[ 43.456253] audit: type=1800 audit(1582081501.256:30): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.660679] kauditd_printk_skb: 4 callbacks suppressed [ 48.660693] audit: type=1400 audit(1582081506.476:35): avc: denied { map } for pid=8004 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.21' (ECDSA) to the list of known hosts. executing program [ 55.447082] audit: type=1400 audit(1582081513.266:36): avc: denied { map } for pid=8016 comm="syz-executor819" path="/root/syz-executor819016366" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 55.469645] IPVS: ftp: loaded support on port[0] = 21 [ 55.540644] [ 55.542454] ================================ [ 55.547471] WARNING: inconsistent lock state [ 55.554220] 4.19.104-syzkaller #0 Not tainted [ 55.558707] -------------------------------- [ 55.563117] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 55.569259] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 55.574522] 000000003a91f295 (&(&local->client_conns_lock)->rlock){+.?.}, at: rxrpc_put_client_conn+0x683/0xc20 [ 55.585065] {SOFTIRQ-ON-W} state was registered at: [ 55.590083] lock_acquire+0x16f/0x3f0 [ 55.594076] _raw_spin_lock+0x2f/0x40 [ 55.597951] rxrpc_connect_call+0x351/0x4920 [ 55.602450] rxrpc_new_client_call+0x8e7/0x1880 [ 55.607344] rxrpc_do_sendmsg+0xfc3/0x1ca3 [ 55.611728] rxrpc_sendmsg+0x4a0/0x5b0 [ 55.615704] sock_sendmsg+0xd7/0x130 [ 55.619627] ___sys_sendmsg+0x3e2/0x920 [ 55.623688] __sys_sendmmsg+0x1bf/0x4e0 [ 55.627908] __x64_sys_sendmmsg+0x9d/0x100 [ 55.632227] do_syscall_64+0xfd/0x620 [ 55.636106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 55.641376] irq event stamp: 159342 [ 55.646311] hardirqs last enabled at (159342): [] _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 55.656387] hardirqs last disabled at (159341): [] _raw_spin_lock_irqsave+0x6f/0xcd [ 55.665931] softirqs last enabled at (159232): [] _local_bh_enable+0x1c/0x30 [ 55.674798] softirqs last disabled at (159233): [] irq_exit+0x180/0x1d0 [ 55.683109] [ 55.683109] other info that might help us debug this: [ 55.689846] Possible unsafe locking scenario: [ 55.689846] [ 55.696022] CPU0 [ 55.699629] ---- [ 55.702194] lock(&(&local->client_conns_lock)->rlock); [ 55.707629] [ 55.710368] lock(&(&local->client_conns_lock)->rlock); [ 55.715978] [ 55.715978] *** DEADLOCK *** [ 55.715978] [ 55.722023] 1 lock held by swapper/1/0: [ 55.726043] #0: 0000000000f03be1 (rcu_callback){....}, at: rcu_process_callbacks+0xc79/0x1a30 [ 55.734802] [ 55.734802] stack backtrace: [ 55.739291] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.19.104-syzkaller #0 [ 55.746480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 55.755837] Call Trace: [ 55.758407] [ 55.760555] dump_stack+0x197/0x210 [ 55.764174] print_usage_bug.cold+0x330/0x42a [ 55.768695] ? save_stack_trace+0x1a/0x20 [ 55.772842] mark_lock+0xd1b/0x1370 [ 55.776479] ? check_usage_backwards+0x340/0x340 [ 55.781381] __lock_acquire+0xc62/0x49c0 [ 55.785459] ? mark_held_locks+0x100/0x100 [ 55.789735] ? save_stack+0x45/0xd0 [ 55.793344] ? __kasan_slab_free+0x102/0x150 [ 55.797734] ? kasan_slab_free+0xe/0x10 [ 55.801702] ? kfree+0xcf/0x220 [ 55.804979] ? mark_held_locks+0x100/0x100 [ 55.809201] ? find_held_lock+0x35/0x130 [ 55.813260] ? debug_object_deactivate+0x1e4/0x360 [ 55.818187] ? mark_held_locks+0x100/0x100 [ 55.822411] ? debug_object_deactivate+0x1e4/0x360 [ 55.827339] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 55.832446] ? lockdep_hardirqs_on+0x19b/0x5d0 [ 55.837026] lock_acquire+0x16f/0x3f0 [ 55.840819] ? rxrpc_put_client_conn+0x683/0xc20 [ 55.845685] _raw_spin_lock+0x2f/0x40 [ 55.849475] ? rxrpc_put_client_conn+0x683/0xc20 [ 55.854833] rxrpc_put_client_conn+0x683/0xc20 [ 55.859400] ? rxrpc_rcu_destroy_call+0xbd/0x200 [ 55.864150] ? rxrpc_process_call.cold+0x20/0x20 [ 55.868899] rxrpc_rcu_destroy_call+0xbd/0x200 [ 55.873544] rcu_process_callbacks+0xba0/0x1a30 [ 55.878206] ? __rcu_read_unlock+0x170/0x170 [ 55.882613] __do_softirq+0x25c/0x921 [ 55.886429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.891959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 55.897499] irq_exit+0x180/0x1d0 [ 55.900986] smp_apic_timer_interrupt+0x13b/0x550 [ 55.905823] apic_timer_interrupt+0xf/0x20 [ 55.910151] [ 55.912380] RIP: 0010:native_safe_halt+0xe/0x10 [ 55.917146] Code: ff ff 48 89 df e8 92 f8 4d fa eb 82 e9 07 00 00 00 0f 00 2d 74 61 53 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 64 61 53 00 fb f4 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 be cc 04 fa e8 d9 [ 55.940588] RSP: 0018:ffff8880aa3b7d08 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 55.948300] RAX: 1ffffffff11e4ad4 RBX: ffff8880aa3a43c0 RCX: 0000000000000000 [ 55.955563] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880aa3a4c3c [ 55.962881] RBP: ffff8880aa3b7d38 R08: ffff8880aa3a43c0 R09: 0000000000000000 [ 55.970145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 55.977466] R13: ffffffff88f25690 R14: 0000000000000000 R15: ffff8880aa3a43c0 [ 55.984796] ? default_idle+0x4e/0x320 [ 55.988686] arch_cpu_idle+0xa/0x10 [ 55.992309] default_idle_call+0x36/0x90 [ 55.996364] do_idle+0x30c/0x4d0 [ 55.999755] ? trace_hardirqs_on+0x67/0x220 [ 56.004066] ? arch_cpu_idle_exit+0x80/0x80 [ 56.008411] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 56.013515] ? complete+0x61/0x80 [ 56.017231] cpu_startup_entry+0xc8/0xe0 [ 56.021274] ? cpu_in_idle+0x20/0x20 [ 56.024983] ? setup_APIC_timer+0x1aa/0x200 [ 56.029290] start_secondary+0x3e8/0x5b0 [ 56.033411] ? set_cpu_sibling_map+0x1860/0x1860 [ 56.038164] secondary_startup_64+0xa4/0xb0