[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. syzkaller login: [ 35.467927] audit: type=1400 audit(1591000806.893:8): avc: denied { execmem } for pid=6325 comm="syz-executor904" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 35.725035] IPVS: ftp: loaded support on port[0] = 21 executing program [ 36.553655] [ 36.555317] ================================ [ 36.559709] WARNING: inconsistent lock state [ 36.564834] 4.14.182-syzkaller #0 Not tainted [ 36.569315] -------------------------------- [ 36.574144] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 36.580282] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 36.585541] (&(&local->client_conns_lock)->rlock){+.?.}, at: [] rxrpc_put_client_conn+0x62a/0xa90 [ 36.598542] {SOFTIRQ-ON-W} state was registered at: [ 36.604163] lock_acquire+0x170/0x3f0 [ 36.608026] _raw_spin_lock+0x2a/0x40 [ 36.611889] rxrpc_connect_call+0x2ac/0x3e50 [ 36.616360] rxrpc_new_client_call+0x8d3/0x1400 [ 36.621088] rxrpc_do_sendmsg+0x8a1/0x1023 [ 36.625399] rxrpc_sendmsg+0x47d/0x5a0 [ 36.629380] sock_sendmsg+0xb5/0x100 [ 36.633151] ___sys_sendmsg+0x349/0x840 [ 36.637186] __sys_sendmmsg+0x129/0x330 [ 36.641221] SyS_sendmmsg+0x2f/0x50 [ 36.644912] do_syscall_64+0x1d5/0x640 [ 36.648862] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 36.654113] irq event stamp: 125964 [ 36.657714] hardirqs last enabled at (125964): [] _raw_spin_unlock_irqrestore+0x79/0xe0 [ 36.667845] hardirqs last disabled at (125963): [] _raw_spin_lock_irqsave+0x66/0xc0 [ 36.677280] softirqs last enabled at (125946): [] irq_enter+0xbd/0xd0 [ 36.685501] softirqs last disabled at (125947): [] irq_exit+0x15b/0x1a0 [ 36.693788] [ 36.693788] other info that might help us debug this: [ 36.700437] Possible unsafe locking scenario: [ 36.700437] [ 36.709774] CPU0 [ 36.712332] ---- [ 36.714902] lock(&(&local->client_conns_lock)->rlock); [ 36.720326] [ 36.723053] lock(&(&local->client_conns_lock)->rlock); [ 36.728666] [ 36.728666] *** DEADLOCK *** [ 36.728666] [ 36.734717] 1 lock held by swapper/1/0: [ 36.738671] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x861/0x1180 [ 36.748112] [ 36.748112] stack backtrace: [ 36.752588] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.182-syzkaller #0 [ 36.759667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.769083] Call Trace: [ 36.771671] [ 36.773807] dump_stack+0x1b2/0x283 [ 36.777420] print_usage_bug.cold+0x42e/0x570 [ 36.781890] mark_lock+0xb42/0x1040 [ 36.785494] ? print_irq_inversion_bug+0xd0/0xd0 [ 36.790223] __lock_acquire+0xd2f/0x42a0 [ 36.794303] ? trace_hardirqs_on+0x10/0x10 [ 36.798528] ? trace_hardirqs_on+0x10/0x10 [ 36.802736] ? trace_hardirqs_on+0x10/0x10 [ 36.807388] ? lock_acquire+0x170/0x3f0 [ 36.811341] ? lock_downgrade+0x6e0/0x6e0 [ 36.815478] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 36.820557] lock_acquire+0x170/0x3f0 [ 36.824331] ? rxrpc_put_client_conn+0x62a/0xa90 [ 36.829082] _raw_spin_lock+0x2a/0x40 [ 36.832857] ? rxrpc_put_client_conn+0x62a/0xa90 [ 36.837601] rxrpc_put_client_conn+0x62a/0xa90 [ 36.842268] ? rxrpc_rcu_destroy_call+0x83/0x190 [ 36.847006] ? rxrpc_start_call_timer+0x1f0/0x1f0 [ 36.851840] rxrpc_rcu_destroy_call+0x83/0x190 [ 36.856401] rcu_process_callbacks+0x78d/0x1180 [ 36.861072] ? note_gp_changes+0x2f0/0x2f0 [ 36.865312] ? sched_clock+0x2a/0x40 [ 36.869206] __do_softirq+0x254/0x9bf [ 36.872993] ? check_preemption_disabled+0x35/0x240 [ 36.878270] irq_exit+0x15b/0x1a0 [ 36.881737] smp_apic_timer_interrupt+0x141/0x5f0 [ 36.886574] apic_timer_interrupt+0x93/0xa0 [ 36.890882] [ 36.893111] RIP: 0010:native_safe_halt+0xe/0x10 [ 36.897754] RSP: 0018:ffff8880a9d27eb8 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 36.905435] RAX: 1ffffffff0f62c9c RBX: dffffc0000000000 RCX: 0000000000000000 [ 36.912693] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9d14bc4 [ 36.919944] RBP: ffffffff87b164d0 R08: 1ffffffff10e3d01 R09: 0000000000000000 [ 36.927190] R10: 0000000000000000 R11: 0000000000000000 R12: ffffed10153a2868 [ 36.934967] R13: ffff8880a9d14340 R14: 0000000000000000 R15: 0000000000000000 [ 36.942230] default_idle+0x47/0x370 [ 36.945942] do_idle+0x250/0x3c0 [ 36.949283] cpu_startup_entry+0x14/0x20 [ 36.953341] start_secondary+0x377/0x4a0 [ 36.957394] secondary_startup_64+0xa5/0xb0