program: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000003c0)) [ 73.889394][ T5294] Bluetooth: hci0: command tx timeout [ 74.011464][ T54] [ 74.012913][ T54] ============================================ [ 74.015762][ T54] WARNING: possible recursive locking detected [ 74.018456][ T54] syzkaller #0 Not tainted [ 74.020400][ T54] -------------------------------------------- [ 74.022984][ T54] kworker/u4:4/54 is trying to acquire lock: [ 74.025597][ T54] ffff888041682a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x1c8/0x740 [ 74.029667][ T54] [ 74.029667][ T54] but task is already holding lock: [ 74.032961][ T54] ffff888041682a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 74.037040][ T54] [ 74.037040][ T54] other info that might help us debug this: [ 74.041033][ T54] Possible unsafe locking scenario: [ 74.041033][ T54] [ 74.044894][ T54] CPU0 [ 74.046466][ T54] ---- [ 74.047929][ T54] lock(k-sk_lock-AF_INET6); [ 74.050070][ T54] lock(k-sk_lock-AF_INET6); [ 74.052252][ T54] [ 74.052252][ T54] *** DEADLOCK *** [ 74.052252][ T54] [ 74.056122][ T54] May be due to missing lock nesting notation [ 74.056122][ T54] [ 74.059790][ T54] 4 locks held by kworker/u4:4/54: [ 74.062078][ T54] #0: ffff888033046148 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 74.067296][ T54] #1: ffffc90000b0fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 74.072896][ T54] #2: ffff888041682a20 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 74.077132][ T54] #3: ffff888041682bc8 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 74.081383][ T54] [ 74.081383][ T54] stack backtrace: [ 74.084221][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.084237][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.084246][ T54] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 74.084265][ T54] Call Trace: [ 74.084272][ T54] [ 74.084278][ T54] dump_stack_lvl+0xe8/0x150 [ 74.084295][ T54] print_deadlock_bug+0x279/0x290 [ 74.084311][ T54] __lock_acquire+0x253f/0x2cf0 [ 74.084324][ T54] ? __update_page_owner_handle+0x5a/0x570 [ 74.084340][ T54] ? __update_page_owner_handle+0x51a/0x570 [ 74.084355][ T54] ? unwind_next_frame+0xa5/0x23c0 [ 74.084371][ T54] lock_acquire+0xf0/0x2e0 [ 74.084383][ T54] ? inet6_getname+0x1c8/0x740 [ 74.084399][ T54] lock_sock_nested+0x48/0x100 [ 74.084493][ T54] ? inet6_getname+0x1c8/0x740 [ 74.084507][ T54] inet6_getname+0x1c8/0x740 [ 74.084522][ T54] ? __pfx_inet6_getname+0x10/0x10 [ 74.084536][ T54] rds_tcp_conn_slots_available+0x288/0x470 [ 74.084553][ T54] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 74.084570][ T54] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 74.084604][ T54] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 74.084619][ T54] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 74.084641][ T54] ? rds_send_worker+0x7d/0x2e0 [ 74.084652][ T54] ? process_scheduled_works+0xb02/0x1830 [ 74.084664][ T54] ? worker_thread+0xa50/0xfc0 [ 74.084679][ T54] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 74.084697][ T54] rds_recv_incoming+0x9f6/0x12d0 [ 74.084714][ T54] ? __pfx_rds_recv_incoming+0x10/0x10 [ 74.084729][ T54] ? skb_copy_bits+0x7e5/0x8f0 [ 74.084747][ T54] rds_tcp_data_recv+0x7f1/0xa40 [ 74.084765][ T54] __tcp_read_sock+0x196/0x970 [ 74.084782][ T54] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 74.084797][ T54] rds_tcp_data_ready+0x369/0x9a0 [ 74.084811][ T54] ? __pfx_sock_def_readable+0x10/0x10 [ 74.084824][ T54] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 74.084838][ T54] ? tcp_grow_window+0x4fc/0xc50 [ 74.084855][ T54] tcp_data_queue+0x1e2e/0x5e50 [ 74.084871][ T54] ? tcp_urg+0x106/0x410 [ 74.084881][ T54] ? __pfx_tcp_data_queue+0x10/0x10 [ 74.084892][ T54] ? __pfx_tcp_urg+0x10/0x10 [ 74.084903][ T54] ? kvm_clock_get_cycles+0x47/0x60 [ 74.084915][ T54] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 74.084929][ T54] tcp_rcv_established+0xf45/0x2740 [ 74.084942][ T54] ? __pfx_tcp_rcv_established+0x10/0x10 [ 74.084952][ T54] ? ip6_dst_check+0xb0/0x7e0 [ 74.084968][ T54] ? ip6_dst_check+0xe2/0x7e0 [ 74.084982][ T54] ? ip6_dst_check+0x5e3/0x7e0 [ 74.084997][ T54] ? __pfx_ip6_dst_check+0x10/0x10 [ 74.085012][ T54] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 74.085029][ T54] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 74.085042][ T54] __release_sock+0x1b8/0x3a0 [ 74.085062][ T54] release_sock+0x5f/0x1f0 [ 74.085075][ T54] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 74.085090][ T54] rds_send_xmit+0x207e/0x28d0 [ 74.085105][ T54] ? __pfx_rds_send_xmit+0x10/0x10 [ 74.085116][ T54] rds_send_worker+0x7d/0x2e0 [ 74.085126][ T54] ? process_scheduled_works+0xa25/0x1830 [ 74.085139][ T54] process_scheduled_works+0xb02/0x1830 [ 74.085156][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.085170][ T54] ? assign_work+0x3d5/0x5e0 [ 74.085184][ T54] worker_thread+0xa50/0xfc0 [ 74.085201][ T54] kthread+0x388/0x470 [ 74.085211][ T54] ? __pfx_worker_thread+0x10/0x10 [ 74.085223][ T54] ? __pfx_kthread+0x10/0x10 [ 74.085232][ T54] ret_from_fork+0x51e/0xb90 [ 74.085246][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 74.085258][ T54] ? __switch_to+0xc7d/0x1450 [ 74.085270][ T54] ? __pfx_kthread+0x10/0x10 [ 74.085279][ T54] ret_from_fork_asm+0x1a/0x30 [ 74.085297][ T54] [ 74.240458][ T54] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 74.243987][ T54] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 54, name: kworker/u4:4 [ 74.247710][ T54] preempt_count: 201, expected: 0 [ 74.250030][ T54] RCU nest depth: 0, expected: 0 [ 74.252100][ T54] INFO: lockdep is turned off. [ 74.254164][ T54] Preemption disabled at: [ 74.254171][ T54] [<0000000000000000>] 0x0 [ 74.258057][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u4:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.258072][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.258080][ T54] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 74.258100][ T54] Call Trace: [ 74.258108][ T54] [ 74.258113][ T54] dump_stack_lvl+0xe8/0x150 [ 74.258130][ T54] __might_resched+0x378/0x4d0 [ 74.258148][ T54] lock_sock_nested+0x5d/0x100 [ 74.258165][ T54] inet6_getname+0x1c8/0x740 [ 74.258183][ T54] ? __pfx_inet6_getname+0x10/0x10 [ 74.258198][ T54] rds_tcp_conn_slots_available+0x288/0x470 [ 74.258214][ T54] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 74.258230][ T54] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 74.258242][ T54] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 74.258255][ T54] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 74.258271][ T54] ? rds_send_worker+0x7d/0x2e0 [ 74.258281][ T54] ? process_scheduled_works+0xb02/0x1830 [ 74.258294][ T54] ? worker_thread+0xa50/0xfc0 [ 74.258307][ T54] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 74.258325][ T54] rds_recv_incoming+0x9f6/0x12d0 [ 74.258342][ T54] ? __pfx_rds_recv_incoming+0x10/0x10 [ 74.258357][ T54] ? skb_copy_bits+0x7e5/0x8f0 [ 74.258374][ T54] rds_tcp_data_recv+0x7f1/0xa40 [ 74.258392][ T54] __tcp_read_sock+0x196/0x970 [ 74.258407][ T54] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 74.258428][ T54] rds_tcp_data_ready+0x369/0x9a0 [ 74.258443][ T54] ? __pfx_sock_def_readable+0x10/0x10 [ 74.258456][ T54] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 74.258471][ T54] ? tcp_grow_window+0x4fc/0xc50 [ 74.258487][ T54] tcp_data_queue+0x1e2e/0x5e50 [ 74.258503][ T54] ? tcp_urg+0x106/0x410 [ 74.258513][ T54] ? __pfx_tcp_data_queue+0x10/0x10 [ 74.258525][ T54] ? __pfx_tcp_urg+0x10/0x10 [ 74.258536][ T54] ? kvm_clock_get_cycles+0x47/0x60 [ 74.258548][ T54] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 74.258582][ T54] tcp_rcv_established+0xf45/0x2740 [ 74.258597][ T54] ? __pfx_tcp_rcv_established+0x10/0x10 [ 74.258608][ T54] ? ip6_dst_check+0xb0/0x7e0 [ 74.258625][ T54] ? ip6_dst_check+0xe2/0x7e0 [ 74.258639][ T54] ? ip6_dst_check+0x5e3/0x7e0 [ 74.258653][ T54] ? __pfx_ip6_dst_check+0x10/0x10 [ 74.258667][ T54] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 74.258684][ T54] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 74.258696][ T54] __release_sock+0x1b8/0x3a0 [ 74.258709][ T54] release_sock+0x5f/0x1f0 [ 74.258723][ T54] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 74.258739][ T54] rds_send_xmit+0x207e/0x28d0 [ 74.258756][ T54] ? __pfx_rds_send_xmit+0x10/0x10 [ 74.258769][ T54] rds_send_worker+0x7d/0x2e0 [ 74.258780][ T54] ? process_scheduled_works+0xa25/0x1830 [ 74.258792][ T54] process_scheduled_works+0xb02/0x1830 [ 74.258810][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.258824][ T54] ? assign_work+0x3d5/0x5e0 [ 74.258837][ T54] worker_thread+0xa50/0xfc0 [ 74.258856][ T54] kthread+0x388/0x470 [ 74.258866][ T54] ? __pfx_worker_thread+0x10/0x10 [ 74.258879][ T54] ? __pfx_kthread+0x10/0x10 [ 74.258888][ T54] ret_from_fork+0x51e/0xb90 [ 74.258903][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 74.258915][ T54] ? __switch_to+0xc7d/0x1450 [ 74.258928][ T54] ? __pfx_kthread+0x10/0x10 [ 74.258938][ T54] ret_from_fork_asm+0x1a/0x30 [ 74.258956][ T54] [ 74.399109][ T54] BUG: scheduling while atomic: kworker/u4:4/54/0x00000202 [ 74.402300][ T54] INFO: lockdep is turned off. [ 74.404379][ T54] Modules linked in: [ 74.406154][ T54] Preemption disabled at: [ 74.406161][ T54] [<0000000000000000>] 0x0 [ 74.410137][ T54] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 74.413731][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u4:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.417651][ T54] Tainted: [W]=WARN [ 74.419256][ T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.423183][ T54] Workqueue: krds_cp_wq#1/0 rds_send_worker [ 74.425429][ T54] Call Trace: [ 74.426711][ T54] [ 74.428014][ T54] vpanic+0x56c/0xa60 [ 74.429766][ T54] ? __pfx_vpanic+0x10/0x10 [ 74.431711][ T54] ? rcu_is_watching+0x15/0xb0 [ 74.433818][ T54] panic+0xc5/0xd0 [ 74.435445][ T54] ? __pfx_panic+0x10/0x10 [ 74.437331][ T54] ? __pfx__printk+0x10/0x10 [ 74.439197][ T54] check_panic_on_warn+0x89/0xb0 [ 74.441509][ T54] __schedule_bug+0xf6/0x150 [ 74.443615][ T54] __schedule+0x16a9/0x5340 [ 74.445618][ T54] ? __wake_up_klogd+0xe6/0x120 [ 74.447815][ T54] ? vprintk_emit+0x4eb/0x560 [ 74.449755][ T54] ? __pfx_vprintk_emit+0x10/0x10 [ 74.451878][ T54] ? unwind_next_frame+0xa5/0x23c0 [ 74.453898][ T54] ? rcu_is_watching+0x15/0xb0 [ 74.456054][ T54] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.458344][ T54] ? __pfx___schedule+0x10/0x10 [ 74.464725][ T54] ? rcu_is_watching+0x15/0xb0 [ 74.466760][ T54] ? rcu_is_watching+0x15/0xb0 [ 74.468820][ T54] ? lock_release+0x4b/0x3d0 [ 74.470793][ T54] ? schedule+0x90/0x360 [ 74.472669][ T54] ? wq_worker_sleeping+0x63/0x250 [ 74.474928][ T54] schedule+0x164/0x360 [ 74.476665][ T54] __lock_sock+0x161/0x2c0 [ 74.478652][ T54] ? __pfx___lock_sock+0x10/0x10 [ 74.481032][ T54] ? do_raw_spin_lock+0x12b/0x2f0 [ 74.483342][ T54] ? __pfx_autoremove_wake_function+0x10/0x10 [ 74.486023][ T54] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.488445][ T54] ? lock_sock_nested+0x6a/0x100 [ 74.490626][ T54] lock_sock_nested+0x9f/0x100 [ 74.492712][ T54] inet6_getname+0x1c8/0x740 [ 74.494837][ T54] ? __pfx_inet6_getname+0x10/0x10 [ 74.497032][ T54] rds_tcp_conn_slots_available+0x288/0x470 [ 74.500402][ T54] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 74.503574][ T54] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 74.506344][ T54] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 74.509316][ T54] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 74.511557][ T54] ? rds_send_worker+0x7d/0x2e0 [ 74.513678][ T54] ? process_scheduled_works+0xb02/0x1830 [ 74.516154][ T54] ? worker_thread+0xa50/0xfc0 [ 74.518257][ T54] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 74.520685][ T54] rds_recv_incoming+0x9f6/0x12d0 [ 74.522910][ T54] ? __pfx_rds_recv_incoming+0x10/0x10 [ 74.525212][ T54] ? skb_copy_bits+0x7e5/0x8f0 [ 74.527316][ T54] rds_tcp_data_recv+0x7f1/0xa40 [ 74.529536][ T54] __tcp_read_sock+0x196/0x970 [ 74.531671][ T54] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 74.534106][ T54] rds_tcp_data_ready+0x369/0x9a0 [ 74.536318][ T54] ? __pfx_sock_def_readable+0x10/0x10 [ 74.538758][ T54] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 74.541091][ T54] ? tcp_grow_window+0x4fc/0xc50 [ 74.543269][ T54] tcp_data_queue+0x1e2e/0x5e50 [ 74.545383][ T54] ? tcp_urg+0x106/0x410 [ 74.547192][ T54] ? __pfx_tcp_data_queue+0x10/0x10 [ 74.549607][ T54] ? __pfx_tcp_urg+0x10/0x10 [ 74.551678][ T54] ? kvm_clock_get_cycles+0x47/0x60 [ 74.554007][ T54] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 74.556500][ T54] tcp_rcv_established+0xf45/0x2740 [ 74.558900][ T54] ? __pfx_tcp_rcv_established+0x10/0x10 [ 74.561627][ T54] ? ip6_dst_check+0xb0/0x7e0 [ 74.563815][ T54] ? ip6_dst_check+0xe2/0x7e0 [ 74.565886][ T54] ? ip6_dst_check+0x5e3/0x7e0 [ 74.567960][ T54] ? __pfx_ip6_dst_check+0x10/0x10 [ 74.570204][ T54] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 74.572107][ T54] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 74.574487][ T54] __release_sock+0x1b8/0x3a0 [ 74.576604][ T54] release_sock+0x5f/0x1f0 [ 74.578610][ T54] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 74.581470][ T54] rds_send_xmit+0x207e/0x28d0 [ 74.583727][ T54] ? __pfx_rds_send_xmit+0x10/0x10 [ 74.586096][ T54] rds_send_worker+0x7d/0x2e0 [ 74.588168][ T54] ? process_scheduled_works+0xa25/0x1830 [ 74.590769][ T54] process_scheduled_works+0xb02/0x1830 [ 74.593386][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.595961][ T54] ? assign_work+0x3d5/0x5e0 [ 74.598019][ T54] worker_thread+0xa50/0xfc0 [ 74.600058][ T54] kthread+0x388/0x470 [ 74.601891][ T54] ? __pfx_worker_thread+0x10/0x10 [ 74.604124][ T54] ? __pfx_kthread+0x10/0x10 [ 74.606203][ T54] ret_from_fork+0x51e/0xb90 [ 74.608255][ T54] ? __pfx_ret_from_fork+0x10/0x10 [ 74.610640][ T54] ? __switch_to+0xc7d/0x1450 [ 74.612680][ T54] ? __pfx_kthread+0x10/0x10 [ 74.614716][ T54] ret_from_fork_asm+0x1a/0x30 [ 74.616853][ T54] [ 74.618525][ T54] Kernel Offset: disabled [ 74.620376][ T54] Rebooting in 86400 seconds..