audit: type=1400 audit(4000001498.468:105207): avc: denied { syslog } for pid=32085 comm="syz-executor.0" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 audit: type=1400 audit(4000001498.488:105208): avc: denied { syslog } for pid=32085 comm="syz-executor.0" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 INFO: task init:3789 blocked for more than 140 seconds. Not tainted 4.9.172+ #50 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. init D28872 3789 1 0x00000000 ffff88013d990000 ffff88014fc6bc80 ffff8801db621000 ffff88016c8f5f00 ffff8801db621018 ffff8801d7be75a0 ffffffff8280081e ffffffff810ab78c ffff8801d7be7540 00ffffff810abaa0 ffff8801db6218f0 1ffff1003af7cea3 Call Trace: [<000000002256e3a1>] schedule+0x92/0x1c0 kernel/sched/core.c:3546 [<00000000823650e5>] schedule_timeout+0x766/0xe50 kernel/time/timer.c:1771 [<00000000d3008d67>] __down_common kernel/locking/semaphore.c:221 [inline] [<00000000d3008d67>] __down+0x190/0x2b0 kernel/locking/semaphore.c:238 [<000000006cf8c0f4>] down+0x64/0x90 kernel/locking/semaphore.c:61 [<00000000e80c3644>] console_lock+0x2c/0x80 kernel/printk/printk.c:2217 [<000000001c8c73f9>] console_device+0x1c/0xc0 kernel/printk/printk.c:2554 [<0000000099cb2573>] tty_lookup_driver drivers/tty/tty_io.c:2018 [inline] [<0000000099cb2573>] tty_open_by_driver drivers/tty/tty_io.c:2063 [inline] [<0000000099cb2573>] tty_open+0x796/0xe10 drivers/tty/tty_io.c:2140 [<00000000539db6f3>] chrdev_open+0x230/0x630 fs/char_dev.c:392 [<00000000303ab969>] do_dentry_open+0x422/0xd20 fs/open.c:772 [<00000000c086c094>] vfs_open+0x105/0x230 fs/open.c:885 [<000000006cda2166>] do_last fs/namei.c:3457 [inline] [<000000006cda2166>] path_openat+0xbf5/0x2f60 fs/namei.c:3581 [<000000009def1750>] do_filp_open+0x1a1/0x280 fs/namei.c:3615 [<000000003f41a136>] do_sys_open+0x2f0/0x610 fs/open.c:1078 [<00000000371a88ea>] SYSC_open fs/open.c:1096 [inline] [<00000000371a88ea>] SyS_open+0x2d/0x40 fs/open.c:1091 [<00000000e20cfb2e>] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [<00000000a4193aee>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Showing all locks held in the system: 2 locks held by khungtaskd/24: #0: (rcu_read_lock){......}, at: [<0000000026db5f98>] check_hung_uninterruptible_tasks kernel/hung_task.c:169 [inline] #0: (rcu_read_lock){......}, at: [<0000000026db5f98>] watchdog+0x14b/0xaf0 kernel/hung_task.c:263 #1: (tasklist_lock){.+.?..}, at: [<000000007828beb9>] debug_show_all_locks+0x7f/0x21f kernel/locking/lockdep.c:4336 1 lock held by rsyslogd/1900: #0: (&f->f_pos_lock){+.+.+.}, at: [<00000000062490a5>] __fdget_pos+0xa8/0xd0 fs/file.c:782 2 locks held by getty/2028: #0: (&tty->ldisc_sem){++++++}, at: [<00000000f75b70fa>] ldsem_down_read+0x33/0x40 drivers/tty/tty_ldsem.c:377 #1: (&ldata->atomic_read_lock){+.+.+.}, at: [<000000002da1f9aa>] n_tty_read+0x1fe/0x1820 drivers/tty/n_tty.c:2156 1 lock held by init/3789: #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/3790: #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/3796: #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/3797: #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/3798: #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 1 lock held by init/3799: #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open_by_driver drivers/tty/tty_io.c:2062 [inline] #0: (tty_mutex){+.+.+.}, at: [<00000000c8c08638>] tty_open+0x3f9/0xe10 drivers/tty/tty_io.c:2140 ============================================= NMI backtrace for cpu 0 CPU: 0 PID: 24 Comm: khungtaskd Not tainted 4.9.172+ #50 ffff8801d98d7cc8 ffffffff81b4fc11 0000000000000000 0000000000000000 0000000000000000 ffffffff81097501 dffffc0000000000 ffff8801d98d7d00 ffffffff81b5aeac 0000000000000000 0000000000000000 0000000000000000 Call Trace: [<0000000088cac090>] __dump_stack lib/dump_stack.c:15 [inline] [<0000000088cac090>] dump_stack+0xc1/0x120 lib/dump_stack.c:51 [<0000000071b7c1d5>] nmi_cpu_backtrace.cold+0x47/0x87 lib/nmi_backtrace.c:99 [<00000000d2ac674f>] nmi_trigger_cpumask_backtrace+0x124/0x155 lib/nmi_backtrace.c:60 [<00000000d0dee863>] arch_trigger_cpumask_backtrace+0x14/0x20 arch/x86/kernel/apic/hw_nmi.c:37 [<0000000035982371>] trigger_all_cpu_backtrace include/linux/nmi.h:58 [inline] [<0000000035982371>] check_hung_task kernel/hung_task.c:126 [inline] [<0000000035982371>] check_hung_uninterruptible_tasks kernel/hung_task.c:183 [inline] [<0000000035982371>] watchdog+0x670/0xaf0 kernel/hung_task.c:263 [<00000000859d3542>] kthread+0x278/0x310 kernel/kthread.c:211 [<00000000de6f6caa>] ret_from_fork+0x5c/0x70 arch/x86/entry/entry_64.S:373 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 13862 Comm: syz-executor.0 Not tainted 4.9.172+ #50 task: 00000000497b37c3 task.stack: 00000000eadefe7d RIP: 0010:[] c [<000000001f4265ac>] jhash2 include/linux/jhash.h:130 [inline] RIP: 0010:[] c [<000000001f4265ac>] hash_stack lib/stackdepot.c:161 [inline] RIP: 0010:[] c [<000000001f4265ac>] depot_save_stack+0x63/0x4a0 lib/stackdepot.c:217 RSP: 0018:ffff88011393f7a8 EFLAGS: 00000a03 RAX: 00000000e0615fee RBX: 0000000015ba2738 RCX: ffffffffffffffff RDX: ffff88011393f880 RSI: 0000000000000004 RDI: ffff88011393f820 RBP: ffff88011393f7f8 R08: 000000002cd59e8c R09: 0000000038bc162b R10: ffffed0022727ef7 R11: ffff88011393f7bf R12: 00000000024082c0 R13: ffff88011393f808 R14: 000000000000000e R15: ffff8801da401a00 FS: 0000000001865940(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b32624000 CR3: 00000001cc019000 CR4: 00000000001606b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Stack: ffff8801024082c0c 0000000000000000c ffff88011393ff48c 0000000000000000c 95b30e59aacaa34bc ffff8801d3ae7590c 00000000024082c0c ffff8801d3ae7570c 0000000000000008c ffff8801da401a00c ffff88011393fa30c ffffffff814f7e56c Call Trace: [<00000000e49a2c91>] save_stack mm/kasan/kasan.c:511 [inline] [<00000000e49a2c91>] set_track mm/kasan/kasan.c:517 [inline] [<00000000e49a2c91>] kasan_kmalloc.part.0+0xc6/0xf0 mm/kasan/kasan.c:609 [<00000000d391c305>] kasan_kmalloc+0xb7/0xd0 mm/kasan/kasan.c:594 [<00000000a96a3cd0>] __kmalloc+0x133/0x320 mm/slub.c:3741 [<00000000aa0b7b08>] kmalloc_array include/linux/slab.h:582 [inline] [<00000000aa0b7b08>] kcalloc include/linux/slab.h:593 [inline] [<00000000aa0b7b08>] xt_alloc_entry_offsets+0x21/0x50 net/netfilter/x_tables.c:752 [<000000000c68ce02>] translate_table+0x215/0x1650 net/ipv4/netfilter/ip_tables.c:705 [<000000008bcf090c>] do_replace net/ipv4/netfilter/ip_tables.c:1157 [inline] [<000000008bcf090c>] do_ipt_set_ctl+0x2d4/0x470 net/ipv4/netfilter/ip_tables.c:1693 [<000000002e59315e>] nf_sockopt net/netfilter/nf_sockopt.c:105 [inline] [<000000002e59315e>] nf_setsockopt+0x6d/0xc0 net/netfilter/nf_sockopt.c:114 [<00000000f2855a0d>] ip_setsockopt net/ipv4/ip_sockglue.c:1247 [inline] [<00000000f2855a0d>] ip_setsockopt+0x8a/0xa0 net/ipv4/ip_sockglue.c:1232 [<000000006faf93fb>] tcp_setsockopt net/ipv4/tcp.c:2757 [inline] [<000000006faf93fb>] tcp_setsockopt+0x8a/0xe0 net/ipv4/tcp.c:2751 [<000000008d41333a>] sock_common_setsockopt+0x9a/0xe0 net/core/sock.c:2710 [<000000001b653363>] SYSC_setsockopt net/socket.c:1786 [inline] [<000000001b653363>] SyS_setsockopt+0x159/0x240 net/socket.c:1765 [<00000000e20cfb2e>] do_syscall_64+0x1ad/0x570 arch/x86/entry/common.c:285 [<00000000a4193aee>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb Code: c89 cf0 c49 c89 cfd c48 c8b c7f c08 c48 c01 cc0 c44 c8d c04 c85 c7b c71 cf5 c75 c83 cf8 c03 c89 cc6 c0f c86 ceb c01 c00 c00 c44 c89 cc3 c44 c89 cc0 c48 c89 cfa c03 c5a c08 c<83> cee c03 c48 c83 cc2 c0c c44 c8b c4a cf4 c03 c42 cf8 c41 c29 cd9 c45 c01 cc1 c41 c