[ 41.515899] audit: type=1800 audit(1582453039.572:30): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.352590] kauditd_printk_skb: 4 callbacks suppressed [ 45.352606] audit: type=1400 audit(1582453043.422:35): avc: denied { map } for pid=8070 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. [ 460.899821] audit: type=1400 audit(1582453458.972:36): avc: denied { map } for pid=8082 comm="syz-executor423" path="/root/syz-executor423627185" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 460.922461] IPVS: ftp: loaded support on port[0] = 21 [ 460.939892] IPVS: ftp: loaded support on port[0] = 21 [ 460.939969] IPVS: ftp: loaded support on port[0] = 21 [ 460.948568] IPVS: ftp: loaded support on port[0] = 21 [ 460.957331] IPVS: ftp: loaded support on port[0] = 21 [ 460.968145] IPVS: ftp: loaded support on port[0] = 21 executing program executing program executing program executing program executing program executing program [ 462.665281] Cannot find add_set index 0 as target [ 465.446548] Cannot find add_set index 0 as target [ 470.848511] Cannot find add_set index 0 as target [ 476.345602] Cannot find add_set index 0 as target [ 481.925231] Cannot find add_set index 0 as target [ 487.135563] Cannot find add_set index 0 as target [ 611.295665] INFO: task syz-executor423:8097 blocked for more than 140 seconds. [ 611.303325] Not tainted 4.19.105-syzkaller #0 [ 611.325544] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.333660] syz-executor423 D27936 8097 8093 0x00000006 [ 611.355561] Call Trace: [ 611.358301] __schedule+0x866/0x1dc0 [ 611.362039] ? __mutex_lock+0x721/0x1300 [ 611.375572] ? firmware_map_remove+0x1a6/0x1a6 [ 611.380223] ? kasan_check_read+0x11/0x20 [ 611.384399] schedule+0x92/0x1c0 [ 611.405569] schedule_preempt_disabled+0x13/0x20 [ 611.410403] __mutex_lock+0x726/0x1300 [ 611.414408] ? htable_put+0x21/0x220 [ 611.425558] ? mutex_trylock+0x1e0/0x1e0 [ 611.429794] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 611.434992] ? ___ratelimit+0x60/0x595 [ 611.455647] ? set_target_v1_checkentry+0x172/0x4d0 [ 611.460851] ? set_match_v0_destroy+0xb0/0xb0 [ 611.465384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.485570] mutex_lock_nested+0x16/0x20 [ 611.489710] ? mutex_lock_nested+0x16/0x20 [ 611.494098] htable_put+0x21/0x220 [ 611.515573] ? htable_put+0x220/0x220 [ 611.519519] hashlimit_mt_destroy+0x56/0x70 [ 611.524021] cleanup_match+0xde/0x170 [ 611.535580] ? icmp_checkentry+0xa0/0xa0 [ 611.539736] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.545308] find_check_entry.isra.0+0x454/0x920 [ 611.565573] ? ipt_do_table+0x1b30/0x1b30 [ 611.570343] ? lockdep_hardirqs_on+0x415/0x5d0 [ 611.574955] ? kvfree+0x61/0x70 [ 611.595575] translate_table+0xcb4/0x17d0 [ 611.599924] ? alloc_counters.isra.0+0x680/0x680 [ 611.604695] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.625636] ? _copy_from_user+0xdd/0x150 [ 611.630634] do_ipt_set_ctl+0x2ef/0x492 [ 611.634642] ? compat_do_ipt_set_ctl+0x160/0x160 [ 611.655598] ? mutex_unlock+0xd/0x10 [ 611.659460] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 611.664791] nf_setsockopt+0x77/0xd0 [ 611.675683] ip_setsockopt+0xdf/0x100 [ 611.679663] tcp_setsockopt+0x8f/0xe0 [ 611.683553] sock_common_setsockopt+0x94/0xd0 [ 611.705630] __sys_setsockopt+0x17a/0x280 [ 611.709851] ? kernel_accept+0x310/0x310 [ 611.713943] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 611.725560] ? do_syscall_64+0x26/0x620 [ 611.729588] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.734974] ? do_syscall_64+0x26/0x620 [ 611.755571] __x64_sys_setsockopt+0xbe/0x150 [ 611.760033] do_syscall_64+0xfd/0x620 [ 611.763881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.785560] RIP: 0033:0x441e89 [ 611.788806] Code: 20 63 61 73 74 20 79 6f 75 72 20 76 6f 74 65 20 69 66 20 79 6f 75 20 77 61 6e 74 20 75 73 20 74 6f 20 6b 65 65 70 20 74 68 69 <73> 20 66 65 61 74 75 72 65 2e 00 00 00 00 00 20 41 6c 72 65 61 64 [ 611.825561] RSP: 002b:00007ffe851e4568 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 611.833325] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441e89 [ 611.855547] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 611.863222] RBP: 00000000004a3310 R08: 00000000000003c8 R09: 00001f9d20080522 [ 611.895557] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000402ca0 [ 611.902892] R13: 0000000000402d30 R14: 0000000000000000 R15: 0000000000000000 [ 611.925577] [ 611.925577] Showing all locks held in the system: [ 611.931970] 2 locks held by kworker/1:1/25: [ 611.945575] 1 lock held by khungtaskd/1079: [ 611.949973] #0: 000000001aa6fd8a (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 611.965572] 2 locks held by kworker/0:2/2726: [ 611.970124] 1 lock held by rsyslogd/7935: [ 611.974275] #0: 00000000f19007d5 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 612.005559] 2 locks held by getty/8058: [ 612.009571] #0: 00000000ef694f63 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.025542] #1: 0000000089b20072 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.035275] 2 locks held by getty/8059: [ 612.055537] #0: 00000000a0a9671c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.063862] #1: 000000007f7b6a18 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.095523] 2 locks held by getty/8060: [ 612.099539] #0: 00000000d96db53e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.115538] #1: 000000004f160753 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.124461] 2 locks held by getty/8061: [ 612.145551] #0: 0000000045eb6cd9 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.153864] #1: 00000000f7a87943 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.175564] 2 locks held by getty/8062: [ 612.179593] #0: 000000000d93cde2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.205560] #1: 00000000f4970995 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.214621] 2 locks held by getty/8063: [ 612.235556] #0: 0000000080095305 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.243873] #1: 0000000054f3308b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.265562] 2 locks held by getty/8064: [ 612.269598] #0: 00000000794bb476 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 612.295546] #1: 00000000c93b3127 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 612.304478] 2 locks held by syz-executor423/8095: [ 612.325562] 1 lock held by syz-executor423/8096: [ 612.330371] #0: 0000000012a95480 (hashlimit_mutex){+.+.}, at: htable_put+0x21/0x220 [ 612.345554] 1 lock held by syz-executor423/8097: [ 612.350470] #0: 0000000012a95480 (hashlimit_mutex){+.+.}, at: htable_put+0x21/0x220 [ 612.375560] 1 lock held by syz-executor423/8098: [ 612.380367] #0: 0000000012a95480 (hashlimit_mutex){+.+.}, at: htable_put+0x21/0x220 [ 612.395553] 1 lock held by syz-executor423/8099: [ 612.400358] #0: 0000000012a95480 (hashlimit_mutex){+.+.}, at: htable_put+0x21/0x220 [ 612.425566] 1 lock held by syz-executor423/8100: [ 612.430383] #0: 0000000012a95480 (hashlimit_mutex){+.+.}, at: htable_put+0x21/0x220 [ 612.455544] [ 612.457215] ============================================= [ 612.457215] [ 612.464422] NMI backtrace for cpu 1 [ 612.468210] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 4.19.105-syzkaller #0 [ 612.475671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.485036] Call Trace: [ 612.487718] dump_stack+0x197/0x210 [ 612.491373] nmi_cpu_backtrace.cold+0x63/0xa4 [ 612.495900] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 612.500849] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 612.506157] arch_trigger_cpumask_backtrace+0x14/0x20 [ 612.511373] watchdog+0x9df/0xee0 [ 612.514847] kthread+0x354/0x420 [ 612.518250] ? reset_hung_task_detector+0x30/0x30 [ 612.523113] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 612.528692] ret_from_fork+0x24/0x30 [ 612.532513] Sending NMI from CPU 1 to CPUs 0: [ 612.537684] NMI backtrace for cpu 0 [ 612.537692] CPU: 0 PID: 8095 Comm: syz-executor423 Not tainted 4.19.105-syzkaller #0 [ 612.537698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.537702] RIP: 0010:do_raw_spin_lock+0x0/0x250 [ 612.537714] Code: fa 05 48 83 c4 10 5b 5d c3 48 89 75 e8 4c 89 4d f0 e8 b4 a4 4f 00 48 8b 75 e8 4c 8b 4d f0 eb b3 66 2e 0f 1f 84 00 00 00 00 00 <48> b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 56 41 55 41 54 49 89 [ 612.537719] RSP: 0018:ffff8880855cf7c0 EFLAGS: 00000286 [ 612.537726] RAX: 1ffffffff11e4ad1 RBX: 0000000006000000 RCX: 00000000b8064264 [ 612.537732] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90005ea2048 [ 612.537738] RBP: ffff8880855cf7d8 R08: 0000000000007d1a R09: 0000000000000001 [ 612.537743] R10: ffff88808dd7c8a8 R11: ffffffff8a798010 R12: ffffc90005ea2048 [ 612.537749] R13: dffffc0000000000 R14: ffffc90005ea2000 R15: 0000000000cdc7d0 [ 612.537755] FS: 0000000001c1f880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 612.537760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.537765] CR2: 00000000006cd080 CR3: 000000009387b000 CR4: 00000000001406f0 [ 612.537771] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 612.537776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 612.537779] Call Trace: [ 612.537783] ? _raw_spin_lock_bh+0x3b/0x50 [ 612.537787] ? htable_selective_cleanup+0xa6/0x330 [ 612.537791] htable_selective_cleanup+0xa6/0x330 [ 612.537794] ? esp_mt+0x420/0x420 [ 612.537797] htable_put+0x176/0x220 [ 612.537801] ? htable_put+0x220/0x220 [ 612.537805] hashlimit_mt_destroy+0x56/0x70 [ 612.537808] cleanup_match+0xde/0x170 [ 612.537812] ? icmp_checkentry+0xa0/0xa0 [ 612.537816] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.537820] find_check_entry.isra.0+0x454/0x920 [ 612.537824] ? ipt_do_table+0x1b30/0x1b30 [ 612.537827] ? lockdep_hardirqs_on+0x415/0x5d0 [ 612.537831] ? kvfree+0x61/0x70 [ 612.537834] translate_table+0xcb4/0x17d0 [ 612.537838] ? alloc_counters.isra.0+0x680/0x680 [ 612.537843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.537846] ? _copy_from_user+0xdd/0x150 [ 612.537850] do_ipt_set_ctl+0x2ef/0x492 [ 612.537854] ? compat_do_ipt_set_ctl+0x160/0x160 [ 612.537858] ? mutex_unlock+0xd/0x10 [ 612.537862] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 612.537865] nf_setsockopt+0x77/0xd0 [ 612.537869] ip_setsockopt+0xdf/0x100 [ 612.537872] tcp_setsockopt+0x8f/0xe0 [ 612.537876] sock_common_setsockopt+0x94/0xd0 [ 612.537880] __sys_setsockopt+0x17a/0x280 [ 612.537883] ? kernel_accept+0x310/0x310 [ 612.537888] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.537891] ? do_syscall_64+0x26/0x620 [ 612.537896] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.537899] ? do_syscall_64+0x26/0x620 [ 612.537903] __x64_sys_setsockopt+0xbe/0x150 [ 612.537906] do_syscall_64+0xfd/0x620 [ 612.537911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.537914] RIP: 0033:0x441e89 [ 612.537925] Code: e8 2c e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 8b 09 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.537930] RSP: 002b:00007ffe851e4568 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 612.537938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000441e89 [ 612.537944] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 612.537949] RBP: 00000000004a3310 R08: 00000000000003c8 R09: 00001f9c20080522 [ 612.537955] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000402ca0 [ 612.537960] R13: 0000000000402d30 R14: 0000000000000000 R15: 0000000000000000 [ 612.615548] Kernel panic - not syncing: hung_task: blocked tasks [ 612.891342] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 4.19.105-syzkaller #0 [ 612.898800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.908216] Call Trace: [ 612.910826] dump_stack+0x197/0x210 [ 612.914482] panic+0x26a/0x50e [ 612.917692] ? __warn_printk+0xf3/0xf3 [ 612.921948] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 612.926903] ? ___preempt_schedule+0x16/0x18 [ 612.931335] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 612.936840] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 612.942314] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 612.947789] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 612.953282] watchdog+0x9f0/0xee0 [ 612.956772] kthread+0x354/0x420 [ 612.960158] ? reset_hung_task_detector+0x30/0x30 [ 612.965019] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 612.970585] ret_from_fork+0x24/0x30 [ 612.976322] Kernel Offset: disabled [ 612.979975] Rebooting in 86400 seconds..