[   97.044616][   T27] audit: type=1800 audit(1581098035.081:26): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   97.972187][   T27] kauditd_printk_skb: 2 callbacks suppressed
[   97.972199][   T27] audit: type=1800 audit(1581098036.031:29): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   97.998685][   T27] audit: type=1800 audit(1581098036.041:30): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.185' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [  109.545351][ T9888] IPVS: ftp: loaded support on port[0] = 21
[  109.616367][    C1] 
[  109.618792][    C1] ================================
[  109.623886][    C1] WARNING: inconsistent lock state
[  109.628979][    C1] 5.5.0-syzkaller #0 Not tainted
[  109.633889][    C1] --------------------------------
[  109.638990][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  109.645814][    C1] swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  109.651773][    C1] ffff8880984d29c8 (&(&local->client_conns_lock)->rlock){+.?.}, at: rxrpc_put_client_conn+0x6ed/0xc90
[  109.662807][    C1] {SOFTIRQ-ON-W} state was registered at:
[  109.668519][    C1]   lock_acquire+0x190/0x410
[  109.673090][    C1]   _raw_spin_lock+0x2f/0x40
[  109.677661][    C1]   rxrpc_connect_call+0x358/0x4e30
[  109.682838][    C1]   rxrpc_new_client_call+0x9c0/0x1ad0
[  109.688298][    C1]   rxrpc_do_sendmsg+0xffa/0x1d5f
[  109.693298][    C1]   rxrpc_sendmsg+0x4d6/0x5f0
[  109.697948][    C1]   sock_sendmsg+0xd7/0x130
[  109.702426][    C1]   ____sys_sendmsg+0x358/0x880
[  109.707273][    C1]   ___sys_sendmsg+0x100/0x170
[  109.712027][    C1]   __sys_sendmmsg+0x1bf/0x4d0
[  109.716779][    C1]   __x64_sys_sendmmsg+0x9d/0x100
[  109.721784][    C1]   do_syscall_64+0xfa/0x790
[  109.726356][    C1]   entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  109.732318][    C1] irq event stamp: 147926
[  109.736642][    C1] hardirqs last  enabled at (147926): [<ffffffff87ecc126>] _raw_spin_unlock_irqrestore+0x66/0xe0
[  109.747123][    C1] hardirqs last disabled at (147925): [<ffffffff87ecc49f>] _raw_spin_lock_irqsave+0x6f/0xcd
[  109.757402][    C1] softirqs last  enabled at (147840): [<ffffffff8147568c>] _local_bh_enable+0x1c/0x30
[  109.766941][    C1] softirqs last disabled at (147841): [<ffffffff8147808b>] irq_exit+0x19b/0x1e0
[  109.775947][    C1] 
[  109.775947][    C1] other info that might help us debug this:
[  109.783997][    C1]  Possible unsafe locking scenario:
[  109.783997][    C1] 
[  109.791533][    C1]        CPU0
[  109.794804][    C1]        ----
[  109.798065][    C1]   lock(&(&local->client_conns_lock)->rlock);
[  109.804206][    C1]   <Interrupt>
[  109.807646][    C1]     lock(&(&local->client_conns_lock)->rlock);
[  109.813999][    C1] 
[  109.813999][    C1]  *** DEADLOCK ***
[  109.813999][    C1] 
[  109.822142][    C1] 1 lock held by swapper/1/0:
[  109.826797][    C1]  #0: ffffffff89bac140 (rcu_callback){....}, at: rcu_core+0x562/0x1390
[  109.835123][    C1] 
[  109.835123][    C1] stack backtrace:
[  109.841017][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.5.0-syzkaller #0
[  109.848547][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  109.858597][    C1] Call Trace:
[  109.862037][    C1]  <IRQ>
[  109.864877][    C1]  dump_stack+0x197/0x210
[  109.869203][    C1]  print_usage_bug.cold+0x327/0x378
[  109.874383][    C1]  mark_lock+0xbb4/0x1220
[  109.878694][    C1]  ? kfree+0x10a/0x2c0
[  109.882826][    C1]  ? check_usage_backwards+0x330/0x330
[  109.888274][    C1]  ? __nf_hook_entries_free+0x31/0x40
[  109.893651][    C1]  __lock_acquire+0x1e8e/0x4a00
[  109.898488][    C1]  ? find_held_lock+0x35/0x130
[  109.903235][    C1]  ? __kasan_check_read+0x11/0x20
[  109.908257][    C1]  ? mark_lock+0xc2/0x1220
[  109.912670][    C1]  ? mark_held_locks+0xf0/0xf0
[  109.917538][    C1]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[  109.923343][    C1]  lock_acquire+0x190/0x410
[  109.927834][    C1]  ? rxrpc_put_client_conn+0x6ed/0xc90
[  109.933295][    C1]  _raw_spin_lock+0x2f/0x40
[  109.937803][    C1]  ? rxrpc_put_client_conn+0x6ed/0xc90
[  109.943264][    C1]  rxrpc_put_client_conn+0x6ed/0xc90
[  109.948544][    C1]  ? rxrpc_rcu_destroy_call+0xbd/0x200
[  109.953983][    C1]  rxrpc_rcu_destroy_call+0xbd/0x200
[  109.959362][    C1]  rcu_core+0x5e1/0x1390
[  109.963593][    C1]  ? __rcu_read_unlock+0x700/0x700
[  109.968700][    C1]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  109.974378][    C1]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  109.980364][    C1]  ? run_rebalance_domains+0x227/0x2d0
[  109.985857][    C1]  rcu_core_si+0x9/0x10
[  109.989999][    C1]  __do_softirq+0x262/0x98c
[  109.994504][    C1]  ? sched_clock_cpu+0x1b/0x1b0
[  109.999361][    C1]  irq_exit+0x19b/0x1e0
[  110.003517][    C1]  smp_apic_timer_interrupt+0x1a3/0x610
[  110.009067][    C1]  apic_timer_interrupt+0xf/0x20
[  110.013989][    C1]  </IRQ>
[  110.016926][    C1] RIP: 0010:native_safe_halt+0xe/0x10
[  110.022289][    C1] Code: 48 70 c7 f9 eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d 44 d3 5b 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d 34 d3 5b 00 fb f4 <c3> cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 7e 2f 76 f9 e8 19
[  110.041880][    C1] RSP: 0018:ffffc90000d3fd68 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13
[  110.050285][    C1] RAX: 1ffffffff1367612 RBX: ffff8880a99fc340 RCX: 0000000000000000
[  110.058247][    C1] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff8880a99fcbd4
[  110.066313][    C1] RBP: ffffc90000d3fd98 R08: ffff8880a99fc340 R09: 0000000000000000
[  110.074285][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000
[  110.082257][    C1] R13: ffffffff8aa522c0 R14: 0000000000000000 R15: 0000000000000001
[  110.090240][    C1]  ? default_idle+0x4e/0x360
[  110.094830][    C1]  arch_cpu_idle+0xa/0x10
[  110.099165][    C1]  default_idle_call+0x84/0xb0
[  110.103929][    C1]  do_idle+0x3c8/0x6e0
[  110.107996][    C1]  ? arch_cpu_idle_exit+0x80/0x80
[  110.113007][    C1]  ? _raw_spin_unlock_irqrestore+0x9f/0xe0