INFO: task agetty:6515 blocked for more than 143 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:agetty state:D stack:24496 pid: 6515 ppid: 1 flags:0x00000000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 tiocsti drivers/tty/tty_io.c:2308 [inline] tty_ioctl+0x80b/0x12d0 drivers/tty/tty_io.c:2719 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd9fe9d0017 RSP: 002b:00007ffc21e0af38 EFLAGS: 00000202 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ffc21e0b0bc RCX: 00007fd9fe9d0017 RDX: 00007ffc21e0b0bb RSI: 0000000000005412 RDI: 0000000000000000 RBP: 00007ffc21e0b1b8 R08: ffffffffffffff98 R09: 00007ffc21e0afb0 R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc21e0af54 R13: 00007ffc21e0b0b0 R14: 00007ffc21e0afb0 R15: 0000000000000000 INFO: task syz-executor.4:9538 blocked for more than 143 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:28664 pid: 9538 ppid: 7101 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f91e95bf8d9 RSP: 002b:00007f91e8d36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f91e96c3f60 RCX: 00007f91e95bf8d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007f91e9619cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff6853881f R14: 00007f91e8d36300 R15: 0000000000022000 INFO: task syz-executor.2:9559 blocked for more than 143 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:28928 pid: 9559 ppid: 9011 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fc46c6cd8d9 RSP: 002b:00007fc46be44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc46c7d1f60 RCX: 00007fc46c6cd8d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007fc46c727cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdeffd109f R14: 00007fc46be44300 R15: 0000000000022000 INFO: task syz-executor.2:9574 blocked for more than 144 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:28664 pid: 9574 ppid: 9011 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fc46c6cd8d9 RSP: 002b:00007fc46be44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc46c7d1f60 RCX: 00007fc46c6cd8d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007fc46c727cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdeffd109f R14: 00007fc46be44300 R15: 0000000000022000 INFO: task syz-executor.4:9577 blocked for more than 144 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.4 state:D stack:28664 pid: 9577 ppid: 7101 flags:0x00004004 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f91e95bf8d9 RSP: 002b:00007f91e8d36188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f91e96c3f60 RCX: 00007f91e95bf8d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007f91e9619cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff6853881f R14: 00007f91e8d36300 R15: 0000000000022000 INFO: task syz-executor.1:9586 blocked for more than 144 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.1 state:D stack:28664 pid: 9586 ppid: 7095 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f0d39d768d9 RSP: 002b:00007f0d394ed188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f0d39e7af60 RCX: 00007f0d39d768d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007f0d39dd0cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc90a103df R14: 00007f0d394ed300 R15: 0000000000022000 INFO: task syz-executor.5:9588 blocked for more than 144 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:28664 pid: 9588 ppid: 7103 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4bd08718d9 RSP: 002b:00007f4bcffe8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f4bd0975f60 RCX: 00007f4bd08718d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007f4bd08cbcb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffebc27be3f R14: 00007f4bcffe8300 R15: 0000000000022000 INFO: task syz-executor.0:9590 blocked for more than 145 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.0 state:D stack:29264 pid: 9590 ppid: 8609 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f8b775d48d9 RSP: 002b:00007f8b76d4b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f8b776d8f60 RCX: 00007f8b775d48d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007f8b7762ecb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffcb4ea075f R14: 00007f8b76d4b300 R15: 0000000000022000 INFO: task syz-executor.2:9615 blocked for more than 145 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.2 state:D stack:28664 pid: 9615 ppid: 9011 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fc46c6cd8d9 RSP: 002b:00007fc46be44188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fc46c7d1f60 RCX: 00007fc46c6cd8d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007fc46c727cb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdeffd109f R14: 00007fc46be44300 R15: 0000000000022000 INFO: task syz-executor.5:9623 blocked for more than 145 seconds. Not tainted 5.16.0-rc1-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:syz-executor.5 state:D stack:29208 pid: 9623 ppid: 7103 flags:0x00004000 Call Trace: context_switch kernel/sched/core.c:4972 [inline] __schedule+0x90d/0x26c0 kernel/sched/core.c:6253 schedule+0xd2/0x260 kernel/sched/core.c:6326 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:6385 __mutex_lock_common kernel/locking/mutex.c:680 [inline] __mutex_lock+0xa32/0x12f0 kernel/locking/mutex.c:740 paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 vt_ioctl+0x19a7/0x2120 drivers/tty/vt/vt_ioctl.c:762 tty_ioctl+0x478/0x12d0 drivers/tty/tty_io.c:2805 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x11f/0x190 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4bd08718d9 RSP: 002b:00007f4bcffe8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f4bd0975f60 RCX: 00007f4bd08718d9 RDX: 00000000200000c0 RSI: 000000000000541c RDI: 0000000000000005 RBP: 00007f4bd08cbcb4 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffebc27be3f R14: 00007f4bcffe8300 R15: 0000000000022000 Showing all locks held in the system: 1 lock held by khungtaskd/27: #0: ffffffff8ab75f00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 kernel/locking/lockdep.c:6458 2 locks held by systemd-journal/2999: #0: ffff8880b9f39ad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested kernel/sched/core.c:478 [inline] #0: ffff8880b9f39ad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock kernel/sched/sched.h:1316 [inline] #0: ffff8880b9f39ad8 (&rq->__lock){-.-.}-{2:2}, at: rq_lock kernel/sched/sched.h:1614 [inline] #0: ffff8880b9f39ad8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x236/0x26c0 kernel/sched/core.c:6167 #1: ffffffff8acb1860 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: avc_has_perm_noaudit+0x83/0x2c0 security/selinux/avc.c:1147 1 lock held by in:imklog/6280: #0: ffff88801e0c8430 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x9c/0xb0 fs/file.c:990 2 locks held by agetty/6515: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: tiocsti drivers/tty/tty_io.c:2308 [inline] #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: tty_ioctl+0x80b/0x12d0 drivers/tty/tty_io.c:2719 2 locks held by syz-executor.0/9537: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.4/9538: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9559: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9574: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.4/9577: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.1/9586: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.5/9588: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.0/9590: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9615: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.5/9623: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.1/9625: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.4/9669: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.1/9646: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9648: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.3/9653: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.5/9660: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.0/9662: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9683: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.0/9700: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.3/9703: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9712: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.5/9713: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.3/9734: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.0/9735: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.1/9748: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 2 locks held by syz-executor.2/9750: #0: ffff88807c548098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x1f/0x70 drivers/tty/tty_ldisc.c:252 #1: ffff88801043d0b8 (&buf->lock){+.+.}-{3:3}, at: paste_selection+0x109/0x450 drivers/tty/vt/selection.c:390 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x57/0x7d lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x30/0xc0 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x11f/0x170 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:146 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:210 [inline] watchdog+0x88c/0xbf0 kernel/hung_task.c:295 kthread+0x3ab/0x480 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 2999 Comm: systemd-journal Not tainted 5.16.0-rc1-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:check_wait_context kernel/locking/lockdep.c:4705 [inline] RIP: 0010:__lock_acquire+0x4cf/0x5410 kernel/locking/lockdep.c:4977 Code: 7c 24 21 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 75 36 00 00 <41> 0f b6 54 24 21 84 d2 0f 88 e9 0b 00 00 48 8d bd b9 00 00 00 48 RSP: 0018:ffffc9000b70f5e8 EFLAGS: 00000046 RAX: 0000000000000000 RBX: ffffffff8ab75f00 RCX: ffffffff8152637c RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88801791eaa9 RBP: ffffffff8ee60f20 R08: 0000000000000000 R09: ffffffff8ee5e947 R10: fffffbfff1dcbd28 R11: ffffed1002f60849 R12: ffff88801791ea88 R13: ffff88801791e040 R14: 0000000000020000 R15: 0000000000000002 FS: 00007feb2f7a28c0(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007feb2cc30000 CR3: 000000007702c000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: lock_acquire kernel/locking/lockdep.c:5637 [inline] lock_acquire+0x1ab/0x510 kernel/locking/lockdep.c:5602 rcu_lock_acquire include/linux/rcupdate.h:268 [inline] rcu_read_lock include/linux/rcupdate.h:688 [inline] avc_has_perm_noaudit+0xb4/0x2c0 security/selinux/avc.c:1150 selinux_inode_permission+0x2d5/0x430 security/selinux/hooks.c:3191 security_inode_permission+0x6e/0xb0 security/security.c:1314 inode_permission fs/namei.c:505 [inline] may_lookup fs/namei.c:1683 [inline] link_path_walk.part.0+0x212/0x9d0 fs/namei.c:2239 link_path_walk fs/namei.c:2222 [inline] path_openat+0x20a/0x2250 fs/namei.c:3555 do_filp_open+0x199/0x3d0 fs/namei.c:3586 do_sys_openat2+0x11e/0x400 fs/open.c:1212 do_sys_open fs/open.c:1228 [inline] __do_sys_open fs/open.c:1236 [inline] __se_sys_open fs/open.c:1232 [inline] __x64_sys_open+0xfd/0x1a0 fs/open.c:1232 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7feb2ed31840 Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 RSP: 002b:00007fff59f9dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 00007fff59f9e1d0 RCX: 00007feb2ed31840 RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055ebbfc2d830 RBP: 000000000000000d R08: 00000000000001e0 R09: 00000000ffffffff R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff R13: 000055ebbfc21060 R14: 00007fff59f9e190 R15: 000055ebbfc2d650 ---------------- Code disassembly (best guess), 1 bytes skipped: 0: 24 21 and $0x21,%al 2: 48 b8 00 00 00 00 00 movabs $0xdffffc0000000000,%rax 9: fc ff df c: 48 89 fa mov %rdi,%rdx f: 48 c1 ea 03 shr $0x3,%rdx 13: 0f b6 04 02 movzbl (%rdx,%rax,1),%eax 17: 48 89 fa mov %rdi,%rdx 1a: 83 e2 07 and $0x7,%edx 1d: 38 d0 cmp %dl,%al 1f: 7f 08 jg 0x29 21: 84 c0 test %al,%al 23: 0f 85 75 36 00 00 jne 0x369e * 29: 41 0f b6 54 24 21 movzbl 0x21(%r12),%edx <-- trapping instruction 2f: 84 d2 test %dl,%dl 31: 0f 88 e9 0b 00 00 js 0xc20 37: 48 8d bd b9 00 00 00 lea 0xb9(%rbp),%rdi 3e: 48 rex.W