x40 [ 575.418735][ T1139] ? printk_safe_flush+0xd9/0x120 [ 575.418744][ T1139] ? watchdog+0xa8c/0x1010 [ 575.418754][ T1139] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 575.418767][ T1139] watchdog+0xa9d/0x1010 [ 575.418781][ T1139] ? reset_hung_task_detector+0x30/0x30 [ 575.418794][ T1139] kthread+0x388/0x470 [ 575.418803][ T1139] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 575.418814][ T1139] ret_from_fork+0x24/0x30 [ 575.420647][ T1139] Kernel Offset: disabled [ 577.515009][ T1139] Rebooting in 86400 seconds..