complete_change_console+0xb1/0x720 drivers/tty/vt/vt_ioctl.c:1274 console_callback+0x106/0x330 drivers/tty/vt/vt.c:2850 process_one_work+0x789/0xfc0 kernel/workqueue.c:2269 worker_thread+0xaa4/0x1460 kernel/workqueue.c:2415 kthread+0x37e/0x3a0 drivers/block/aoe/aoecmd.c:1234 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293 Modules linked in: general protection fault, probably for non-canonical address 0xdffffc0020000001: 0000 [#2] PREEMPT SMP KASAN KASAN: probably user-memory-access in range [0x0000000100000008-0x000000010000000f] CPU: 1 PID: 14794 Comm: kworker/1:3 Not tainted 5.8.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events console_callback RIP: 0010:fbcon_cursor+0xcd/0xc00 drivers/video/fbdev/core/fbcon.c:1389 Code: 7d 00 49 8d ae f0 03 00 00 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 ef e8 be e0 e4 fd 48 8b 6d 00 48 89 e8 48 c1 e8 03 <42> 8a 04 20 84 c0 0f 85 e7 07 00 00 0f b7 45 00 89 44 24 1c 4c 89 RSP: 0018:ffffc900195176a8 EFLAGS: 00010003 RAX: 0000000020000001 RBX: 1ffff11043118494 RCX: ffff888013400140 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888087951000 RBP: 000000010000000e R08: ffffffff83d0185a R09: fffffbfff12da58d R10: fffffbfff12da58d R11: 0000000000000000 R12: dffffc0000000000 R13: ffff8882188c24a0 R14: ffff888087951000 R15: ffff8880a3b91000 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000004434d000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: fbcon_blank+0x324/0x930 drivers/video/fbdev/core/fbcon.c:2416 do_unblank_screen+0x29f/0xb00 drivers/tty/vt/vt.c:4310 bust_spinlocks+0x43/0xd0 lib/bust_spinlocks.c:26 oops_end+0x33/0xf0 arch/x86/kernel/dumpstack.c:337 do_trap_no_signal arch/x86/kernel/traps.c:119 [inline] do_trap+0x1e7/0x340 arch/x86/kernel/traps.c:157 do_error_trap+0x11b/0x190 arch/x86/kernel/traps.c:177 __exc_divide_error arch/x86/kernel/traps.c:199 [inline] exc_divide_error+0x3a/0x50 arch/x86/kernel/traps.c:197 asm_exc_divide_error+0x12/0x20 arch/x86/include/asm/idtentry.h:543 RIP: 0010:fbcon_update_softback drivers/video/fbdev/core/fbcon.c:378 [inline] RIP: 0010:fbcon_switch+0x16c/0x1e40 drivers/video/fbdev/core/fbcon.c:2256 Code: 00 44 8b 35 c2 73 76 05 49 8d 9f 8c 03 00 00 48 89 d8 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 64 18 00 00 44 8b 3b 44 89 f0 31 d2 <41> f7 f7 89 c3 bf 05 00 00 00 89 c6 e8 93 87 a4 fd 83 fb 06 7c 15 RSP: 0018:ffffc90019517a70 EFLAGS: 00010246 RAX: 0000000000008000 RBX: ffff88808795138c RCX: ffff888013400140 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8880a3450000 R08: ffffffff83cff809 R09: fffffbfff12da58d R10: fffffbfff12da58d R11: 0000000000000000 R12: ffff888087951380 R13: dffffc0000000000 R14: 0000000000008000 R15: 0000000000000000 redraw_screen+0x4fc/0x16f0 drivers/tty/vt/vt.c:1015 complete_change_console+0xb1/0x720 drivers/tty/vt/vt_ioctl.c:1274 console_callback+0x106/0x330 drivers/tty/vt/vt.c:2850 process_one_work+0x789/0xfc0 kernel/workqueue.c:2269 worker_thread+0xaa4/0x1460 kernel/workqueue.c:2415 kthread+0x37e/0x3a0 drivers/block/aoe/aoecmd.c:1234 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:293 Modules linked in: ---[ end trace bcbe3db6091c2f8b ]--- RIP: 0010:fbcon_update_softback drivers/video/fbdev/core/fbcon.c:378 [inline] RIP: 0010:fbcon_switch+0x16c/0x1e40 drivers/video/fbdev/core/fbcon.c:2256 Code: 00 44 8b 35 c2 73 76 05 49 8d 9f 8c 03 00 00 48 89 d8 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 64 18 00 00 44 8b 3b 44 89 f0 31 d2 <41> f7 f7 89 c3 bf 05 00 00 00 89 c6 e8 93 87 a4 fd 83 fb 06 7c 15 RSP: 0018:ffffc90019517a70 EFLAGS: 00010246 RAX: 0000000000008000 RBX: ffff88808795138c RCX: ffff888013400140 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8880a3450000 R08: ffffffff83cff809 R09: fffffbfff12da58d R10: fffffbfff12da58d R11: 0000000000000000 R12: ffff888087951380 R13: dffffc0000000000 R14: 0000000000008000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000000 CR3: 000000004434d000 CR4: 00000000001426e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400