BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591
in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 6919, name: udevd
preempt_count: 103, expected: 0
RCU nest depth: 1, expected: 0
4 locks held by udevd/6919:
 #0: ffff8881bc0046b0 (&lockref->lock){+.+.}-{3:3}, at: __dentry_kill+0x265/0x5d0
 #1: ffffffff8e75d000 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x95/0x2380
 #2: ffff88810ed32850 (&gi->spinlock){..-.}-{3:3}, at: configfs_composite_setup+0x61/0x100
 #3: ffff88810ed326e8 (&cdev->lock){..-.}-{3:3}, at: composite_setup+0x1d9a/0x3460
irq event stamp: 473803
hardirqs last  enabled at (473802): [<ffffffff8bb152c0>] _raw_spin_unlock_irqrestore+0x30/0x80
hardirqs last disabled at (473803): [<ffffffff8bb1511a>] _raw_spin_lock_irqsave+0x1a/0x60
softirqs last  enabled at (473748): [<ffffffff897f7169>] __alloc_skb+0x189/0x7a0
softirqs last disabled at (473799): [<ffffffff81878e1f>] __irq_exit_rcu+0x5f/0x150
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 UID: 0 PID: 6919 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150
 __might_resched+0x378/0x4d0
 __mutex_lock+0x116/0x12d0
 ncm_set_alt+0x153/0xba0
 set_config+0x749/0x1160
 composite_setup+0x1da5/0x3460
 configfs_composite_setup+0xc7/0x100
 dummy_timer+0x2e72/0x4b60
 __hrtimer_run_queues+0x527/0xc90
 hrtimer_run_softirq+0x182/0x580
 handle_softirqs+0x225/0x870
 __irq_exit_rcu+0x5f/0x150
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:debug_lockdep_rcu_enabled+0x2c/0x40
Code: 1e fa 31 c0 83 3d c3 d0 62 04 00 74 1d 83 3d aa 02 63 04 00 74 14 65 48 8b 0d b8 27 6e 07 31 c0 83 b9 54 0b 00 00 00 0f 94 c0 <e9> ff e2 02 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90
RSP: 0018:ffffc9000935f2b8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffc9000935f378 RCX: ffff888110bfd880
RDX: ffffc9000935f301 RSI: dffffc0000000000 RDI: ffffc9000935f370
RBP: ffffc9000935f801 R08: ffffc9000935f800 R09: 0000000000000000
R10: ffffc9000935f3b8 R11: fffff5200126be79 R12: ffffc90009358000
R13: ffffffff8176ca75 R14: ffffc9000935f368 R15: ffffc9000935f810
 unwind_next_frame+0x1a43/0x2380
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_stack+0x3e/0x60
 kasan_record_aux_stack+0xbd/0xd0
 call_rcu+0xee/0x8b0
 __dentry_kill+0x460/0x5d0
 finish_dput+0xca/0x490
 lookup_fast+0x3d0/0x5d0
 link_path_walk+0x71f/0x1910
 path_openat+0x2c6/0x3890
 do_file_open+0x23e/0x4a0
 do_sys_openat2+0x113/0x200
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0x170/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f721d3169a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007fff4c9435e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f721d3169a4
RDX: 0000000000080000 RSI: 00007fff4c943718 RDI: 00000000ffffff9c
RBP: 00007fff4c943718 R08: 0000000000000008 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 000056534e497b42 R14: 0000000000000001 R15: 000056534e4b3160
 </TASK>

=============================
[ BUG: Invalid wait context ]
syzkaller #0 Tainted: G        W          
-----------------------------
udevd/6919 is trying to lock:
ffff888111f4ea18 (&opts->lock#2){+.+.}-{4:4}, at: ncm_set_alt+0x153/0xba0
other info that might help us debug this:
context-{3:3}
4 locks held by udevd/6919:
 #0: ffff8881bc0046b0 (&lockref->lock){+.+.}-{3:3}, at: __dentry_kill+0x265/0x5d0
 #1: ffffffff8e75d000 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x95/0x2380
 #2: ffff88810ed32850 (&gi->spinlock){..-.}-{3:3}, at: configfs_composite_setup+0x61/0x100
 #3: ffff88810ed326e8 (&cdev->lock){..-.}-{3:3}, at: composite_setup+0x1d9a/0x3460
stack backtrace:
CPU: 0 UID: 0 PID: 6919 Comm: udevd Tainted: G        W           syzkaller #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
Call Trace:
 <IRQ>
 dump_stack_lvl+0xe8/0x150
 __lock_acquire+0xe39/0x2cd0
 lock_acquire+0xf0/0x2e0
 __mutex_lock+0x199/0x12d0
 ncm_set_alt+0x153/0xba0
 set_config+0x749/0x1160
 composite_setup+0x1da5/0x3460
 configfs_composite_setup+0xc7/0x100
 dummy_timer+0x2e72/0x4b60
 __hrtimer_run_queues+0x527/0xc90
 hrtimer_run_softirq+0x182/0x580
 handle_softirqs+0x225/0x870
 __irq_exit_rcu+0x5f/0x150
 irq_exit_rcu+0x9/0x30
 sysvec_apic_timer_interrupt+0xa6/0xc0
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20
RIP: 0010:debug_lockdep_rcu_enabled+0x2c/0x40
Code: 1e fa 31 c0 83 3d c3 d0 62 04 00 74 1d 83 3d aa 02 63 04 00 74 14 65 48 8b 0d b8 27 6e 07 31 c0 83 b9 54 0b 00 00 00 0f 94 c0 <e9> ff e2 02 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90
RSP: 0018:ffffc9000935f2b8 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffffc9000935f378 RCX: ffff888110bfd880
RDX: ffffc9000935f301 RSI: dffffc0000000000 RDI: ffffc9000935f370
RBP: ffffc9000935f801 R08: ffffc9000935f800 R09: 0000000000000000
R10: ffffc9000935f3b8 R11: fffff5200126be79 R12: ffffc90009358000
R13: ffffffff8176ca75 R14: ffffc9000935f368 R15: ffffc9000935f810
 unwind_next_frame+0x1a43/0x2380
 arch_stack_walk+0x11b/0x150
 stack_trace_save+0xa9/0x100
 kasan_save_stack+0x3e/0x60
 kasan_record_aux_stack+0xbd/0xd0
 call_rcu+0xee/0x8b0
 __dentry_kill+0x460/0x5d0
 finish_dput+0xca/0x490
 lookup_fast+0x3d0/0x5d0
 link_path_walk+0x71f/0x1910
 path_openat+0x2c6/0x3890
 do_file_open+0x23e/0x4a0
 do_sys_openat2+0x113/0x200
 __x64_sys_openat+0x138/0x170
 do_syscall_64+0x170/0xf80
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f721d3169a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007fff4c9435e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f721d3169a4
RDX: 0000000000080000 RSI: 00007fff4c943718 RDI: 00000000ffffff9c
RBP: 00007fff4c943718 R08: 0000000000000008 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 000056534e497b42 R14: 0000000000000001 R15: 000056534e4b3160
 </TASK>
