[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 67.877246][ T27] audit: type=1800 audit(1579442095.330:25): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 67.897172][ T27] audit: type=1800 audit(1579442095.330:26): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 67.949538][ T27] audit: type=1800 audit(1579442095.330:27): pid=9474 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.39' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 822.662424][ T9629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 964.596296][ T1119] INFO: task syz-executor094:9634 blocked for more than 143 seconds. [ 964.612963][ T1119] Not tainted 5.5.0-rc5-syzkaller #0 [ 964.619838][ T1119] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.628750][ T1119] syz-executor094 D28160 9634 9633 0x00004004 [ 964.635155][ T1119] Call Trace: [ 964.638748][ T1119] __schedule+0x934/0x1f90 [ 964.643198][ T1119] ? __sched_text_start+0x8/0x8 [ 964.648322][ T1119] ? lock_downgrade+0x920/0x920 [ 964.653230][ T1119] ? rwlock_bug.part.0+0x90/0x90 [ 964.658411][ T1119] schedule+0xdc/0x2b0 [ 964.662505][ T1119] schedule_preempt_disabled+0x13/0x20 [ 964.669159][ T1119] __mutex_lock+0x7ab/0x13c0 [ 964.673838][ T1119] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 964.680615][ T1119] ? mutex_trylock+0x2d0/0x2d0 [ 964.685386][ T1119] ? lockdep_hardirqs_on+0x421/0x5e0 [ 964.690928][ T1119] ? trace_hardirqs_on+0x67/0x240 [ 964.696063][ T1119] ? mark_held_locks+0xf0/0xf0 [ 964.701122][ T1119] mutex_lock_nested+0x16/0x20 [ 964.705908][ T1119] ? mutex_lock_nested+0x16/0x20 [ 964.711145][ T1119] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 964.717777][ T1119] hashlimit_mt_check_v1+0x325/0x3ab [ 964.723092][ T1119] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 964.728735][ T1119] ? lock_downgrade+0x920/0x920 [ 964.733643][ T1119] ? xt_find_match+0xa6/0x280 [ 964.738565][ T1119] ? mutex_trylock+0x2d0/0x2d0 [ 964.743386][ T1119] ? pcpu_alloc+0x6d7/0x1380 [ 964.748172][ T1119] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 964.753650][ T1119] xt_check_match+0x280/0x690 [ 964.758547][ T1119] ? xt_check_target+0x690/0x690 [ 964.763507][ T1119] ? pcpu_alloc_area+0x820/0x820 [ 964.768655][ T1119] ? mutex_unlock+0xd/0x10 [ 964.773084][ T1119] ? xt_find_match+0x73/0x280 [ 964.778039][ T1119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 964.784569][ T1119] find_check_entry.isra.0+0x32f/0x920 [ 964.790651][ T1119] ? ipt_do_table+0x1b80/0x1b80 [ 964.795646][ T1119] ? lockdep_hardirqs_on+0x421/0x5e0 [ 964.802125][ T1119] ? trace_hardirqs_on+0x67/0x240 [ 964.807320][ T1119] ? kvfree+0x61/0x70 [ 964.811340][ T1119] translate_table+0xcb4/0x17d0 [ 964.816423][ T1119] ? compat_do_ipt_get_ctl+0x910/0x910 [ 964.821900][ T1119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 964.828461][ T1119] ? _copy_from_user+0x12c/0x1a0 [ 964.833412][ T1119] do_ipt_set_ctl+0x2fe/0x4c2 [ 964.838271][ T1119] ? compat_do_ipt_set_ctl+0x170/0x170 [ 964.843755][ T1119] ? mutex_unlock+0xd/0x10 [ 964.848412][ T1119] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 964.854423][ T1119] nf_setsockopt+0x77/0xd0 [ 964.859080][ T1119] ip_setsockopt+0xdf/0x100 [ 964.863622][ T1119] tcp_setsockopt+0x8f/0xe0 [ 964.868389][ T1119] sock_common_setsockopt+0x94/0xd0 [ 964.873621][ T1119] __sys_setsockopt+0x261/0x4c0 [ 964.878785][ T1119] ? sock_create_kern+0x50/0x50 [ 964.884680][ T1119] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 964.890477][ T1119] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 964.897007][ T1119] ? handle_mm_fault+0x4ab/0xa50 [ 964.902018][ T1119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 964.908014][ T1119] ? do_syscall_64+0x26/0x790 [ 964.912869][ T1119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.919170][ T1119] ? do_syscall_64+0x26/0x790 [ 964.923879][ T1119] __x64_sys_setsockopt+0xbe/0x150 [ 964.930185][ T1119] do_syscall_64+0xfa/0x790 [ 964.934728][ T1119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.941417][ T1119] RIP: 0033:0x441269 [ 964.945322][ T1119] Code: 66 69 67 20 69 73 20 6e 6f 74 20 63 6c 65 61 6e 2e 0a 43 68 65 63 6b 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 <69> 6c 73 2c 20 66 69 78 20 65 72 72 6f 72 73 20 61 6e 64 20 72 65 [ 964.965407][ T1119] RSP: 002b:00007fff8e699e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 964.974042][ T1119] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 964.982216][ T1119] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 964.990375][ T1119] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 964.998538][ T1119] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 965.006674][ T1119] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 965.014680][ T1119] INFO: task syz-executor094:9637 blocked for more than 143 seconds. [ 965.022950][ T1119] Not tainted 5.5.0-rc5-syzkaller #0 [ 965.028931][ T1119] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 965.037770][ T1119] syz-executor094 D27384 9637 9628 0x00004004 [ 965.044122][ T1119] Call Trace: [ 965.047592][ T1119] __schedule+0x934/0x1f90 [ 965.052025][ T1119] ? __sched_text_start+0x8/0x8 [ 965.058135][ T1119] ? lock_downgrade+0x920/0x920 [ 965.063011][ T1119] ? rwlock_bug.part.0+0x90/0x90 [ 965.068828][ T1119] schedule+0xdc/0x2b0 [ 965.072919][ T1119] schedule_preempt_disabled+0x13/0x20 [ 965.078574][ T1119] __mutex_lock+0x7ab/0x13c0 [ 965.083179][ T1119] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 965.089879][ T1119] ? mutex_trylock+0x2d0/0x2d0 [ 965.094658][ T1119] ? lockdep_hardirqs_on+0x421/0x5e0 [ 965.100154][ T1119] ? trace_hardirqs_on+0x67/0x240 [ 965.105194][ T1119] ? mark_held_locks+0xf0/0xf0 [ 965.110139][ T1119] mutex_lock_nested+0x16/0x20 [ 965.114907][ T1119] ? mutex_lock_nested+0x16/0x20 [ 965.120049][ T1119] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 965.126560][ T1119] hashlimit_mt_check_v1+0x325/0x3ab [ 965.132012][ T1119] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 965.137664][ T1119] ? lock_downgrade+0x920/0x920 [ 965.142634][ T1119] ? xt_find_match+0xa6/0x280 [ 965.147511][ T1119] ? mutex_trylock+0x2d0/0x2d0 [ 965.152294][ T1119] ? pcpu_alloc+0x6d7/0x1380 [ 965.157078][ T1119] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 965.162548][ T1119] xt_check_match+0x280/0x690 [ 965.167415][ T1119] ? xt_check_target+0x690/0x690 [ 965.172397][ T1119] ? pcpu_alloc_area+0x820/0x820 [ 965.177930][ T1119] ? mutex_unlock+0xd/0x10 [ 965.182360][ T1119] ? xt_find_match+0x73/0x280 [ 965.188174][ T1119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 965.194434][ T1119] find_check_entry.isra.0+0x32f/0x920 [ 965.200152][ T1119] ? ipt_do_table+0x1b80/0x1b80 [ 965.205217][ T1119] ? lockdep_hardirqs_on+0x421/0x5e0 [ 965.210725][ T1119] ? trace_hardirqs_on+0x67/0x240 [ 965.215762][ T1119] ? kvfree+0x61/0x70 [ 965.219977][ T1119] translate_table+0xcb4/0x17d0 [ 965.224864][ T1119] ? compat_do_ipt_get_ctl+0x910/0x910 [ 965.230585][ T1119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 965.237027][ T1119] ? _copy_from_user+0x12c/0x1a0 [ 965.241981][ T1119] do_ipt_set_ctl+0x2fe/0x4c2 [ 965.246868][ T1119] ? compat_do_ipt_set_ctl+0x170/0x170 [ 965.252350][ T1119] ? mutex_unlock+0xd/0x10 [ 965.256947][ T1119] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 965.262943][ T1119] nf_setsockopt+0x77/0xd0 [ 965.267558][ T1119] ip_setsockopt+0xdf/0x100 [ 965.272081][ T1119] tcp_setsockopt+0x8f/0xe0 [ 965.276884][ T1119] sock_common_setsockopt+0x94/0xd0 [ 965.282091][ T1119] __sys_setsockopt+0x261/0x4c0 [ 965.287105][ T1119] ? sock_create_kern+0x50/0x50 [ 965.291964][ T1119] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 965.297722][ T1119] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 965.303969][ T1119] ? handle_mm_fault+0x4ab/0xa50 [ 965.309133][ T1119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 965.314608][ T1119] ? do_syscall_64+0x26/0x790 [ 965.320411][ T1119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.326651][ T1119] ? do_syscall_64+0x26/0x790 [ 965.331347][ T1119] __x64_sys_setsockopt+0xbe/0x150 [ 965.336638][ T1119] do_syscall_64+0xfa/0x790 [ 965.341212][ T1119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.347293][ T1119] RIP: 0033:0x441269 [ 965.351197][ T1119] Code: 66 69 67 20 69 73 20 6e 6f 74 20 63 6c 65 61 6e 2e 0a 43 68 65 63 6b 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 <69> 6c 73 2c 20 66 69 78 20 65 72 72 6f 72 73 20 61 6e 64 20 72 65 [ 965.371047][ T1119] RSP: 002b:00007fff8e699e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 965.379669][ T1119] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 965.387821][ T1119] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 965.395802][ T1119] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 965.404033][ T1119] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 965.412225][ T1119] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 965.420452][ T1119] INFO: task syz-executor094:9638 blocked for more than 144 seconds. [ 965.428723][ T1119] Not tainted 5.5.0-rc5-syzkaller #0 [ 965.434522][ T1119] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 965.443383][ T1119] syz-executor094 D27784 9638 9631 0x00000004 [ 965.450810][ T1119] Call Trace: [ 965.454115][ T1119] __schedule+0x934/0x1f90 [ 965.458701][ T1119] ? __sched_text_start+0x8/0x8 [ 965.463556][ T1119] ? lock_downgrade+0x920/0x920 [ 965.468602][ T1119] ? rwlock_bug.part.0+0x90/0x90 [ 965.473569][ T1119] schedule+0xdc/0x2b0 [ 965.477848][ T1119] schedule_preempt_disabled+0x13/0x20 [ 965.483331][ T1119] __mutex_lock+0x7ab/0x13c0 [ 965.488119][ T1119] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 965.494635][ T1119] ? mutex_trylock+0x2d0/0x2d0 [ 965.499602][ T1119] ? pcpu_next_md_free_region+0x176/0x350 [ 965.505336][ T1119] ? pcpu_alloc+0x100c/0x1380 [ 965.510220][ T1119] ? mark_held_locks+0xf0/0xf0 [ 965.514990][ T1119] ? __mutex_lock+0x458/0x13c0 [ 965.519979][ T1119] mutex_lock_nested+0x16/0x20 [ 965.524752][ T1119] ? mutex_lock_nested+0x16/0x20 [ 965.529877][ T1119] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 965.536368][ T1119] hashlimit_mt_check_v1+0x325/0x3ab [ 965.541662][ T1119] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 965.547290][ T1119] ? lock_downgrade+0x920/0x920 [ 965.552155][ T1119] ? xt_find_match+0xa6/0x280 [ 965.557053][ T1119] ? mutex_trylock+0x2d0/0x2d0 [ 965.561837][ T1119] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 965.567495][ T1119] xt_check_match+0x280/0x690 [ 965.572187][ T1119] ? xt_check_target+0x690/0x690 [ 965.578271][ T1119] ? pcpu_alloc_area+0x820/0x820 [ 965.583228][ T1119] ? mutex_unlock+0xd/0x10 [ 965.587814][ T1119] ? xt_find_match+0x73/0x280 [ 965.592601][ T1119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 965.599072][ T1119] find_check_entry.isra.0+0x32f/0x920 [ 965.604552][ T1119] ? ipt_do_table+0x1b80/0x1b80 [ 965.609595][ T1119] ? lockdep_hardirqs_on+0x421/0x5e0 [ 965.614937][ T1119] ? trace_hardirqs_on+0x67/0x240 [ 965.620188][ T1119] ? kvfree+0x61/0x70 [ 965.624198][ T1119] translate_table+0xcb4/0x17d0 [ 965.629263][ T1119] ? compat_do_ipt_get_ctl+0x910/0x910 [ 965.634740][ T1119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 965.641572][ T1119] ? _copy_from_user+0x12c/0x1a0 [ 965.646702][ T1119] do_ipt_set_ctl+0x2fe/0x4c2 [ 965.651492][ T1119] ? compat_do_ipt_set_ctl+0x170/0x170 [ 965.657149][ T1119] ? mutex_unlock+0xd/0x10 [ 965.661575][ T1119] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 965.667766][ T1119] nf_setsockopt+0x77/0xd0 [ 965.672207][ T1119] ip_setsockopt+0xdf/0x100 [ 965.676919][ T1119] tcp_setsockopt+0x8f/0xe0 [ 965.681469][ T1119] sock_common_setsockopt+0x94/0xd0 [ 965.686883][ T1119] __sys_setsockopt+0x261/0x4c0 [ 965.691748][ T1119] ? sock_create_kern+0x50/0x50 [ 965.696780][ T1119] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 965.702346][ T1119] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 965.709732][ T1119] ? handle_mm_fault+0x4ab/0xa50 [ 965.714805][ T1119] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 965.720567][ T1119] ? do_syscall_64+0x26/0x790 [ 965.725270][ T1119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.731563][ T1119] ? do_syscall_64+0x26/0x790 [ 965.736520][ T1119] __x64_sys_setsockopt+0xbe/0x150 [ 965.741688][ T1119] do_syscall_64+0xfa/0x790 [ 965.746410][ T1119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.752307][ T1119] RIP: 0033:0x441269 [ 965.756424][ T1119] Code: 66 69 67 20 69 73 20 6e 6f 74 20 63 6c 65 61 6e 2e 0a 43 68 65 63 6b 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 <69> 6c 73 2c 20 66 69 78 20 65 72 72 6f 72 73 20 61 6e 64 20 72 65 [ 965.776503][ T1119] RSP: 002b:00007fff8e699e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 965.784927][ T1119] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 965.793197][ T1119] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 965.801632][ T1119] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 965.809945][ T1119] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 965.818150][ T1119] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 965.826361][ T1119] [ 965.826361][ T1119] Showing all locks held in the system: [ 965.834119][ T1119] 1 lock held by khungtaskd/1119: [ 965.840333][ T1119] #0: ffffffff899a3f00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 965.849898][ T1119] 3 locks held by rs:main Q:Reg/9510: [ 965.855280][ T1119] #0: ffff8880ae837358 (&rq->lock){-.-.}, at: __schedule+0x232/0x1f90 [ 965.863807][ T1119] #1: ffffffff899a3f00 (rcu_read_lock){....}, at: vfs_write+0x485/0x5d0 [ 965.872568][ T1119] #2: ffff88808c550508 (&sb->s_type->i_mutex_key#11){+.+.}, at: ext4_buffered_write_iter+0xba/0x460 [ 965.883747][ T1119] 1 lock held by rsyslogd/9512: [ 965.889151][ T1119] #0: ffff888093d40660 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 965.898027][ T1119] 2 locks held by getty/9602: [ 965.902703][ T1119] #0: ffff8880a9558090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 965.911866][ T1119] #1: ffffc900017732e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 965.921809][ T1119] 2 locks held by getty/9603: [ 965.926662][ T1119] #0: ffff8880976e1090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 965.935620][ T1119] #1: ffffc900017eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 965.945403][ T1119] 2 locks held by getty/9604: [ 965.950258][ T1119] #0: ffff88809f2ef090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 965.959485][ T1119] #1: ffffc900017db2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 965.970174][ T1119] 2 locks held by getty/9605: [ 965.974847][ T1119] #0: ffff888095a24090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 965.984264][ T1119] #1: ffffc9000179b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 965.994048][ T1119] 2 locks held by getty/9606: [ 965.998924][ T1119] #0: ffff8880a25db090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 966.008065][ T1119] #1: ffffc900017fb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 966.017892][ T1119] 2 locks held by getty/9607: [ 966.022586][ T1119] #0: ffff88809568b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 966.031762][ T1119] #1: ffffc900017ab2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 966.041649][ T1119] 2 locks held by getty/9608: [ 966.046464][ T1119] #0: ffff888098872090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 966.055422][ T1119] #1: ffffc9000174b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 966.065244][ T1119] 1 lock held by syz-executor094/9629: [ 966.070916][ T1119] 1 lock held by syz-executor094/9634: [ 966.076611][ T1119] #0: ffffffff8a54fea0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 966.087519][ T1119] 1 lock held by syz-executor094/9636: [ 966.092980][ T1119] #0: ffffffff8a54fea0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 966.104927][ T1119] 1 lock held by syz-executor094/9637: [ 966.110542][ T1119] #0: ffffffff8a54fea0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 966.121499][ T1119] 1 lock held by syz-executor094/9638: [ 966.127137][ T1119] #0: ffffffff8a54fea0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 966.138035][ T1119] 1 lock held by syz-executor094/9639: [ 966.143488][ T1119] #0: ffffffff8a54fea0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 966.154437][ T1119] [ 966.156957][ T1119] ============================================= [ 966.156957][ T1119] [ 966.165367][ T1119] NMI backtrace for cpu 1 [ 966.169809][ T1119] CPU: 1 PID: 1119 Comm: khungtaskd Not tainted 5.5.0-rc5-syzkaller #0 [ 966.178207][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.188261][ T1119] Call Trace: [ 966.191623][ T1119] dump_stack+0x197/0x210 [ 966.195974][ T1119] nmi_cpu_backtrace.cold+0x70/0xb2 [ 966.201232][ T1119] ? vprintk_func+0x86/0x189 [ 966.206028][ T1119] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 966.211665][ T1119] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 966.217656][ T1119] arch_trigger_cpumask_backtrace+0x14/0x20 [ 966.223559][ T1119] watchdog+0xb11/0x10c0 [ 966.227981][ T1119] kthread+0x361/0x430 [ 966.232150][ T1119] ? reset_hung_task_detector+0x30/0x30 [ 966.238718][ T1119] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 966.244455][ T1119] ret_from_fork+0x24/0x30 [ 966.248982][ T1119] Sending NMI from CPU 1 to CPUs 0: [ 966.254906][ C0] NMI backtrace for cpu 0 [ 966.254913][ C0] CPU: 0 PID: 9629 Comm: syz-executor094 Not tainted 5.5.0-rc5-syzkaller #0 [ 966.254919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.254922][ C0] RIP: 0010:lock_release+0x214/0x960 [ 966.254936][ C0] Code: 36 06 00 00 8b 35 c0 ad 20 09 85 f6 0f 84 47 02 00 00 4d 8d 8f 90 08 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ca 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 22 06 00 00 45 8b 87 90 08 00 [ 966.254941][ C0] RSP: 0018:ffffc900020776a8 EFLAGS: 00000806 [ 966.254948][ C0] RAX: dffffc0000000000 RBX: 1ffff9200040eeda RCX: 1ffffffff14f6fc6 [ 966.254953][ C0] RDX: 1ffff11014da29ca RSI: 0000000000000001 RDI: ffff8880a6d14e54 [ 966.254958][ C0] RBP: ffffc90002077778 R08: 1ffffffff14f6988 R09: ffff8880a6d14e50 [ 966.254962][ C0] R10: fffffbfff14f6988 R11: ffffffff8a7b4c47 R12: ffffc9000d0d9060 [ 966.254967][ C0] R13: ffffffff8671f999 R14: ffffc90002077750 R15: ffff8880a6d145c0 [ 966.254972][ C0] FS: 0000000001cd8880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 966.254976][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.254981][ C0] CR2: 00000000200002c0 CR3: 00000000a25fa000 CR4: 00000000001406f0 [ 966.254986][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 966.254991][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 966.254993][ C0] Call Trace: [ 966.254996][ C0] ? __kasan_check_write+0x14/0x20 [ 966.254999][ C0] ? lock_downgrade+0x920/0x920 [ 966.255003][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 966.255007][ C0] ? htable_selective_cleanup+0xa6/0x330 [ 966.255010][ C0] _raw_spin_unlock_bh+0x16/0x30 [ 966.255013][ C0] htable_selective_cleanup+0x219/0x330 [ 966.255016][ C0] ? esp_mt+0x410/0x410 [ 966.255019][ C0] htable_put+0x176/0x220 [ 966.255023][ C0] ? hashlimit_mt_destroy_v2+0x70/0x70 [ 966.255026][ C0] hashlimit_mt_destroy_v1+0x50/0x70 [ 966.255029][ C0] cleanup_match+0xde/0x170 [ 966.255032][ C0] ? icmp_checkentry+0xa0/0xa0 [ 966.255036][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 966.255040][ C0] find_check_entry.isra.0+0x454/0x920 [ 966.255043][ C0] ? ipt_do_table+0x1b80/0x1b80 [ 966.255046][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 966.255049][ C0] ? kvfree+0x61/0x70 [ 966.255052][ C0] translate_table+0xcb4/0x17d0 [ 966.255056][ C0] ? compat_do_ipt_get_ctl+0x910/0x910 [ 966.255060][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 966.255063][ C0] ? _copy_from_user+0x12c/0x1a0 [ 966.255066][ C0] do_ipt_set_ctl+0x2fe/0x4c2 [ 966.255069][ C0] ? compat_do_ipt_set_ctl+0x170/0x170 [ 966.255072][ C0] ? mutex_unlock+0xd/0x10 [ 966.255076][ C0] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 966.255079][ C0] nf_setsockopt+0x77/0xd0 [ 966.255082][ C0] ip_setsockopt+0xdf/0x100 [ 966.255085][ C0] tcp_setsockopt+0x8f/0xe0 [ 966.255089][ C0] sock_common_setsockopt+0x94/0xd0 [ 966.255092][ C0] __sys_setsockopt+0x261/0x4c0 [ 966.255095][ C0] ? sock_create_kern+0x50/0x50 [ 966.255098][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 966.255102][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 966.255106][ C0] ? handle_mm_fault+0x4ab/0xa50 [ 966.255109][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 966.255112][ C0] ? do_syscall_64+0x26/0x790 [ 966.255116][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 966.255119][ C0] ? do_syscall_64+0x26/0x790 [ 966.255122][ C0] __x64_sys_setsockopt+0xbe/0x150 [ 966.255125][ C0] do_syscall_64+0xfa/0x790 [ 966.255129][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 966.255132][ C0] RIP: 0033:0x441269 [ 966.255143][ C0] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 966.255146][ C0] RSP: 002b:00007fff8e699e88 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 966.255155][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 966.255159][ C0] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 966.255164][ C0] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 966.255169][ C0] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 966.255174][ C0] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 966.257108][ T1119] Kernel panic - not syncing: hung_task: blocked tasks [ 966.683271][ T1119] CPU: 1 PID: 1119 Comm: khungtaskd Not tainted 5.5.0-rc5-syzkaller #0 [ 966.691508][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 966.701566][ T1119] Call Trace: [ 966.704870][ T1119] dump_stack+0x197/0x210 [ 966.709310][ T1119] panic+0x2e3/0x75c [ 966.713209][ T1119] ? add_taint.cold+0x16/0x16 [ 966.717893][ T1119] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 966.723558][ T1119] ? ___preempt_schedule+0x16/0x18 [ 966.728680][ T1119] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 966.734853][ T1119] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 966.741019][ T1119] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 966.747183][ T1119] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 966.753347][ T1119] watchdog+0xb22/0x10c0 [ 966.757608][ T1119] kthread+0x361/0x430 [ 966.761686][ T1119] ? reset_hung_task_detector+0x30/0x30 [ 966.767238][ T1119] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 966.772966][ T1119] ret_from_fork+0x24/0x30 [ 966.779017][ T1119] Kernel Offset: disabled [ 966.783346][ T1119] Rebooting in 86400 seconds..