[ 91.731937][ T26] audit: type=1800 audit(1579485009.467:26): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 92.432556][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 92.432570][ T26] audit: type=1800 audit(1579485010.187:29): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 92.458755][ T26] audit: type=1800 audit(1579485010.197:30): pid=9584 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.237' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 437.961463][ T9740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 578.196935][ T1127] INFO: task syz-executor394:9745 blocked for more than 143 seconds. [ 578.213538][ T1127] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.220223][ T1127] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.229126][ T1127] syz-executor394 D28296 9745 9741 0x00004004 [ 578.235709][ T1127] Call Trace: [ 578.239302][ T1127] __schedule+0x934/0x1f90 [ 578.243751][ T1127] ? __sched_text_start+0x8/0x8 [ 578.248913][ T1127] ? lock_downgrade+0x920/0x920 [ 578.253779][ T1127] ? rwlock_bug.part.0+0x90/0x90 [ 578.258928][ T1127] schedule+0xdc/0x2b0 [ 578.263061][ T1127] schedule_preempt_disabled+0x13/0x20 [ 578.269099][ T1127] __mutex_lock+0x7ab/0x13c0 [ 578.273771][ T1127] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 578.280515][ T1127] ? mutex_trylock+0x2d0/0x2d0 [ 578.285351][ T1127] ? pcpu_next_md_free_region+0x176/0x350 [ 578.291330][ T1127] ? pcpu_alloc+0x100c/0x1380 [ 578.296333][ T1127] ? mark_held_locks+0xf0/0xf0 [ 578.301316][ T1127] ? __mutex_lock+0x458/0x13c0 [ 578.306228][ T1127] mutex_lock_nested+0x16/0x20 [ 578.311211][ T1127] ? mutex_lock_nested+0x16/0x20 [ 578.317205][ T1127] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 578.323566][ T1127] hashlimit_mt_check_v1+0x325/0x3ab [ 578.329399][ T1127] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 578.334874][ T1127] ? lock_downgrade+0x920/0x920 [ 578.340010][ T1127] ? xt_find_match+0xa6/0x280 [ 578.344712][ T1127] ? mutex_trylock+0x2d0/0x2d0 [ 578.349715][ T1127] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 578.355190][ T1127] xt_check_match+0x280/0x690 [ 578.360158][ T1127] ? xt_check_target+0x690/0x690 [ 578.365128][ T1127] ? pcpu_alloc_area+0x820/0x820 [ 578.370445][ T1127] ? mutex_unlock+0xd/0x10 [ 578.374886][ T1127] ? xt_find_match+0x73/0x280 [ 578.380022][ T1127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.386463][ T1127] find_check_entry.isra.0+0x32f/0x920 [ 578.392196][ T1127] ? ipt_do_table+0x1b80/0x1b80 [ 578.397325][ T1127] ? lockdep_hardirqs_on+0x421/0x5e0 [ 578.402699][ T1127] ? trace_hardirqs_on+0x67/0x240 [ 578.408184][ T1127] ? kvfree+0x61/0x70 [ 578.412216][ T1127] translate_table+0xcb4/0x17d0 [ 578.417406][ T1127] ? compat_do_ipt_get_ctl+0x910/0x910 [ 578.423015][ T1127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.429651][ T1127] ? _copy_from_user+0x12c/0x1a0 [ 578.434643][ T1127] do_ipt_set_ctl+0x2fe/0x4c2 [ 578.439615][ T1127] ? compat_do_ipt_set_ctl+0x170/0x170 [ 578.445166][ T1127] ? mutex_unlock+0xd/0x10 [ 578.449967][ T1127] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 578.456106][ T1127] nf_setsockopt+0x77/0xd0 [ 578.461007][ T1127] ip_setsockopt+0xdf/0x100 [ 578.465995][ T1127] tcp_setsockopt+0x8f/0xe0 [ 578.470906][ T1127] sock_common_setsockopt+0x94/0xd0 [ 578.476139][ T1127] __sys_setsockopt+0x261/0x4c0 [ 578.481400][ T1127] ? sock_create_kern+0x50/0x50 [ 578.486350][ T1127] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 578.492271][ T1127] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.498897][ T1127] ? handle_mm_fault+0x4ab/0xa50 [ 578.503898][ T1127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.509791][ T1127] ? do_syscall_64+0x26/0x790 [ 578.515262][ T1127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.521732][ T1127] ? do_syscall_64+0x26/0x790 [ 578.526452][ T1127] __x64_sys_setsockopt+0xbe/0x150 [ 578.531997][ T1127] do_syscall_64+0xfa/0x790 [ 578.536530][ T1127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.542637][ T1127] RIP: 0033:0x441269 [ 578.546778][ T1127] Code: 66 69 67 20 69 73 20 6e 6f 74 20 63 6c 65 61 6e 2e 0a 43 68 65 63 6b 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 <69> 6c 73 2c 20 66 69 78 20 65 72 72 6f 72 73 20 61 6e 64 20 72 65 [ 578.566764][ T1127] RSP: 002b:00007ffc1d9849f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.575202][ T1127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 578.583567][ T1127] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 578.591737][ T1127] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 578.600196][ T1127] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 578.608431][ T1127] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 578.616754][ T1127] INFO: task syz-executor394:9746 blocked for more than 143 seconds. [ 578.624824][ T1127] Not tainted 5.5.0-rc6-syzkaller #0 [ 578.630901][ T1127] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.640171][ T1127] syz-executor394 D28296 9746 9744 0x00004004 [ 578.646750][ T1127] Call Trace: [ 578.650060][ T1127] __schedule+0x934/0x1f90 [ 578.654488][ T1127] ? __sched_text_start+0x8/0x8 [ 578.659593][ T1127] ? lock_downgrade+0x920/0x920 [ 578.664501][ T1127] ? rwlock_bug.part.0+0x90/0x90 [ 578.669704][ T1127] schedule+0xdc/0x2b0 [ 578.673789][ T1127] schedule_preempt_disabled+0x13/0x20 [ 578.679488][ T1127] __mutex_lock+0x7ab/0x13c0 [ 578.684100][ T1127] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 578.691198][ T1127] ? mutex_trylock+0x2d0/0x2d0 [ 578.695983][ T1127] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 578.702211][ T1127] ? mark_held_locks+0xf0/0xf0 [ 578.707305][ T1127] ? migrate_swap_stop+0x9f0/0x9f0 [ 578.712431][ T1127] ? lock_downgrade+0x920/0x920 [ 578.717575][ T1127] mutex_lock_nested+0x16/0x20 [ 578.722360][ T1127] ? mutex_lock_nested+0x16/0x20 [ 578.727541][ T1127] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 578.733896][ T1127] hashlimit_mt_check_v1+0x325/0x3ab [ 578.739451][ T1127] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 578.745084][ T1127] ? lock_downgrade+0x920/0x920 [ 578.750222][ T1127] ? xt_find_match+0xa6/0x280 [ 578.755018][ T1127] ? mutex_trylock+0x2d0/0x2d0 [ 578.760017][ T1127] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 578.765518][ T1127] xt_check_match+0x280/0x690 [ 578.770459][ T1127] ? xt_check_target+0x690/0x690 [ 578.775474][ T1127] ? pcpu_alloc_area+0x820/0x820 [ 578.780663][ T1127] ? mutex_unlock+0xd/0x10 [ 578.785271][ T1127] ? xt_find_match+0x73/0x280 [ 578.790336][ T1127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.796833][ T1127] find_check_entry.isra.0+0x32f/0x920 [ 578.802459][ T1127] ? ipt_do_table+0x1b80/0x1b80 [ 578.807561][ T1127] ? lockdep_hardirqs_on+0x421/0x5e0 [ 578.812998][ T1127] ? trace_hardirqs_on+0x67/0x240 [ 578.818262][ T1127] ? kvfree+0x61/0x70 [ 578.822274][ T1127] translate_table+0xcb4/0x17d0 [ 578.827385][ T1127] ? compat_do_ipt_get_ctl+0x910/0x910 [ 578.832938][ T1127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.839612][ T1127] ? _copy_from_user+0x12c/0x1a0 [ 578.844583][ T1127] do_ipt_set_ctl+0x2fe/0x4c2 [ 578.849604][ T1127] ? compat_do_ipt_set_ctl+0x170/0x170 [ 578.855101][ T1127] ? mutex_unlock+0xd/0x10 [ 578.859823][ T1127] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 578.865828][ T1127] nf_setsockopt+0x77/0xd0 [ 578.870494][ T1127] ip_setsockopt+0xdf/0x100 [ 578.875024][ T1127] tcp_setsockopt+0x8f/0xe0 [ 578.879777][ T1127] sock_common_setsockopt+0x94/0xd0 [ 578.885097][ T1127] __sys_setsockopt+0x261/0x4c0 [ 578.890194][ T1127] ? sock_create_kern+0x50/0x50 [ 578.895063][ T1127] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 578.901155][ T1127] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 578.907647][ T1127] ? handle_mm_fault+0x4ab/0xa50 [ 578.912603][ T1127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 578.918902][ T1127] ? do_syscall_64+0x26/0x790 [ 578.923770][ T1127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.930236][ T1127] ? do_syscall_64+0x26/0x790 [ 578.934947][ T1127] __x64_sys_setsockopt+0xbe/0x150 [ 578.940314][ T1127] do_syscall_64+0xfa/0x790 [ 578.944926][ T1127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.951071][ T1127] RIP: 0033:0x441269 [ 578.955082][ T1127] Code: 66 69 67 20 69 73 20 6e 6f 74 20 63 6c 65 61 6e 2e 0a 43 68 65 63 6b 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 <69> 6c 73 2c 20 66 69 78 20 65 72 72 6f 72 73 20 61 6e 64 20 72 65 [ 578.975080][ T1127] RSP: 002b:00007ffc1d9849f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.983749][ T1127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 578.992599][ T1127] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 579.000801][ T1127] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 579.009036][ T1127] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 579.017207][ T1127] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 579.025218][ T1127] INFO: task syz-executor394:9748 blocked for more than 144 seconds. [ 579.033562][ T1127] Not tainted 5.5.0-rc6-syzkaller #0 [ 579.039523][ T1127] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.048544][ T1127] syz-executor394 D27640 9748 9739 0x00004004 [ 579.054907][ T1127] Call Trace: [ 579.058436][ T1127] __schedule+0x934/0x1f90 [ 579.062882][ T1127] ? __sched_text_start+0x8/0x8 [ 579.067994][ T1127] ? lock_downgrade+0x920/0x920 [ 579.072889][ T1127] ? rwlock_bug.part.0+0x90/0x90 [ 579.078036][ T1127] schedule+0xdc/0x2b0 [ 579.082157][ T1127] schedule_preempt_disabled+0x13/0x20 [ 579.087848][ T1127] __mutex_lock+0x7ab/0x13c0 [ 579.092466][ T1127] ? hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.099190][ T1127] ? mutex_trylock+0x2d0/0x2d0 [ 579.103969][ T1127] ? pcpu_next_md_free_region+0x176/0x350 [ 579.109949][ T1127] ? pcpu_alloc+0x100c/0x1380 [ 579.114666][ T1127] ? mark_held_locks+0xf0/0xf0 [ 579.119653][ T1127] ? __mutex_lock+0x458/0x13c0 [ 579.124553][ T1127] mutex_lock_nested+0x16/0x20 [ 579.129606][ T1127] ? mutex_lock_nested+0x16/0x20 [ 579.134562][ T1127] hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.141114][ T1127] hashlimit_mt_check_v1+0x325/0x3ab [ 579.146426][ T1127] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 579.152126][ T1127] ? lock_downgrade+0x920/0x920 [ 579.157146][ T1127] ? xt_find_match+0xa6/0x280 [ 579.161862][ T1127] ? mutex_trylock+0x2d0/0x2d0 [ 579.167225][ T1127] ? hashlimit_mt_check_v2+0x3b0/0x3b0 [ 579.172718][ T1127] xt_check_match+0x280/0x690 [ 579.177654][ T1127] ? xt_check_target+0x690/0x690 [ 579.182699][ T1127] ? pcpu_alloc_area+0x820/0x820 [ 579.187955][ T1127] ? mutex_unlock+0xd/0x10 [ 579.192409][ T1127] ? xt_find_match+0x73/0x280 [ 579.197389][ T1127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.203763][ T1127] find_check_entry.isra.0+0x32f/0x920 [ 579.209589][ T1127] ? ipt_do_table+0x1b80/0x1b80 [ 579.214454][ T1127] ? lockdep_hardirqs_on+0x421/0x5e0 [ 579.219959][ T1127] ? trace_hardirqs_on+0x67/0x240 [ 579.225110][ T1127] ? kvfree+0x61/0x70 [ 579.229337][ T1127] translate_table+0xcb4/0x17d0 [ 579.234229][ T1127] ? compat_do_ipt_get_ctl+0x910/0x910 [ 579.239898][ T1127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.246146][ T1127] ? _copy_from_user+0x12c/0x1a0 [ 579.251412][ T1127] do_ipt_set_ctl+0x2fe/0x4c2 [ 579.256109][ T1127] ? compat_do_ipt_set_ctl+0x170/0x170 [ 579.261775][ T1127] ? mutex_unlock+0xd/0x10 [ 579.266310][ T1127] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 579.272564][ T1127] nf_setsockopt+0x77/0xd0 [ 579.277144][ T1127] ip_setsockopt+0xdf/0x100 [ 579.281662][ T1127] tcp_setsockopt+0x8f/0xe0 [ 579.286189][ T1127] sock_common_setsockopt+0x94/0xd0 [ 579.291676][ T1127] __sys_setsockopt+0x261/0x4c0 [ 579.296742][ T1127] ? sock_create_kern+0x50/0x50 [ 579.301612][ T1127] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 579.307427][ T1127] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 579.314497][ T1127] ? handle_mm_fault+0x4ab/0xa50 [ 579.319660][ T1127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 579.325310][ T1127] ? do_syscall_64+0x26/0x790 [ 579.331417][ T1127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.337953][ T1127] ? do_syscall_64+0x26/0x790 [ 579.342651][ T1127] __x64_sys_setsockopt+0xbe/0x150 [ 579.348018][ T1127] do_syscall_64+0xfa/0x790 [ 579.353084][ T1127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.359617][ T1127] RIP: 0033:0x441269 [ 579.363907][ T1127] Code: 66 69 67 20 69 73 20 6e 6f 74 20 63 6c 65 61 6e 2e 0a 43 68 65 63 6b 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 <69> 6c 73 2c 20 66 69 78 20 65 72 72 6f 72 73 20 61 6e 64 20 72 65 [ 579.385313][ T1127] RSP: 002b:00007ffc1d9849f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 579.394784][ T1127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 579.404043][ T1127] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 579.412858][ T1127] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 579.421116][ T1127] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 579.429313][ T1127] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 579.437792][ T1127] [ 579.437792][ T1127] Showing all locks held in the system: [ 579.445539][ T1127] 1 lock held by khungtaskd/1127: [ 579.450838][ T1127] #0: ffffffff899a3dc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 579.460441][ T1127] 4 locks held by rs:main Q:Reg/9620: [ 579.465825][ T1127] #0: ffff8880ae837358 (&rq->lock){-.-.}, at: __schedule+0x232/0x1f90 [ 579.474786][ T1127] #1: ffffffff899a3dc0 (rcu_read_lock){....}, at: vfs_write+0x485/0x5d0 [ 579.484348][ T1127] #2: ffff8880a1bd5588 (&sb->s_type->i_mutex_key#11){+.+.}, at: ext4_buffered_write_iter+0xba/0x460 [ 579.495683][ T1127] #3: ffffffff899a3dc0 (rcu_read_lock){....}, at: current_time+0x6b/0x110 [ 579.504730][ T1127] 1 lock held by rsyslogd/9622: [ 579.509784][ T1127] #0: ffff8880a9578b60 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 579.518629][ T1127] 2 locks held by getty/9712: [ 579.523497][ T1127] #0: ffff8880a3ae7090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.532723][ T1127] #1: ffffc900017bb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.542692][ T1127] 2 locks held by getty/9713: [ 579.547572][ T1127] #0: ffff8880a2678090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.556782][ T1127] #1: ffffc900017fb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.567173][ T1127] 2 locks held by getty/9714: [ 579.571854][ T1127] #0: ffff88809a086090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.581263][ T1127] #1: ffffc9000180b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.591090][ T1127] 2 locks held by getty/9715: [ 579.595764][ T1127] #0: ffff8880a6a47090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.605142][ T1127] #1: ffffc9000177b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.615065][ T1127] 2 locks held by getty/9716: [ 579.620177][ T1127] #0: ffff8880a83ad090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.631054][ T1127] #1: ffffc900017eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.640867][ T1127] 2 locks held by getty/9717: [ 579.645545][ T1127] #0: ffff88809456c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.654759][ T1127] #1: ffffc9000181b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.664618][ T1127] 2 locks held by getty/9718: [ 579.669505][ T1127] #0: ffff8880a8c89090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 579.678793][ T1127] #1: ffffc9000175b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 579.688756][ T1127] 1 lock held by syz-executor394/9740: [ 579.694232][ T1127] 1 lock held by syz-executor394/9745: [ 579.700022][ T1127] #0: ffffffff8a5500c0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.710975][ T1127] 1 lock held by syz-executor394/9746: [ 579.716491][ T1127] #0: ffffffff8a5500c0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.727493][ T1127] 1 lock held by syz-executor394/9748: [ 579.732949][ T1127] #0: ffffffff8a5500c0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.744052][ T1127] 1 lock held by syz-executor394/9749: [ 579.749716][ T1127] #0: ffffffff8a5500c0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.760765][ T1127] 1 lock held by syz-executor394/9750: [ 579.766338][ T1127] #0: ffffffff8a5500c0 (hashlimit_mutex){+.+.}, at: hashlimit_mt_check_common.isra.0+0x341/0x1500 [ 579.777545][ T1127] [ 579.779875][ T1127] ============================================= [ 579.779875][ T1127] [ 579.788701][ T1127] NMI backtrace for cpu 1 [ 579.793038][ T1127] CPU: 1 PID: 1127 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 579.801351][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.811420][ T1127] Call Trace: [ 579.814855][ T1127] dump_stack+0x197/0x210 [ 579.819213][ T1127] nmi_cpu_backtrace.cold+0x70/0xb2 [ 579.824502][ T1127] ? vprintk_func+0x86/0x189 [ 579.829200][ T1127] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 579.834950][ T1127] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 579.840947][ T1127] arch_trigger_cpumask_backtrace+0x14/0x20 [ 579.848067][ T1127] watchdog+0xb11/0x10c0 [ 579.852404][ T1127] kthread+0x361/0x430 [ 579.856627][ T1127] ? reset_hung_task_detector+0x30/0x30 [ 579.862182][ T1127] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 579.868002][ T1127] ret_from_fork+0x24/0x30 [ 579.872617][ T1127] Sending NMI from CPU 1 to CPUs 0: [ 579.878750][ C0] NMI backtrace for cpu 0 [ 579.878758][ C0] CPU: 0 PID: 9740 Comm: syz-executor394 Not tainted 5.5.0-rc6-syzkaller #0 [ 579.878765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.878768][ C0] RIP: 0010:mark_held_locks+0x79/0xf0 [ 579.878781][ C0] Code: fc ff df 4d 8d bd 98 08 00 00 85 c0 7e 57 48 63 c3 48 8d 04 80 49 8d 34 c7 48 8d 7e 22 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 30 38 d0 7f 04 84 c0 75 4c 0f b6 46 22 89 c2 83 e2 03 [ 579.878785][ C0] RSP: 0018:ffffc900021176c0 EFLAGS: 00000002 [ 579.878793][ C0] RAX: 1ffff1101226857f RBX: 0000000000000000 RCX: 0000000000000002 [ 579.878799][ C0] RDX: 0000000000000002 RSI: ffff888091342bd8 RDI: ffff888091342bfa [ 579.878804][ C0] RBP: ffffc900021176f0 R08: 1ffffffff165e7b1 R09: fffffbfff165e7b2 [ 579.878809][ C0] R10: fffffbfff165e7b1 R11: ffffffff8b2f3d8f R12: 0000000000000006 [ 579.878814][ C0] R13: ffff888091342340 R14: dffffc0000000000 R15: ffff888091342bd8 [ 579.878820][ C0] FS: 0000000001ff2880(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 579.878825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.878830][ C0] CR2: ffffffffff600400 CR3: 0000000095d4e000 CR4: 00000000001406f0 [ 579.878836][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.878841][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 579.878844][ C0] Call Trace: [ 579.878848][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 579.878851][ C0] ? _raw_spin_unlock_bh+0x2c/0x30 [ 579.878855][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 579.878859][ C0] lockdep_hardirqs_on+0x421/0x5e0 [ 579.878863][ C0] ? htable_selective_cleanup+0x219/0x330 [ 579.878867][ C0] trace_hardirqs_on+0x67/0x240 [ 579.878871][ C0] ? htable_selective_cleanup+0x219/0x330 [ 579.878875][ C0] __local_bh_enable_ip+0x15a/0x270 [ 579.878878][ C0] _raw_spin_unlock_bh+0x2c/0x30 [ 579.878882][ C0] htable_selective_cleanup+0x219/0x330 [ 579.878916][ C0] ? esp_mt+0x410/0x410 [ 579.878919][ C0] htable_put+0x176/0x220 [ 579.878922][ C0] ? hashlimit_mt_destroy_v2+0x70/0x70 [ 579.878925][ C0] hashlimit_mt_destroy_v1+0x50/0x70 [ 579.878928][ C0] cleanup_match+0xde/0x170 [ 579.878931][ C0] ? icmp_checkentry+0xa0/0xa0 [ 579.878935][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.878938][ C0] find_check_entry.isra.0+0x454/0x920 [ 579.878941][ C0] ? ipt_do_table+0x1b80/0x1b80 [ 579.878944][ C0] ? lockdep_hardirqs_on+0x421/0x5e0 [ 579.878947][ C0] ? kvfree+0x61/0x70 [ 579.878950][ C0] translate_table+0xcb4/0x17d0 [ 579.878953][ C0] ? compat_do_ipt_get_ctl+0x910/0x910 [ 579.878957][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.878960][ C0] ? _copy_from_user+0x12c/0x1a0 [ 579.878962][ C0] do_ipt_set_ctl+0x2fe/0x4c2 [ 579.878966][ C0] ? compat_do_ipt_set_ctl+0x170/0x170 [ 579.878968][ C0] ? mutex_unlock+0xd/0x10 [ 579.878972][ C0] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 579.878975][ C0] nf_setsockopt+0x77/0xd0 [ 579.878977][ C0] ip_setsockopt+0xdf/0x100 [ 579.878980][ C0] tcp_setsockopt+0x8f/0xe0 [ 579.878984][ C0] sock_common_setsockopt+0x94/0xd0 [ 579.878986][ C0] __sys_setsockopt+0x261/0x4c0 [ 579.878989][ C0] ? sock_create_kern+0x50/0x50 [ 579.878992][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 579.878996][ C0] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 579.878999][ C0] ? handle_mm_fault+0x4ab/0xa50 [ 579.879002][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 579.879005][ C0] ? do_syscall_64+0x26/0x790 [ 579.879009][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.879011][ C0] ? do_syscall_64+0x26/0x790 [ 579.879015][ C0] __x64_sys_setsockopt+0xbe/0x150 [ 579.879017][ C0] do_syscall_64+0xfa/0x790 [ 579.879021][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.879023][ C0] RIP: 0033:0x441269 [ 579.879034][ C0] Code: e8 ac e8 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb 08 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.879037][ C0] RSP: 002b:00007ffc1d9849f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 579.879045][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441269 [ 579.879049][ C0] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 579.879054][ C0] RBP: 00000000006cc018 R08: 0000000000000509 R09: 00000000004002c8 [ 579.879058][ C0] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000401fe0 [ 579.879063][ C0] R13: 0000000000402070 R14: 0000000000000000 R15: 0000000000000000 [ 579.880605][ T1127] Kernel panic - not syncing: hung_task: blocked tasks [ 580.328467][ T1127] CPU: 1 PID: 1127 Comm: khungtaskd Not tainted 5.5.0-rc6-syzkaller #0 [ 580.336882][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.347027][ T1127] Call Trace: [ 580.350419][ T1127] dump_stack+0x197/0x210 [ 580.355196][ T1127] panic+0x2e3/0x75c [ 580.359123][ T1127] ? add_taint.cold+0x16/0x16 [ 580.363810][ T1127] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 580.369475][ T1127] ? ___preempt_schedule+0x16/0x18 [ 580.374757][ T1127] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 580.381097][ T1127] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 580.387255][ T1127] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 580.393516][ T1127] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 580.400221][ T1127] watchdog+0xb22/0x10c0 [ 580.404628][ T1127] kthread+0x361/0x430 [ 580.408726][ T1127] ? reset_hung_task_detector+0x30/0x30 [ 580.414276][ T1127] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 580.420020][ T1127] ret_from_fork+0x24/0x30 [ 580.426422][ T1127] Kernel Offset: disabled [ 580.430928][ T1127] Rebooting in 86400 seconds..