[ 50.101286] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.207' (ECDSA) to the list of known hosts. [ 55.686311] random: sshd: uninitialized urandom read (32 bytes read) [ 55.805347] audit: type=1400 audit(1582902253.200:36): avc: denied { map } for pid=7599 comm="syz-executor827" path="/root/syz-executor827732596" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 56.071125] IPVS: ftp: loaded support on port[0] = 21 executing program [ 56.860146] [ 56.861817] ================================ [ 56.866197] WARNING: inconsistent lock state [ 56.870579] 4.14.171-syzkaller #0 Not tainted [ 56.875058] -------------------------------- [ 56.879440] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 56.885609] swapper/0/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 56.890858] (&(&local->client_conns_lock)->rlock){+.?.}, at: [] rxrpc_put_client_conn+0x524/0xa80 [ 56.901629] {SOFTIRQ-ON-W} state was registered at: [ 56.906645] lock_acquire+0x170/0x3f0 [ 56.910525] _raw_spin_lock+0x2a/0x40 [ 56.914436] rxrpc_connect_call+0x2ac/0x3e50 [ 56.918940] rxrpc_new_client_call+0x8d2/0x1410 [ 56.923677] rxrpc_do_sendmsg+0x8a1/0x1019 [ 56.927976] rxrpc_sendmsg+0x47d/0x5a0 [ 56.931927] sock_sendmsg+0xc5/0x100 [ 56.935703] ___sys_sendmsg+0x349/0x840 [ 56.939752] __sys_sendmmsg+0x129/0x330 [ 56.943801] SyS_sendmmsg+0x2f/0x50 [ 56.947520] do_syscall_64+0x1d5/0x640 [ 56.951481] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 56.956746] irq event stamp: 246766 [ 56.960469] hardirqs last enabled at (246766): [] _raw_spin_unlock_irqrestore+0x67/0xe0 [ 56.970283] hardirqs last disabled at (246765): [] _raw_spin_lock_irqsave+0x66/0xbf [ 56.979784] softirqs last enabled at (246740): [] irq_enter+0xbd/0xd0 [ 56.988016] softirqs last disabled at (246741): [] irq_exit+0x15b/0x1a0 [ 56.996309] [ 56.996309] other info that might help us debug this: [ 57.002952] Possible unsafe locking scenario: [ 57.002952] [ 57.009000] CPU0 [ 57.011560] ---- [ 57.014140] lock(&(&local->client_conns_lock)->rlock); [ 57.019570] [ 57.022303] lock(&(&local->client_conns_lock)->rlock); [ 57.027916] [ 57.027916] *** DEADLOCK *** [ 57.027916] [ 57.034215] 1 lock held by swapper/0/0: [ 57.038173] #0: (rcu_callback){....}, at: [] rcu_process_callbacks+0x866/0x1190 [ 57.047369] [ 57.047369] stack backtrace: [ 57.051861] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.14.171-syzkaller #0 [ 57.058960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.068343] Call Trace: [ 57.070919] [ 57.073511] dump_stack+0x13e/0x194 [ 57.077135] print_usage_bug.cold+0x327/0x425 [ 57.081621] mark_lock+0xd21/0x10b0 [ 57.085234] ? find_held_lock+0x2d/0x110 [ 57.089272] ? check_usage_backwards+0x2f0/0x2f0 [ 57.094008] __lock_acquire+0xb57/0x4620 [ 57.098062] ? trace_hardirqs_on+0x10/0x10 [ 57.102282] ? trace_hardirqs_on+0x10/0x10 [ 57.106502] ? trace_hardirqs_on+0x10/0x10 [ 57.110722] ? lock_acquire+0x170/0x3f0 [ 57.114674] ? save_trace+0x290/0x290 [ 57.118456] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 57.123558] lock_acquire+0x170/0x3f0 [ 57.127341] ? rxrpc_put_client_conn+0x524/0xa80 [ 57.132087] _raw_spin_lock+0x2a/0x40 [ 57.135865] ? rxrpc_put_client_conn+0x524/0xa80 [ 57.140602] rxrpc_put_client_conn+0x524/0xa80 [ 57.145177] ? rxrpc_rcu_destroy_call+0x83/0x190 [ 57.149926] ? rxrpc_start_call_timer+0x1f0/0x1f0 [ 57.154760] rxrpc_rcu_destroy_call+0x83/0x190 [ 57.159323] rcu_process_callbacks+0x792/0x1190 [ 57.163973] ? call_rcu_sched+0x10/0x10 [ 57.167926] __do_softirq+0x254/0x9bf [ 57.171705] ? check_preemption_disabled+0x35/0x240 [ 57.176715] irq_exit+0x15b/0x1a0 [ 57.180158] smp_apic_timer_interrupt+0x141/0x5e0 [ 57.185002] apic_timer_interrupt+0x8f/0xa0 [ 57.189323] [ 57.191582] RIP: 0010:native_safe_halt+0xe/0x10 [ 57.196230] RSP: 0018:ffffffff87c07e78 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff10 [ 57.204035] RAX: 1ffffffff0fa2cdc RBX: dffffc0000000000 RCX: 0000000000000000 [ 57.211327] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff87c76abc [ 57.218579] RBP: ffffffff87d166d0 R08: 1ffffffff1124001 R09: 0000000000000000 [ 57.225840] R10: 0000000000000000 R11: 0000000000000000 R12: fffffbfff0f8ec48 [ 57.233132] R13: ffffffff87c76240 R14: 0000000000000000 R15: 0000000000000000 [ 57.240403] default_idle+0x47/0x370 [ 57.244103] do_idle+0x250/0x3c0 [ 57.247456] ? trace_event_define_fields_x86_irq_vector+0x28/0x28 [ 57.253680] cpu_startup_entry+0x14/0x20 [ 57.257729] start_kernel+0x659/0x676 [ 5