[ 45.419095] audit: type=1800 audit(1582739144.390:32): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 46.099149] audit: type=1800 audit(1582739145.140:33): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.316871] kauditd_printk_skb: 2 callbacks suppressed [ 56.316884] audit: type=1400 audit(1582739155.360:36): avc: denied { map } for pid=7919 comm="syz-executor619" path="/root/syz-executor619664645" dev="sda1" ino=16484 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 56.333529] IPVS: ftp: loaded support on port[0] = 21 [ 56.413749] [ 56.415396] ================================ [ 56.419774] WARNING: inconsistent lock state [ 56.424175] 4.19.106-syzkaller #0 Not tainted [ 56.428688] -------------------------------- [ 56.433071] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 56.439191] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 56.444443] 00000000387f7d19 (&(&local->client_conns_lock)->rlock){+.?.}, at: rxrpc_put_client_conn+0x666/0xc00 [ 56.454667] {SOFTIRQ-ON-W} state was registered at: [ 56.459677] _raw_spin_lock+0x2a/0x40 [ 56.463556] rxrpc_connect_call+0x301/0x4630 [ 56.468036] rxrpc_new_client_call+0x8c6/0x1850 [ 56.472772] rxrpc_do_sendmsg+0xf2e/0x1bc1 [ 56.477077] rxrpc_sendmsg+0x4a8/0x5b0 [ 56.481034] sock_sendmsg+0xcf/0x120 [ 56.484824] ___sys_sendmsg+0x3e2/0x920 [ 56.488865] __sys_sendmmsg+0x195/0x470 [ 56.492914] __x64_sys_sendmmsg+0x99/0x100 [ 56.497226] do_syscall_64+0xf9/0x620 [ 56.501197] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 56.506451] irq event stamp: 144150 [ 56.510107] hardirqs last enabled at (144150): [] _raw_spin_unlock_irqrestore+0x67/0xe0 [ 56.519905] hardirqs last disabled at (144149): [] _raw_spin_lock_irqsave+0x66/0xbf [ 56.529290] softirqs last enabled at (144020): [] irq_enter+0xbd/0xd0 [ 56.537512] softirqs last disabled at (144021): [] irq_exit+0x17b/0x1c0 [ 56.545805] [ 56.545805] other info that might help us debug this: [ 56.552451] Possible unsafe locking scenario: [ 56.552451] [ 56.558492] CPU0 [ 56.561052] ---- [ 56.563613] lock(&(&local->client_conns_lock)->rlock); [ 56.569047] [ 56.571790] lock(&(&local->client_conns_lock)->rlock); [ 56.577396] [ 56.577396] *** DEADLOCK *** [ 56.577396] [ 56.583451] 1 lock held by swapper/1/0: [ 56.587404] #0: 000000009ffcac88 (rcu_callback){....}, at: rcu_process_callbacks+0xbff/0x17f0 [ 56.596149] [ 56.596149] stack backtrace: [ 56.600629] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.106-syzkaller #0 [ 56.607709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.617048] Call Trace: [ 56.619670] [ 56.621813] dump_stack+0x188/0x20d [ 56.625431] print_usage_bug.cold+0x327/0x425 [ 56.629974] mark_lock+0xc71/0x11b0 [ 56.633584] ? check_usage_backwards+0x340/0x340 [ 56.638334] ? __save_stack_trace+0x8a/0xf0 [ 56.642691] __lock_acquire+0xc62/0x49c0 [ 56.646836] ? mark_held_locks+0xf0/0xf0 [ 56.650882] ? save_stack+0x89/0xa0 [ 56.654497] ? mark_held_locks+0xf0/0xf0 [ 56.658540] ? find_held_lock+0x2d/0x110 [ 56.662579] ? mark_held_locks+0xf0/0xf0 [ 56.666618] ? lock_downgrade+0x740/0x740 [ 56.670744] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 56.675826] lock_acquire+0x170/0x400 [ 56.679608] ? rxrpc_put_client_conn+0x666/0xc00 [ 56.684346] _raw_spin_lock+0x2a/0x40 [ 56.688128] ? rxrpc_put_client_conn+0x666/0xc00 [ 56.692861] rxrpc_put_client_conn+0x666/0xc00 [ 56.697422] ? rxrpc_rcu_destroy_call+0xb6/0x1e0 [ 56.702158] rxrpc_rcu_destroy_call+0xb6/0x1e0 [ 56.706732] ? rxrpc_process_call.cold+0x18/0x18 [ 56.711471] rcu_process_callbacks+0xb2d/0x17f0 [ 56.716123] ? __rcu_read_unlock+0x160/0x160 [ 56.720537] __do_softirq+0x26c/0x93c [ 56.724320] irq_exit+0x17b/0x1c0 [ 56.727753] smp_apic_timer_interrupt+0x136/0x550 [ 56.732574] apic_timer_interrupt+0xf/0x20 [ 56.736789] [ 56.739052] RIP: 0010:native_safe_halt+0xe/0x10 [ 56.743701] Code: fa eb 82 90 90 90 90 90 90 90 90 90 e9 07 00 00 00 0f 00 2d 04 76 48 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d f4 75 48 00 fb f4 90 41 56 41 55 41 54 55 53 e8 33 26 37 fa e8 3e ec 35 fc 0f 1f [ 56.762628] RSP: 0018:ffff8880a9eefd58 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 56.770332] RAX: 1ffffffff1164ac4 RBX: dffffc0000000000 RCX: 0000000000000000 [ 56.777623] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9edac3c [ 56.784912] RBP: 0000000000000001 R08: ffff8880a9eda3c0 R09: 0000000000000000 [ 56.792183] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff88b25610 [ 56.799452] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880a9eda3c0 [ 56.806734] default_idle+0x49/0x320 [ 56.810429] do_idle+0x2ee/0x4b0 [ 56.813782] ? a