[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[ 114.329686][ T27] audit: type=1400 audit(1581233418.500:37): avc: denied { watch } for pid=10596 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 118.052228][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 118.052244][ T27] audit: type=1400 audit(1581233422.230:41): avc: denied { map } for pid=10677 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. [ 124.730294][ T27] audit: type=1400 audit(1581233428.900:42): avc: denied { map } for pid=10689 comm="syz-executor494" path="/root/syz-executor494359655" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 124.746571][T10690] IPVS: ftp: loaded support on port[0] = 21 executing program [ 124.784704][ T27] audit: type=1400 audit(1581233428.960:43): avc: denied { create } for pid=10690 comm="syz-executor494" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 124.809954][ T27] audit: type=1400 audit(1581233428.960:44): avc: denied { write } for pid=10690 comm="syz-executor494" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 124.835131][ T27] audit: type=1400 audit(1581233428.960:45): avc: denied { read } for pid=10690 comm="syz-executor494" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 124.860850][ C1] [ 124.863175][ C1] ================================ [ 124.868368][ C1] WARNING: inconsistent lock state [ 124.873597][ C1] 5.5.0-syzkaller #0 Not tainted [ 124.878512][ C1] -------------------------------- [ 124.883700][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 124.890525][ C1] ksoftirqd/1/16 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 124.896745][ C1] ffff888085b881c8 (&(&local->client_conns_lock)->rlock){+.?.}, at: rxrpc_put_client_conn+0x6ed/0xc90 [ 124.907672][ C1] {SOFTIRQ-ON-W} state was registered at: [ 124.913373][ C1] lock_acquire+0x190/0x410 [ 124.917955][ C1] _raw_spin_lock+0x2f/0x40 [ 124.922529][ C1] rxrpc_connect_call+0x358/0x4e30 [ 124.927741][ C1] rxrpc_new_client_call+0x9c0/0x1ad0 [ 124.933179][ C1] rxrpc_do_sendmsg+0xffa/0x1d5f [ 124.938304][ C1] rxrpc_sendmsg+0x4d6/0x5f0 [ 124.942960][ C1] sock_sendmsg+0xd7/0x130 [ 124.947435][ C1] ____sys_sendmsg+0x358/0x880 [ 124.952267][ C1] ___sys_sendmsg+0x100/0x170 [ 124.957071][ C1] __sys_sendmmsg+0x1bf/0x4d0 [ 124.961826][ C1] __x64_sys_sendmmsg+0x9d/0x100 [ 124.966838][ C1] do_syscall_64+0xfa/0x790 [ 124.971514][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 124.977466][ C1] irq event stamp: 781598 [ 124.981822][ C1] hardirqs last enabled at (781598): [] _raw_spin_unlock_irqrestore+0x66/0xe0 [ 124.992306][ C1] hardirqs last disabled at (781597): [] _raw_spin_lock_irqsave+0x6f/0xcd [ 125.002356][ C1] softirqs last enabled at (781330): [] __do_softirq+0x6cd/0x98c [ 125.011756][ C1] softirqs last disabled at (781335): [] run_ksoftirqd+0x8e/0x110 [ 125.021091][ C1] [ 125.021091][ C1] other info that might help us debug this: [ 125.029134][ C1] Possible unsafe locking scenario: [ 125.029134][ C1] [ 125.036562][ C1] CPU0 [ 125.039822][ C1] ---- [ 125.043089][ C1] lock(&(&local->client_conns_lock)->rlock); [ 125.049227][ C1] [ 125.052665][ C1] lock(&(&local->client_conns_lock)->rlock); [ 125.058975][ C1] [ 125.058975][ C1] *** DEADLOCK *** [ 125.058975][ C1] [ 125.067218][ C1] 1 lock held by ksoftirqd/1/16: [ 125.072133][ C1] #0: ffffffff89bac140 (rcu_callback){....}, at: rcu_core+0x562/0x1390 [ 125.080570][ C1] [ 125.080570][ C1] stack backtrace: [ 125.086469][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.5.0-syzkaller #0 [ 125.094252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 125.104288][ C1] Call Trace: [ 125.107561][ C1] dump_stack+0x197/0x210 [ 125.111880][ C1] print_usage_bug.cold+0x327/0x378 [ 125.117072][ C1] mark_lock+0xbb4/0x1220 [ 125.121389][ C1] ? __kasan_slab_free+0x102/0x150 [ 125.126486][ C1] ? check_usage_backwards+0x330/0x330 [ 125.131948][ C1] ? kmem_cache_free+0x86/0x320 [ 125.136779][ C1] __lock_acquire+0x1e8e/0x4a00 [ 125.141614][ C1] ? find_held_lock+0x35/0x130 [ 125.147489][ C1] ? __kasan_check_read+0x11/0x20 [ 125.153108][ C1] ? mark_lock+0xc2/0x1220 [ 125.157519][ C1] ? mark_held_locks+0xf0/0xf0 [ 125.162265][ C1] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 125.168103][ C1] lock_acquire+0x190/0x410 [ 125.172635][ C1] ? rxrpc_put_client_conn+0x6ed/0xc90 [ 125.178077][ C1] _raw_spin_lock+0x2f/0x40 [ 125.182642][ C1] ? rxrpc_put_client_conn+0x6ed/0xc90 [ 125.188136][ C1] rxrpc_put_client_conn+0x6ed/0xc90 [ 125.193414][ C1] ? rxrpc_rcu_destroy_call+0xbd/0x200 [ 125.198853][ C1] rxrpc_rcu_destroy_call+0xbd/0x200 [ 125.204133][ C1] rcu_core+0x5e1/0x1390 [ 125.208360][ C1] ? __rcu_read_unlock+0x700/0x700 [ 125.213452][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 125.219002][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 125.224985][ C1] rcu_core_si+0x9/0x10 [ 125.229147][ C1] __do_softirq+0x262/0x98c [ 125.233628][ C1] ? takeover_tasklets+0x820/0x820 [ 125.239525][ C1] run_ksoftirqd+0x8e/0x110 [ 125.244097][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 125.249469][ C1] ? __smpboot_create_thread.part.0+0x340/0x340 [ 125.255721][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 125.261961][ C1] ? __kthread_parkme+0x108/0x1c0 [ 125.266963][ C1] ? __kasan_check_read+0x11/0x20 [ 125.271966][ C1] kthread+0x361/0x430 [ 125.276023][ C1] ? __smpboot_create_thread.part.0+0x340/0x340 [ 125.282324][ C1] ? kthread_mod_delayed_work+0x1f0/0x