program: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f000001f500)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f000001c240)=""/4091, 0xffb}, {&(0x7f0000000c00)=""/222, 0xde}, {&(0x7f000001d240)=""/4096, 0x1000}], 0x3}, 0xd9}, {{&(0x7f000001f600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0}, 0x4}], 0x3, 0x40010162, 0x0) [ 86.114500][ T45] Bluetooth: hci0: command tx timeout [ 86.317082][ T64] [ 86.318315][ T64] ============================================ [ 86.320932][ T64] WARNING: possible recursive locking detected [ 86.323831][ T64] syzkaller #0 Not tainted [ 86.325779][ T64] -------------------------------------------- [ 86.328579][ T64] kworker/u4:4/64 is trying to acquire lock: [ 86.331153][ T64] ffff888036caaa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x1c8/0x740 [ 86.335520][ T64] [ 86.335520][ T64] but task is already holding lock: [ 86.338686][ T64] ffff888036caaa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 86.342601][ T64] [ 86.342601][ T64] other info that might help us debug this: [ 86.346023][ T64] Possible unsafe locking scenario: [ 86.346023][ T64] [ 86.349397][ T64] CPU0 [ 86.351078][ T64] ---- [ 86.352541][ T64] lock(k-sk_lock-AF_INET6); [ 86.354519][ T64] lock(k-sk_lock-AF_INET6); [ 86.356581][ T64] [ 86.356581][ T64] *** DEADLOCK *** [ 86.356581][ T64] [ 86.360150][ T64] May be due to missing lock nesting notation [ 86.360150][ T64] [ 86.363537][ T64] 4 locks held by kworker/u4:4/64: [ 86.365708][ T64] #0: ffff8880432e4948 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 86.370699][ T64] #1: ffffc90000b0fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 86.376096][ T64] #2: ffff888036caaa20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 86.381303][ T64] #3: ffff888036caabc8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 86.385463][ T64] [ 86.385463][ T64] stack backtrace: [ 86.388212][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 86.388224][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.388230][ T64] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 86.388245][ T64] Call Trace: [ 86.388251][ T64] [ 86.388255][ T64] dump_stack_lvl+0xe8/0x150 [ 86.388267][ T64] print_deadlock_bug+0x279/0x290 [ 86.388278][ T64] __lock_acquire+0x253f/0x2cf0 [ 86.388287][ T64] ? __lock_acquire+0x6b5/0x2cf0 [ 86.388296][ T64] ? __bfs+0x153/0x290 [ 86.388303][ T64] ? __pfx_hlock_conflict+0x10/0x10 [ 86.388313][ T64] lock_acquire+0xf0/0x2e0 [ 86.388321][ T64] ? inet6_getname+0x1c8/0x740 [ 86.388329][ T64] lock_sock_nested+0x48/0x100 [ 86.388336][ T64] ? inet6_getname+0x1c8/0x740 [ 86.388342][ T64] inet6_getname+0x1c8/0x740 [ 86.388350][ T64] ? __pfx_inet6_getname+0x10/0x10 [ 86.388358][ T64] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.388369][ T64] rds_tcp_conn_slots_available+0x288/0x470 [ 86.388379][ T64] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 86.388392][ T64] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.388402][ T64] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 86.388409][ T64] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 86.388416][ T64] ? rds_send_worker+0x7d/0x2e0 [ 86.388423][ T64] ? process_scheduled_works+0xb02/0x1830 [ 86.388431][ T64] ? worker_thread+0xa50/0xfc0 [ 86.388440][ T64] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 86.388449][ T64] rds_recv_incoming+0x9f6/0x12d0 [ 86.388458][ T64] ? __pfx_rds_recv_incoming+0x10/0x10 [ 86.388464][ T64] ? skb_copy_bits+0x7e5/0x8f0 [ 86.388473][ T64] rds_tcp_data_recv+0x7f1/0xa40 [ 86.388482][ T64] __tcp_read_sock+0x196/0x970 [ 86.388492][ T64] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 86.388499][ T64] rds_tcp_data_ready+0x369/0x9a0 [ 86.388505][ T64] ? __pfx_sock_def_readable+0x10/0x10 [ 86.388515][ T64] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 86.388523][ T64] tcp_data_queue+0x1e2e/0x5e50 [ 86.388534][ T64] ? tcp_urg+0x106/0x410 [ 86.388543][ T64] ? __pfx_tcp_data_queue+0x10/0x10 [ 86.388551][ T64] ? __pfx_tcp_urg+0x10/0x10 [ 86.388559][ T64] ? kvm_clock_get_cycles+0x47/0x60 [ 86.388567][ T64] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 86.388576][ T64] tcp_rcv_established+0xf45/0x2740 [ 86.388587][ T64] ? __pfx_tcp_rcv_established+0x10/0x10 [ 86.388597][ T64] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 86.388604][ T64] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 86.388614][ T64] __release_sock+0x1b8/0x3a0 [ 86.388624][ T64] release_sock+0x5f/0x1f0 [ 86.388630][ T64] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 86.388637][ T64] rds_send_xmit+0x207e/0x28d0 [ 86.388651][ T64] ? __pfx_rds_send_xmit+0x10/0x10 [ 86.388663][ T64] rds_send_worker+0x7d/0x2e0 [ 86.388675][ T64] ? process_scheduled_works+0xa25/0x1830 [ 86.388686][ T64] process_scheduled_works+0xb02/0x1830 [ 86.388705][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.388714][ T64] ? assign_work+0x3d5/0x5e0 [ 86.388722][ T64] worker_thread+0xa50/0xfc0 [ 86.388734][ T64] kthread+0x388/0x470 [ 86.388740][ T64] ? __pfx_worker_thread+0x10/0x10 [ 86.388751][ T64] ? __pfx_kthread+0x10/0x10 [ 86.388759][ T64] ret_from_fork+0x51e/0xb90 [ 86.388772][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 86.388782][ T64] ? __switch_to+0xc7d/0x1450 [ 86.388794][ T64] ? __pfx_kthread+0x10/0x10 [ 86.388803][ T64] ret_from_fork_asm+0x1a/0x30 [ 86.388815][ T64] [ 86.533176][ T64] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 86.537161][ T64] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 64, name: kworker/u4:4 [ 86.540990][ T64] preempt_count: 201, expected: 0 [ 86.542977][ T64] RCU nest depth: 0, expected: 0 [ 86.545277][ T64] INFO: lockdep is turned off. [ 86.547267][ T64] Preemption disabled at: [ 86.547275][ T64] [<0000000000000000>] 0x0 [ 86.551143][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 86.551158][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.551167][ T64] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 86.551188][ T64] Call Trace: [ 86.551197][ T64] [ 86.551202][ T64] dump_stack_lvl+0xe8/0x150 [ 86.551218][ T64] __might_resched+0x378/0x4d0 [ 86.551232][ T64] lock_sock_nested+0x5d/0x100 [ 86.551243][ T64] inet6_getname+0x1c8/0x740 [ 86.551256][ T64] ? __pfx_inet6_getname+0x10/0x10 [ 86.551265][ T64] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.551276][ T64] rds_tcp_conn_slots_available+0x288/0x470 [ 86.551287][ T64] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 86.551300][ T64] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.551314][ T64] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 86.551324][ T64] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 86.551335][ T64] ? rds_send_worker+0x7d/0x2e0 [ 86.551347][ T64] ? process_scheduled_works+0xb02/0x1830 [ 86.551357][ T64] ? worker_thread+0xa50/0xfc0 [ 86.551367][ T64] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 86.551375][ T64] rds_recv_incoming+0x9f6/0x12d0 [ 86.551383][ T64] ? __pfx_rds_recv_incoming+0x10/0x10 [ 86.551391][ T64] ? skb_copy_bits+0x7e5/0x8f0 [ 86.551399][ T64] rds_tcp_data_recv+0x7f1/0xa40 [ 86.551408][ T64] __tcp_read_sock+0x196/0x970 [ 86.551419][ T64] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 86.551426][ T64] rds_tcp_data_ready+0x369/0x9a0 [ 86.551433][ T64] ? __pfx_sock_def_readable+0x10/0x10 [ 86.551443][ T64] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 86.551450][ T64] tcp_data_queue+0x1e2e/0x5e50 [ 86.551462][ T64] ? tcp_urg+0x106/0x410 [ 86.551470][ T64] ? __pfx_tcp_data_queue+0x10/0x10 [ 86.551479][ T64] ? __pfx_tcp_urg+0x10/0x10 [ 86.551487][ T64] ? kvm_clock_get_cycles+0x47/0x60 [ 86.551497][ T64] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 86.551509][ T64] tcp_rcv_established+0xf45/0x2740 [ 86.551523][ T64] ? __pfx_tcp_rcv_established+0x10/0x10 [ 86.551536][ T64] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 86.551547][ T64] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 86.551584][ T64] __release_sock+0x1b8/0x3a0 [ 86.551613][ T64] release_sock+0x5f/0x1f0 [ 86.551628][ T64] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 86.551638][ T64] rds_send_xmit+0x207e/0x28d0 [ 86.551655][ T64] ? __pfx_rds_send_xmit+0x10/0x10 [ 86.551668][ T64] rds_send_worker+0x7d/0x2e0 [ 86.551680][ T64] ? process_scheduled_works+0xa25/0x1830 [ 86.551693][ T64] process_scheduled_works+0xb02/0x1830 [ 86.551710][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.551723][ T64] ? assign_work+0x3d5/0x5e0 [ 86.551735][ T64] worker_thread+0xa50/0xfc0 [ 86.551753][ T64] kthread+0x388/0x470 [ 86.551763][ T64] ? __pfx_worker_thread+0x10/0x10 [ 86.551775][ T64] ? __pfx_kthread+0x10/0x10 [ 86.551784][ T64] ret_from_fork+0x51e/0xb90 [ 86.551797][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 86.551809][ T64] ? __switch_to+0xc7d/0x1450 [ 86.551820][ T64] ? __pfx_kthread+0x10/0x10 [ 86.551829][ T64] ret_from_fork_asm+0x1a/0x30 [ 86.551847][ T64] [ 86.551855][ T64] BUG: scheduling while atomic: kworker/u4:4/64/0x00000202 [ 86.688372][ T64] INFO: lockdep is turned off. [ 86.690539][ T64] Modules linked in: [ 86.692311][ T64] Preemption disabled at: [ 86.692319][ T64] [<0000000000000000>] 0x0 [ 86.696260][ T64] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 86.700044][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u4:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 86.704934][ T64] Tainted: [W]=WARN [ 86.706675][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.711224][ T64] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 86.713801][ T64] Call Trace: [ 86.715320][ T64] [ 86.716695][ T64] vpanic+0x56c/0xa60 [ 86.718516][ T64] ? __pfx_vpanic+0x10/0x10 [ 86.720506][ T64] ? rcu_is_watching+0x15/0xb0 [ 86.722603][ T64] panic+0xc5/0xd0 [ 86.724287][ T64] ? __pfx_panic+0x10/0x10 [ 86.726358][ T64] ? __pfx__printk+0x10/0x10 [ 86.728373][ T64] check_panic_on_warn+0x89/0xb0 [ 86.730635][ T64] __schedule_bug+0xf6/0x150 [ 86.732787][ T64] __schedule+0x16a9/0x5340 [ 86.734776][ T64] ? __wake_up_klogd+0xe6/0x120 [ 86.736923][ T64] ? vprintk_emit+0x4eb/0x560 [ 86.739159][ T64] ? __pfx_vprintk_emit+0x10/0x10 [ 86.741417][ T64] ? unwind_next_frame+0xa5/0x23c0 [ 86.743719][ T64] ? rcu_is_watching+0x15/0xb0 [ 86.745714][ T64] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.747887][ T64] ? __pfx___schedule+0x10/0x10 [ 86.750066][ T64] ? rcu_is_watching+0x15/0xb0 [ 86.752162][ T64] ? rcu_is_watching+0x15/0xb0 [ 86.754261][ T64] ? lock_release+0x4b/0x3d0 [ 86.756314][ T64] ? schedule+0x90/0x360 [ 86.758172][ T64] ? wq_worker_sleeping+0x63/0x250 [ 86.760451][ T64] schedule+0x164/0x360 [ 86.762273][ T64] __lock_sock+0x161/0x2c0 [ 86.764252][ T64] ? __pfx___lock_sock+0x10/0x10 [ 86.766403][ T64] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.768706][ T64] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.771364][ T64] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.773877][ T64] ? lock_sock_nested+0x6a/0x100 [ 86.776157][ T64] lock_sock_nested+0x9f/0x100 [ 86.778227][ T64] inet6_getname+0x1c8/0x740 [ 86.780377][ T64] ? __pfx_inet6_getname+0x10/0x10 [ 86.782578][ T64] ? do_raw_spin_lock+0x12b/0x2f0 [ 86.784699][ T64] rds_tcp_conn_slots_available+0x288/0x470 [ 86.787175][ T64] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 86.789886][ T64] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 86.792431][ T64] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 86.795177][ T64] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 86.797313][ T64] ? rds_send_worker+0x7d/0x2e0 [ 86.799305][ T64] ? process_scheduled_works+0xb02/0x1830 [ 86.801503][ T64] ? worker_thread+0xa50/0xfc0 [ 86.803458][ T64] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 86.805786][ T64] rds_recv_incoming+0x9f6/0x12d0 [ 86.807891][ T64] ? __pfx_rds_recv_incoming+0x10/0x10 [ 86.810015][ T64] ? skb_copy_bits+0x7e5/0x8f0 [ 86.811911][ T64] rds_tcp_data_recv+0x7f1/0xa40 [ 86.813896][ T64] __tcp_read_sock+0x196/0x970 [ 86.815943][ T64] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 86.818323][ T64] rds_tcp_data_ready+0x369/0x9a0 [ 86.820542][ T64] ? __pfx_sock_def_readable+0x10/0x10 [ 86.823031][ T64] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 86.825464][ T64] tcp_data_queue+0x1e2e/0x5e50 [ 86.827649][ T64] ? tcp_urg+0x106/0x410 [ 86.829496][ T64] ? __pfx_tcp_data_queue+0x10/0x10 [ 86.831780][ T64] ? __pfx_tcp_urg+0x10/0x10 [ 86.833777][ T64] ? kvm_clock_get_cycles+0x47/0x60 [ 86.836080][ T64] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 86.838673][ T64] tcp_rcv_established+0xf45/0x2740 [ 86.841049][ T64] ? __pfx_tcp_rcv_established+0x10/0x10 [ 86.843473][ T64] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 86.845516][ T64] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 86.847710][ T64] __release_sock+0x1b8/0x3a0 [ 86.849787][ T64] release_sock+0x5f/0x1f0 [ 86.851717][ T64] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 86.854290][ T64] rds_send_xmit+0x207e/0x28d0 [ 86.856303][ T64] ? __pfx_rds_send_xmit+0x10/0x10 [ 86.858733][ T64] rds_send_worker+0x7d/0x2e0 [ 86.860816][ T64] ? process_scheduled_works+0xa25/0x1830 [ 86.863099][ T64] process_scheduled_works+0xb02/0x1830 [ 86.865369][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.867718][ T64] ? assign_work+0x3d5/0x5e0 [ 86.869681][ T64] worker_thread+0xa50/0xfc0 [ 86.871587][ T64] kthread+0x388/0x470 [ 86.873254][ T64] ? __pfx_worker_thread+0x10/0x10 [ 86.875447][ T64] ? __pfx_kthread+0x10/0x10 [ 86.877633][ T64] ret_from_fork+0x51e/0xb90 [ 86.879714][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 86.881853][ T64] ? __switch_to+0xc7d/0x1450 [ 86.883914][ T64] ? __pfx_kthread+0x10/0x10 [ 86.885986][ T64] ret_from_fork_asm+0x1a/0x30 [ 86.888172][ T64] [ 86.889924][ T64] Kernel Offset: disabled [ 86.891778][ T64] Rebooting in 86400 seconds..