[ 43.394627] audit: type=1800 audit(1580290379.126:30): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 47.673956] kauditd_printk_skb: 4 callbacks suppressed [ 47.673972] audit: type=1400 audit(1580290383.436:35): avc: denied { map } for pid=8279 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.144' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 903.278388] audit: type=1400 audit(1580291239.046:36): avc: denied { map } for pid=8291 comm="syz-executor159" path="/root/syz-executor159220597" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 1063.744373] INFO: task syz-executor159:8301 blocked for more than 140 seconds. [ 1063.751969] Not tainted 4.19.99-syzkaller #0 [ 1063.758186] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1063.766378] syz-executor159 D28216 8301 8296 0x00000004 [ 1063.772022] Call Trace: [ 1063.774862] __schedule+0x866/0x1dc0 [ 1063.778677] ? __mutex_lock+0x721/0x1300 [ 1063.784795] ? firmware_map_remove+0x1a7/0x1a7 [ 1063.789399] ? kasan_check_read+0x11/0x20 [ 1063.793574] schedule+0x92/0x1c0 [ 1063.797233] schedule_preempt_disabled+0x13/0x20 [ 1063.802097] __mutex_lock+0x726/0x1300 [ 1063.806321] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1063.812162] ? mutex_trylock+0x1e0/0x1e0 [ 1063.816494] ? __bitmap_weight+0xdb/0x110 [ 1063.820671] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1063.826687] ? pcpu_alloc+0xf95/0x12b0 [ 1063.830602] ? pcpu_alloc+0xf95/0x12b0 [ 1063.834845] mutex_lock_nested+0x16/0x20 [ 1063.838952] ? mutex_lock_nested+0x16/0x20 [ 1063.843197] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1063.849082] hashlimit_mt_check_v1+0x325/0x3ab [ 1063.853695] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 1063.858827] ? mutex_trylock+0x1e0/0x1e0 [ 1063.862909] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 1063.868037] xt_check_match+0x280/0x690 [ 1063.872054] ? xt_check_target+0x6a0/0x6a0 [ 1063.876514] ? mutex_unlock+0xd/0x10 [ 1063.880253] ? xt_find_match+0x73/0x280 [ 1063.884450] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1063.890098] find_check_entry.isra.0+0x32f/0x920 [ 1063.895080] ? ipt_do_table+0x1b30/0x1b30 [ 1063.899249] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1063.903854] ? trace_hardirqs_on+0x67/0x220 [ 1063.908545] ? kvfree+0x61/0x70 [ 1063.911859] translate_table+0xcb4/0x17d0 [ 1063.916388] ? alloc_counters.isra.0+0x680/0x680 [ 1063.921164] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1063.927110] ? _copy_from_user+0xdd/0x150 [ 1063.931286] do_ipt_set_ctl+0x2ef/0x492 [ 1063.935438] ? compat_do_ipt_set_ctl+0x160/0x160 [ 1063.940359] ? mutex_unlock+0xd/0x10 [ 1063.944179] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 1063.950072] nf_setsockopt+0x77/0xd0 [ 1063.953895] ip_setsockopt+0xdf/0x100 [ 1063.958738] tcp_setsockopt+0x8f/0xe0 [ 1063.962640] sock_common_setsockopt+0x94/0xd0 [ 1063.967418] __sys_setsockopt+0x17a/0x280 [ 1063.971596] ? kernel_accept+0x310/0x310 [ 1063.975847] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1063.980631] ? do_syscall_64+0x26/0x620 [ 1063.984863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1063.990338] ? do_syscall_64+0x26/0x620 [ 1063.994528] __x64_sys_setsockopt+0xbe/0x150 [ 1063.998965] do_syscall_64+0xfd/0x620 [ 1064.002793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.008242] RIP: 0033:0x441c39 [ 1064.011461] Code: 73 75 70 70 6f 72 74 65 64 20 69 6e 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 6d 6f 64 65 73 20 30 20 74 6f 20 32 20 2d 20 <69> 67 6e 6f 72 65 64 0a 00 00 00 00 00 00 00 72 73 79 73 6c 6f 67 [ 1064.030598] RSP: 002b:00007fffb9cc6ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1064.038541] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441c39 [ 1064.046014] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1064.053302] RBP: 00000000006cc018 R08: 0000000000000318 R09: 00000000004002c8 [ 1064.060893] R10: 0000000020000540 R11: 0000000000000246 R12: 00000000004029b0 [ 1064.068412] R13: 0000000000402a40 R14: 0000000000000000 R15: 0000000000000000 [ 1064.076095] INFO: task syz-executor159:8302 blocked for more than 140 seconds. [ 1064.083472] Not tainted 4.19.99-syzkaller #0 [ 1064.089403] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1064.098277] syz-executor159 D27648 8302 8294 0x00000004 [ 1064.103925] Call Trace: [ 1064.106753] __schedule+0x866/0x1dc0 [ 1064.110488] ? __mutex_lock+0x721/0x1300 [ 1064.114940] ? firmware_map_remove+0x1a7/0x1a7 [ 1064.119540] ? kasan_check_read+0x11/0x20 [ 1064.123827] schedule+0x92/0x1c0 [ 1064.127417] schedule_preempt_disabled+0x13/0x20 [ 1064.132281] __mutex_lock+0x726/0x1300 [ 1064.136414] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1064.142376] ? mutex_trylock+0x1e0/0x1e0 [ 1064.146642] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1064.151240] ? trace_hardirqs_on+0x67/0x220 [ 1064.155781] ? finish_task_switch+0x1db/0x7c0 [ 1064.160320] mutex_lock_nested+0x16/0x20 [ 1064.164603] ? mutex_lock_nested+0x16/0x20 [ 1064.168853] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1064.174700] hashlimit_mt_check_v1+0x325/0x3ab [ 1064.179305] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 1064.184091] ? mutex_trylock+0x1e0/0x1e0 [ 1064.188427] ? pcpu_alloc+0x6c4/0x12b0 [ 1064.192341] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 1064.197315] xt_check_match+0x280/0x690 [ 1064.201311] ? xt_check_target+0x6a0/0x6a0 [ 1064.205779] ? mutex_unlock+0xd/0x10 [ 1064.209526] ? xt_find_match+0x73/0x280 [ 1064.213524] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.220242] find_check_entry.isra.0+0x32f/0x920 [ 1064.225161] ? ipt_do_table+0x1b30/0x1b30 [ 1064.229455] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1064.234048] ? trace_hardirqs_on+0x67/0x220 [ 1064.238620] ? kvfree+0x61/0x70 [ 1064.241927] translate_table+0xcb4/0x17d0 [ 1064.246325] ? alloc_counters.isra.0+0x680/0x680 [ 1064.251109] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.256861] ? _copy_from_user+0xdd/0x150 [ 1064.261663] do_ipt_set_ctl+0x2ef/0x492 [ 1064.265879] ? compat_do_ipt_set_ctl+0x160/0x160 [ 1064.270681] ? mutex_unlock+0xd/0x10 [ 1064.274744] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 1064.280174] nf_setsockopt+0x77/0xd0 [ 1064.283916] ip_setsockopt+0xdf/0x100 [ 1064.288039] tcp_setsockopt+0x8f/0xe0 [ 1064.291859] sock_common_setsockopt+0x94/0xd0 [ 1064.296567] __sys_setsockopt+0x17a/0x280 [ 1064.300741] ? kernel_accept+0x310/0x310 [ 1064.305018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1064.309795] ? do_syscall_64+0x26/0x620 [ 1064.313780] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.319388] ? do_syscall_64+0x26/0x620 [ 1064.323392] __x64_sys_setsockopt+0xbe/0x150 [ 1064.328179] do_syscall_64+0xfd/0x620 [ 1064.332115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.337516] RIP: 0033:0x441c39 [ 1064.340723] Code: 73 75 70 70 6f 72 74 65 64 20 69 6e 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 6d 6f 64 65 73 20 30 20 74 6f 20 32 20 2d 20 <69> 67 6e 6f 72 65 64 0a 00 00 00 00 00 00 00 72 73 79 73 6c 6f 67 [ 1064.360890] RSP: 002b:00007fffb9cc6ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1064.368857] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441c39 [ 1064.376351] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1064.383651] RBP: 00000000006cc018 R08: 0000000000000318 R09: 00000000004002c8 [ 1064.391147] R10: 0000000020000540 R11: 0000000000000246 R12: 00000000004029b0 [ 1064.398671] R13: 0000000000402a40 R14: 0000000000000000 R15: 0000000000000000 [ 1064.406118] INFO: task syz-executor159:8303 blocked for more than 140 seconds. [ 1064.413502] Not tainted 4.19.99-syzkaller #0 [ 1064.418654] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1064.426980] syz-executor159 D28216 8303 8292 0x00000004 [ 1064.432630] Call Trace: [ 1064.435518] __schedule+0x866/0x1dc0 [ 1064.439255] ? __mutex_lock+0x721/0x1300 [ 1064.443508] ? firmware_map_remove+0x1a7/0x1a7 [ 1064.448352] ? kasan_check_read+0x11/0x20 [ 1064.452534] schedule+0x92/0x1c0 [ 1064.456140] schedule_preempt_disabled+0x13/0x20 [ 1064.460930] __mutex_lock+0x726/0x1300 [ 1064.465048] ? mark_held_locks+0xb1/0x100 [ 1064.469217] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1064.475343] ? mutex_trylock+0x1e0/0x1e0 [ 1064.479465] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1064.483973] ? pcpu_alloc+0xf95/0x12b0 [ 1064.488856] ? pcpu_alloc+0xf95/0x12b0 [ 1064.492823] mutex_lock_nested+0x16/0x20 [ 1064.497124] ? mutex_lock_nested+0x16/0x20 [ 1064.501499] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1064.507421] hashlimit_mt_check_v1+0x325/0x3ab [ 1064.512154] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 1064.517149] ? mutex_trylock+0x1e0/0x1e0 [ 1064.521243] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 1064.526323] xt_check_match+0x280/0x690 [ 1064.530358] ? xt_check_target+0x6a0/0x6a0 [ 1064.535032] ? mutex_unlock+0xd/0x10 [ 1064.539120] ? xt_find_match+0x73/0x280 [ 1064.543114] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.549288] find_check_entry.isra.0+0x32f/0x920 [ 1064.554092] ? ipt_do_table+0x1b30/0x1b30 [ 1064.558484] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1064.563089] ? trace_hardirqs_on+0x67/0x220 [ 1064.567778] ? kvfree+0x61/0x70 [ 1064.571166] translate_table+0xcb4/0x17d0 [ 1064.575502] ? alloc_counters.isra.0+0x680/0x680 [ 1064.580296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.586046] ? _copy_from_user+0xdd/0x150 [ 1064.590212] do_ipt_set_ctl+0x2ef/0x492 [ 1064.594343] ? compat_do_ipt_set_ctl+0x160/0x160 [ 1064.599140] ? mutex_unlock+0xd/0x10 [ 1064.602866] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 1064.608410] nf_setsockopt+0x77/0xd0 [ 1064.612158] ip_setsockopt+0xdf/0x100 [ 1064.616934] tcp_setsockopt+0x8f/0xe0 [ 1064.620782] sock_common_setsockopt+0x94/0xd0 [ 1064.625500] __sys_setsockopt+0x17a/0x280 [ 1064.629681] ? kernel_accept+0x310/0x310 [ 1064.633772] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1064.638860] ? do_syscall_64+0x26/0x620 [ 1064.642967] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.648603] ? do_syscall_64+0x26/0x620 [ 1064.652726] __x64_sys_setsockopt+0xbe/0x150 [ 1064.657537] do_syscall_64+0xfd/0x620 [ 1064.661359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.666779] RIP: 0033:0x441c39 [ 1064.669993] Code: 73 75 70 70 6f 72 74 65 64 20 69 6e 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 20 6d 6f 64 65 73 20 30 20 74 6f 20 32 20 2d 20 <69> 67 6e 6f 72 65 64 0a 00 00 00 00 00 00 00 72 73 79 73 6c 6f 67 [ 1064.689944] RSP: 002b:00007fffb9cc6ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1064.697879] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441c39 [ 1064.705310] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1064.712593] RBP: 00000000006cc018 R08: 0000000000000318 R09: 00000000004002c8 [ 1064.720096] R10: 0000000020000540 R11: 0000000000000246 R12: 00000000004029b0 [ 1064.727590] R13: 0000000000402a40 R14: 0000000000000000 R15: 0000000000000000 [ 1064.735086] [ 1064.735086] Showing all locks held in the system: [ 1064.741429] 1 lock held by khungtaskd/1080: [ 1064.747061] #0: 0000000026f11888 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1064.755957] 4 locks held by rs:main Q:Reg/8141: [ 1064.760673] #0: 00000000536d6d92 (&rq->lock){-.-.}, at: __schedule+0x1f8/0x1dc0 [ 1064.768570] #1: 0000000075356a4e (sb_writers#4){.+.+}, at: vfs_write+0x429/0x560 [ 1064.776375] #2: 0000000026f11888 (rcu_read_lock){....}, at: ext4_file_write_iter+0x23f/0x1060 [ 1064.785401] #3: 000000003965aa3d (&(&dentry->d_lockref.lock)->rlock){+.+.}, at: current_time+0x6f/0x140 [ 1064.795271] 1 lock held by rsyslogd/8143: [ 1064.799473] #0: 00000000cca571f6 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1064.807747] 2 locks held by getty/8265: [ 1064.811806] #0: 000000002c17cf13 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.820308] #1: 000000005d0ff8ed (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.829513] 2 locks held by getty/8266: [ 1064.833490] #0: 0000000056c67ad1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.842015] #1: 00000000a6c8abc6 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.851097] 2 locks held by getty/8267: [ 1064.855282] #0: 0000000024d05421 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.863564] #1: 00000000ffa30c7e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.872669] 2 locks held by getty/8268: [ 1064.877669] #0: 000000008c4dc17b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.886225] #1: 00000000596f4a2f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.895395] 2 locks held by getty/8269: [ 1064.899397] #0: 000000006c67714a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.907998] #1: 0000000049c9ca20 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.917237] 2 locks held by getty/8270: [ 1064.921218] #0: 000000000939edd0 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.929715] #1: 00000000683642bf (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.938909] 2 locks held by getty/8271: [ 1064.942894] #0: 000000000b9f17ed (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1064.951383] #1: 000000007109a79c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1064.960578] 1 lock held by syz-executor159/8298: [ 1064.965524] #0: 000000003ac65f1d (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1064.975731] 1 lock held by syz-executor159/8300: [ 1064.980590] 1 lock held by syz-executor159/8301: [ 1064.985544] #0: 000000003ac65f1d (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1064.995752] 1 lock held by syz-executor159/8302: [ 1065.000630] #0: 000000003ac65f1d (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1065.011746] 1 lock held by syz-executor159/8303: [ 1065.016734] #0: 000000003ac65f1d (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1065.026953] 1 lock held by syz-executor159/8304: [ 1065.031723] #0: 000000003ac65f1d (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 1065.041986] [ 1065.043619] ============================================= [ 1065.043619] [ 1065.050885] NMI backtrace for cpu 1 [ 1065.054576] CPU: 1 PID: 1080 Comm: khungtaskd Not tainted 4.19.99-syzkaller #0 [ 1065.061948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.071416] Call Trace: [ 1065.074107] dump_stack+0x197/0x210 [ 1065.077755] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1065.082282] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 1065.087231] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 1065.092552] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1065.097750] watchdog+0x9df/0xee0 [ 1065.101239] kthread+0x354/0x420 [ 1065.104613] ? reset_hung_task_detector+0x30/0x30 [ 1065.109478] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1065.115030] ret_from_fork+0x24/0x30 [ 1065.118809] Sending NMI from CPU 1 to CPUs 0: [ 1065.123988] NMI backtrace for cpu 0 [ 1065.123995] CPU: 0 PID: 8300 Comm: syz-executor159 Not tainted 4.19.99-syzkaller #0 [ 1065.124002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.124006] RIP: 0010:mark_held_locks+0x68/0x100 [ 1065.124018] Code: 86 78 08 00 00 85 c0 7e 7a 44 8d 24 b5 00 00 00 00 31 db 49 bf 00 00 00 00 00 fc ff df 41 8d 44 24 03 45 8d 6c 24 02 89 45 d4 <4d> 8d a6 80 08 00 00 48 63 c3 48 8d 04 80 49 8d 34 c4 48 8d 7e 22 [ 1065.124022] RSP: 0018:ffff8880877c7700 EFLAGS: 00000046 [ 1065.124030] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 1ffff11011d2f924 [ 1065.124036] RDX: 1ffff11011d2f91f RSI: 0000000000000001 RDI: ffff88808e97c8f8 [ 1065.124041] RBP: ffff8880877c7738 R08: ffff88808e97c080 R09: ffff88808e97c920 [ 1065.124047] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1065.124052] R13: 0000000000000006 R14: ffff88808e97c080 R15: dffffc0000000000 [ 1065.124058] FS: 000000000133d880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1065.124063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1065.124068] CR2: ffffffffff600400 CR3: 00000000a132d000 CR4: 00000000001406f0 [ 1065.124074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1065.124079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1065.124082] Call Trace: [ 1065.124085] ? __local_bh_enable_ip+0x15a/0x270 [ 1065.124089] ? _raw_spin_unlock_bh+0x31/0x40 [ 1065.124093] ? __local_bh_enable_ip+0x15a/0x270 [ 1065.124097] lockdep_hardirqs_on+0x415/0x5d0 [ 1065.124101] ? htable_selective_cleanup+0x219/0x330 [ 1065.124104] trace_hardirqs_on+0x67/0x220 [ 1065.124108] ? htable_selective_cleanup+0x219/0x330 [ 1065.124134] __local_bh_enable_ip+0x15a/0x270 [ 1065.124141] _raw_spin_unlock_bh+0x31/0x40 [ 1065.124145] htable_selective_cleanup+0x219/0x330 [ 1065.124149] ? esp_mt+0x420/0x420 [ 1065.124152] htable_put+0x176/0x220 [ 1065.124156] ? hashlimit_mt_destroy_v2+0x70/0x70 [ 1065.124159] hashlimit_mt_destroy_v1+0x50/0x70 [ 1065.124163] cleanup_match+0xde/0x170 [ 1065.124166] ? icmp_checkentry+0xa0/0xa0 [ 1065.124171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1065.124175] find_check_entry.isra.0+0x454/0x920 [ 1065.124178] ? ipt_do_table+0x1b30/0x1b30 [ 1065.124182] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1065.124185] ? kvfree+0x61/0x70 [ 1065.124189] translate_table+0xcb4/0x17d0 [ 1065.124193] ? alloc_counters.isra.0+0x680/0x680 [ 1065.124197] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1065.124201] ? _copy_from_user+0xdd/0x150 [ 1065.124204] do_ipt_set_ctl+0x2ef/0x492 [ 1065.124208] ? compat_do_ipt_set_ctl+0x160/0x160 [ 1065.124211] ? mutex_unlock+0xd/0x10 [ 1065.124215] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 1065.124219] nf_setsockopt+0x77/0xd0 [ 1065.124222] ip_setsockopt+0xdf/0x100 [ 1065.124225] tcp_setsockopt+0x8f/0xe0 [ 1065.124229] sock_common_setsockopt+0x94/0xd0 [ 1065.124233] __sys_setsockopt+0x17a/0x280 [ 1065.124237] ? kernel_accept+0x310/0x310 [ 1065.124241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1065.124244] ? do_syscall_64+0x26/0x620 [ 1065.124248] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1065.124252] ? do_syscall_64+0x26/0x620 [ 1065.124256] __x64_sys_setsockopt+0xbe/0x150 [ 1065.124259] do_syscall_64+0xfd/0x620 [ 1065.124264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1065.124267] RIP: 0033:0x441c39 [ 1065.124279] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1065.124283] RSP: 002b:00007fffb9cc6ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1065.124292] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441c39 [ 1065.124297] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1065.124302] RBP: 00000000006cc018 R08: 0000000000000318 R09: 00000000004002c8 [ 1065.124308] R10: 0000000020000540 R11: 0000000000000246 R12: 00000000004029b0 [ 1065.124313] R13: 0000000000402a40 R14: 0000000000000000 R15: 0000000000000000 [ 1065.125234] Kernel panic - not syncing: hung_task: blocked tasks [ 1065.509778] CPU: 1 PID: 1080 Comm: khungtaskd Not tainted 4.19.99-syzkaller #0 [ 1065.517152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.526520] Call Trace: [ 1065.529147] dump_stack+0x197/0x210 [ 1065.532888] panic+0x26a/0x50e [ 1065.536115] ? __warn_printk+0xf3/0xf3 [ 1065.540141] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 1065.546078] ? ___preempt_schedule+0x16/0x18 [ 1065.550534] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1065.556032] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 1065.561507] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 1065.566971] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1065.572568] watchdog+0x9f0/0xee0 [ 1065.576130] kthread+0x354/0x420 [ 1065.579528] ? reset_hung_task_detector+0x30/0x30 [ 1065.584700] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1065.590268] ret_from_fork+0x24/0x30 [ 1065.596026] Kernel Offset: disabled [ 1065.599703] Rebooting in 86400 seconds..