[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.207' (ECDSA) to the list of known hosts. syzkaller login: [ 33.919065] audit: type=1400 audit(1593786354.872:8): avc: denied { execmem } for pid=6343 comm="syz-executor505" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 34.195829] IPVS: ftp: loaded support on port[0] = 21 executing program [ 35.064316] [ 35.066283] ================================ [ 35.071595] WARNING: inconsistent lock state [ 35.076526] 4.14.184-syzkaller #0 Not tainted [ 35.084145] -------------------------------- [ 35.089217] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 35.096393] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 35.102617] (&(&local->client_conns_lock)->rlock){+.?.}, at: [] rxrpc_put_client_conn+0x62a/0xa90 [ 35.114252] {SOFTIRQ-ON-W} state was registered at: [ 35.121209] lock_acquire+0x170/0x3f0 [ 35.129517] _raw_spin_lock+0x2a/0x40 [ 35.137377] rxrpc_connect_call+0x2ac/0x3e50 [ 35.143240] rxrpc_new_client_call+0x8d3/0x1400 [ 35.149508] rxrpc_do_sendmsg+0x8a1/0x1023 [ 35.156932] rxrpc_sendmsg+0x47d/0x5a0 [ 35.163579] sock_sendmsg+0xb5/0x100 [ 35.168303] ___sys_sendmsg+0x349/0x840 [ 35.177836] __sys_sendmmsg+0x129/0x330 [ 35.184613] SyS_sendmmsg+0x2f/0x50 [ 35.190700] do_syscall_64+0x1d5/0x640 [ 35.195550] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 35.223411] irq event stamp: 108734 [ 35.229532] hardirqs last enabled at (108734): [] _raw_spin_unlock_irqrestore+0x79/0xe0 [ 35.242914] hardirqs last disabled at (108733): [] _raw_spin_lock_irqsave+0x66/0xc0 [ 35.254358] softirqs last enabled at (108706): [] irq_enter+0xbd/0xd0 [ 35.264362] softirqs last disabled at (108707): [] irq_exit+0x15b/0x1a0 [ 35.278306] [ 35.278306] other info that might help us debug this: [ 35.286775] Possible unsafe locking scenario: [ 35.286775] [ 35.295757] CPU0 [ 35.301427] ---- [ 35.304804] lock(&(&local->client_conns_lock)->rlock); [ 35.312484] [ 35.316166] lock(&(&local->client_conns_lock)->rlock); [ 35.323678] [ 35.323678] *** DEADLOCK *** [ 35.323678] [ 35.331289] 1 lock held by swapper/1/0: [ 35.336273] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x861/0x1180 [ 35.347883] [ 35.347883] stack backtrace: [ 35.354128] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.184-syzkaller #0 [ 35.365928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.383373] Call Trace: [ 35.387288] [ 35.392320] dump_stack+0x1b2/0x283 [ 35.398107] print_usage_bug.cold+0x42e/0x570 [ 35.403865] mark_lock+0xb42/0x1040 [ 35.409204] ? print_irq_inversion_bug+0xd0/0xd0 [ 35.416889] __lock_acquire+0xd2f/0x42a0 [ 35.423479] ? trace_hardirqs_on+0x10/0x10 [ 35.430497] ? trace_hardirqs_on+0x10/0x10 [ 35.436365] ? lock_downgrade+0x6e0/0x6e0 [ 35.442898] ? trace_hardirqs_on+0x10/0x10 [ 35.450080] ? lock_acquire+0x170/0x3f0 [ 35.455865] ? lock_downgrade+0x6e0/0x6e0 [ 35.462386] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 35.469793] lock_acquire+0x170/0x3f0 [ 35.475124] ? rxrpc_put_client_conn+0x62a/0xa90 [ 35.482126] _raw_spin_lock+0x2a/0x40 [ 35.487588] ? rxrpc_put_client_conn+0x62a/0xa90 [ 35.493403] rxrpc_put_client_conn+0x62a/0xa90 [ 35.497998] ? rxrpc_rcu_destroy_call+0x83/0x190 [ 35.504252] ? rxrpc_start_call_timer+0x1f0/0x1f0 [ 35.509987] rxrpc_rcu_destroy_call+0x83/0x190 [ 35.514568] rcu_process_callbacks+0x78d/0x1180 [ 35.519229] ? note_gp_changes+0x2f0/0x2f0 [ 35.523570] ? sched_clock+0x2a/0x40 [ 35.527510] __do_softirq+0x254/0x9bf [ 35.531670] ? check_preemption_disabled+0x35/0x240 [ 35.537017] irq_exit+0x15b/0x1a0 [ 35.541066] smp_apic_timer_interrupt+0x141/0x5f0 [ 35.545977] apic_timer_interrupt+0x93/0xa0 [ 35.550280] [ 35.552502] RIP: 0010:native_safe_halt+0xe/0x10 [ 35.559107] RSP: 0018:ffff8880a9d27eb8 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 35.566893] RAX: 1ffffffff0f62cd4 RBX: dffffc0000000000 RCX: 0000000000000000 [ 35.575063] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9d14bc4 [ 35.583796] RBP: ffffffff87b16690 R08: 1ffffffff10e3d01 R09: 0000000000000000 [ 35.591175] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed10153a2868 [ 35.598715] R13: ffff8880a9d14340 R14: 0000000000000000 R15: 0000000000000000 [ 35.606734] default_idle+0x47/0x370 [ 35.610798] do_idle+0x250/0x3c0 [ 35.614294] cpu_startup_entry+0x14/0x20 [ 35.618497] start_secondary+0x377/0x4a0 [ 35.622634] secondary_startup_64+0xa5/0xb0