Warning: Permanently added '10.128.0.81' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 699.662572] INFO: task syz-executor443:8525 blocked for more than 140 seconds. [ 699.662583] Not tainted 4.19.158-syzkaller #0 [ 699.662588] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 699.662595] syz-executor443 D28648 8525 8094 0x00000004 [ 699.662616] Call Trace: [ 699.662803] __schedule+0x887/0x2040 [ 699.662827] ? io_schedule_timeout+0x140/0x140 [ 699.662848] ? __down+0x13a/0x2a0 [ 699.662860] schedule+0x8d/0x1b0 [ 699.662875] schedule_timeout+0x92d/0xfe0 [ 699.662957] ? check_preemption_disabled+0x41/0x280 [ 699.662973] ? usleep_range+0x170/0x170 [ 699.662988] ? __down+0x17b/0x2a0 [ 699.663046] ? lock_downgrade+0x720/0x720 [ 699.663065] ? _raw_spin_unlock_irq+0x24/0x80 [ 699.663082] ? __down+0x13a/0x2a0 [ 699.663094] __down+0x183/0x2a0 [ 699.663111] ? ww_mutex_lock+0x180/0x180 [ 699.663130] ? do_raw_spin_lock+0xcb/0x220 [ 699.663146] down+0x57/0x80 [ 699.663185] console_lock+0x25/0x80 [ 699.663218] do_fb_ioctl+0x33e/0xb50 [ 699.663235] ? register_framebuffer+0x9e0/0x9e0 [ 699.663247] ? lock_downgrade+0x720/0x720 [ 699.663296] ? page_remove_rmap.part.0+0x2f/0x2c0 [ 699.663313] ? do_raw_spin_unlock+0x171/0x230 [ 699.663327] ? wp_page_copy+0x1203/0x2c40 [ 699.663369] ? clear_subpage.constprop.0+0x100/0x100 [ 699.663400] ? mark_held_locks+0xf0/0xf0 [ 699.663418] ? __handle_mm_fault+0xf34/0x41c0 [ 699.663434] fb_ioctl+0xdd/0x130 [ 699.663446] ? do_fb_ioctl+0xb50/0xb50 [ 699.663477] do_vfs_ioctl+0xcdb/0x12e0 [ 699.663494] ? ioctl_preallocate+0x200/0x200 [ 699.663524] ? __do_page_fault+0x6d1/0xd60 [ 699.663541] ? lock_downgrade+0x720/0x720 [ 699.663561] ? up_read+0x17/0x110 [ 699.663574] ? __do_page_fault+0x180/0xd60 [ 699.663591] ksys_ioctl+0x9b/0xc0 [ 699.663607] __x64_sys_ioctl+0x6f/0xb0 [ 699.663619] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 699.663638] do_syscall_64+0xf9/0x620 [ 699.663655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.663666] RIP: 0033:0x445189 [ 699.663687] Code: Bad RIP value. [ 699.663695] RSP: 002b:00007ffe06dac238 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.663708] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000445189 [ 699.663721] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000003 [ 699.663730] RBP: 0000000000087630 R08: 00000000004002e0 R09: 00000000004002e0 [ 699.663738] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000402350 [ 699.663745] R13: 00000000004023e0 R14: 0000000000000000 R15: 0000000000000000 [ 699.663766] [ 699.663766] Showing all locks held in the system: [ 699.663779] 7 locks held by kworker/u4:2/101: [ 699.663788] 1 lock held by khungtaskd/1567: [ 699.663792] #0: 00000000c59e5605 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 [ 699.663840] 1 lock held by in:imklog/7789: [ 699.663844] #0: 00000000e998af56 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x26f/0x310 [ 699.663891] 2 locks held by agetty/7802: [ 699.663895] #0: 0000000086fa765f (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 699.663936] #1: 0000000035130b29 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 [ 699.663960] [ 699.663965] ============================================= [ 699.663965] [ 699.663971] NMI backtrace for cpu 0 [ 699.663984] CPU: 0 PID: 1567 Comm: khungtaskd Not tainted 4.19.158-syzkaller #0 [ 699.663992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.663996] Call Trace: [ 699.664026] dump_stack+0x1fc/0x2fe [ 699.664053] nmi_cpu_backtrace.cold+0x63/0xa2 [ 699.664084] ? lapic_can_unplug_cpu.cold+0x39/0x39 [ 699.664099] nmi_trigger_cpumask_backtrace+0x1a6/0x1eb [ 699.664132] watchdog+0x991/0xe60 [ 699.664152] ? reset_hung_task_detector+0x30/0x30 [ 699.664182] kthread+0x33f/0x460 [ 699.664194] ? kthread_park+0x180/0x180 [ 699.664207] ret_from_fork+0x24/0x30 [ 699.664229] Sending NMI from CPU 0 to CPUs 1: [ 699.664794] NMI backtrace for cpu 1 [ 699.664800] CPU: 1 PID: 101 Comm: kworker/u4:2 Not tainted 4.19.158-syzkaller #0 [ 699.664806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.664809] Workqueue: events_unbound flush_to_ldisc [ 699.664815] RIP: 0010:vga16fb_fillrect+0x9d4/0x1940 [ 699.664825] Code: ff 89 de 31 ed e8 4c 6e bc fd 85 db 4d 89 ec 74 22 e8 d0 6c bc fd 45 88 34 24 83 c5 01 89 df 49 83 c4 01 89 ee e8 ac 6d bc fd <39> eb 75 e3 89 d8 49 01 c5 e8 ae 6c bc fd 31 ff 44 89 fe 4c 03 2c [ 699.664829] RSP: 0018:ffff8880b53c74d0 EFLAGS: 00000293 [ 699.664835] RAX: 0000000000000000 RBX: 0000000000000050 RCX: ffffffff83a86344 [ 699.664840] RDX: 000000000000003c RSI: ffff8880b53bc3c0 RDI: 0000000000000004 [ 699.664845] RBP: 000000000000003c R08: 0000000000000010 R09: 0000000000000050 [ 699.664849] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880000a003c [ 699.664854] R13: ffff8880000a0000 R14: 0000000000000000 R15: 00000000e8bc1d07 [ 699.664859] FS: 0000000000000000(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 699.664863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.664868] CR2: 00000000006d0080 CR3: 00000000a46c2000 CR4: 00000000001406e0 [ 699.664872] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 699.664877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 699.664879] Call Trace: [ 699.664883] bit_clear+0x382/0x4d0 [ 699.664886] ? bit_bmove+0x210/0x210 [ 699.664889] fbcon_clear+0x5d6/0x690 [ 699.664892] ? bit_bmove+0x210/0x210 [ 699.664895] fbcon_scroll+0x42e/0x3440 [ 699.664898] con_scroll+0x5f8/0x720 [ 699.664902] ? __atomic_notifier_call_chain+0xc5/0x180 [ 699.664904] lf+0x262/0x2b0 [ 699.664907] ? con_scroll+0x720/0x720 [ 699.664911] ? __atomic_notifier_call_chain+0xec/0x180 [ 699.664914] do_con_write+0x133e/0x1d90 [ 699.664917] ? do_con_trol+0x5970/0x5970 [ 699.664920] ? do_con_trol+0x5970/0x5970 [ 699.664923] con_put_char+0x96/0xe0 [ 699.664927] ? do_con_write+0x1d90/0x1d90 [ 699.664930] ? con_put_char+0x9e/0xe0 [ 699.664933] ? do_con_write+0x1d90/0x1d90 [ 699.664936] ? do_con_write+0x1d90/0x1d90 [ 699.664939] tty_put_char+0xb7/0x150 [ 699.664942] ? dev_match_devt+0x90/0x90 [ 699.664945] ? do_con_write+0x1d90/0x1d90 [ 699.664948] ? tty_put_char+0xbf/0x150 [ 699.664951] ? dev_match_devt+0x90/0x90 [ 699.664955] do_output_char+0x155/0x850 [ 699.664958] __process_echoes+0x38e/0x9f0 [ 699.664961] n_tty_receive_buf_common+0xc0c/0x2a90 [ 699.664965] tty_ldisc_receive_buf+0xa9/0x190 [ 699.664969] ? n_tty_receive_buf_common+0x2a90/0x2a90 [ 699.664972] tty_port_default_receive_buf+0x78/0xa0 [ 699.664975] flush_to_ldisc+0x21f/0x390 [ 699.664979] process_one_work+0x864/0x1570 [ 699.664982] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 699.664985] worker_thread+0x64c/0x1130 [ 699.664988] ? __kthread_parkme+0x133/0x1e0 [ 699.664992] ? process_one_work+0x1570/0x1570 [ 699.664995] kthread+0x33f/0x460 [ 699.664998] ? kthread_park+0x180/0x180 [ 699.665001] ret_from_fork+0x24/0x30 [ 699.665245] Kernel panic - not syncing: hung_task: blocked tasks [ 699.665257] CPU: 0 PID: 1567 Comm: khungtaskd Not tainted 4.19.158-syzkaller #0 [ 699.665264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.665267] Call Trace: [ 699.665280] dump_stack+0x1fc/0x2fe [ 699.665315] panic+0x26a/0x50e [ 699.665327] ? __warn_printk+0xf3/0xf3 [ 699.665344] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 699.665358] ? cpumask_next+0x3c/0x40 [ 699.665372] ? printk_safe_flush+0xd6/0x120 [ 699.665386] ? watchdog+0x991/0xe60 [ 699.665400] ? nmi_trigger_cpumask_backtrace+0x15e/0x1eb [ 699.665414] watchdog+0x9a2/0xe60 [ 699.665429] ? reset_hung_task_detector+0x30/0x30 [ 699.665441] kthread+0x33f/0x460 [ 699.665453] ? kthread_park+0x180/0x180 [ 699.665465] ret_from_fork+0x24/0x30 [ 699.666314] Kernel Offset: disabled