[ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.94' (ECDSA) to the list of known hosts. syzkaller login: [ 27.583013] IPVS: ftp: loaded support on port[0] = 21 executing program [ 27.689156] [ 27.690795] ================================ [ 27.695182] WARNING: inconsistent lock state [ 27.699570] 4.14.279-syzkaller #0 Not tainted [ 27.704036] -------------------------------- [ 27.708415] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 27.714536] ksoftirqd/0/7 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 27.719963] (&(&local->client_conns_lock)->rlock){+.?.}, at: [] rxrpc_put_client_conn+0x661/0xac0 [ 27.730606] {SOFTIRQ-ON-W} state was registered at: [ 27.735707] lock_acquire+0x170/0x3f0 [ 27.739585] _raw_spin_lock+0x2a/0x40 [ 27.743452] rxrpc_connect_call+0x2bb/0x3e10 [ 27.747921] rxrpc_new_client_call+0x8f4/0x1a10 [ 27.752650] rxrpc_do_sendmsg+0x8dc/0xfb0 [ 27.756861] rxrpc_sendmsg+0x3cf/0x5f0 [ 27.760811] sock_sendmsg+0xb5/0x100 [ 27.764602] ___sys_sendmsg+0x326/0x800 [ 27.768636] __sys_sendmmsg+0x129/0x330 [ 27.772671] SyS_sendmmsg+0x2f/0x50 [ 27.776361] do_syscall_64+0x1d5/0x640 [ 27.780308] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 27.785556] irq event stamp: 445488 [ 27.789156] hardirqs last enabled at (445488): [] _raw_spin_unlock_irqrestore+0x79/0xe0 [ 27.798928] hardirqs last disabled at (445487): [] _raw_spin_lock_irqsave+0x66/0xc0 [ 27.808260] softirqs last enabled at (445324): [] __do_softirq+0x68b/0x9ff [ 27.816899] softirqs last disabled at (445329): [] run_ksoftirqd+0x50/0x1a0 [ 27.825530] [ 27.825530] other info that might help us debug this: [ 27.832183] Possible unsafe locking scenario: [ 27.832183] [ 27.838211] CPU0 [ 27.840765] ---- [ 27.843325] lock(&(&local->client_conns_lock)->rlock); [ 27.848748] [ 27.851474] lock(&(&local->client_conns_lock)->rlock); [ 27.857077] [ 27.857077] *** DEADLOCK *** [ 27.857077] [ 27.863108] 1 lock held by ksoftirqd/0/7: [ 27.867222] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x84e/0x1180 [ 27.876384] [ 27.876384] stack backtrace: [ 27.880853] CPU: 0 PID: 7 Comm: ksoftirqd/0 Not tainted 4.14.279-syzkaller #0 [ 27.888096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.897421] Call Trace: [ 27.899987] dump_stack+0x1b2/0x281 [ 27.903589] print_usage_bug.cold+0x42e/0x570 [ 27.908060] mark_lock+0xb4d/0x1050 [ 27.911662] ? print_irq_inversion_bug+0xd0/0xd0 [ 27.916390] __lock_acquire+0xc81/0x3f20 [ 27.920424] ? __lock_acquire+0x5fc/0x3f20 [ 27.924635] ? trace_hardirqs_on+0x10/0x10 [ 27.928841] ? lock_acquire+0x170/0x3f0 [ 27.932790] ? debug_object_deactivate+0x1da/0x2e0 [ 27.937693] ? trace_hardirqs_on+0x10/0x10 [ 27.941902] ? lock_acquire+0x170/0x3f0 [ 27.945852] ? lock_downgrade+0x740/0x740 [ 27.949973] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 27.955051] lock_acquire+0x170/0x3f0 [ 27.958827] ? rxrpc_put_client_conn+0x661/0xac0 [ 27.963586] _raw_spin_lock+0x2a/0x40 [ 27.967449] ? rxrpc_put_client_conn+0x661/0xac0 [ 27.972176] rxrpc_put_client_conn+0x661/0xac0 [ 27.976736] ? rxrpc_rcu_destroy_call+0x83/0x190 [ 27.981464] rxrpc_rcu_destroy_call+0x83/0x190 [ 27.986021] ? rxrpc_call_timer_expired+0x70/0x70 [ 27.990840] rcu_process_callbacks+0x780/0x1180 [ 27.995488] ? note_gp_changes+0x2f0/0x2f0 [ 27.999716] ? sched_clock+0x2a/0x40 [ 28.003405] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 28.008837] __do_softirq+0x24d/0x9ff [ 28.012614] ? __local_bh_enable_ip+0x170/0x170 [ 28.017256] run_ksoftirqd+0x50/0x1a0 [ 28.021031] smpboot_thread_fn+0x5c1/0x920 [ 28.025238] ? sort_range+0x30/0x30 [ 28.028845] ? sort_range+0x30/0x30 [ 28.032443] kthread+0x30d/0x420 [ 28.035785] ? kthread_create_on_node+0xd0/0xd0 [ 28.