Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. executing program syzkaller login: [ 55.044542][ T3543] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274 [ 55.054212][ T3543] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3543, name: syz-executor999 [ 55.063726][ T3543] preempt_count: 201, expected: 0 [ 55.068748][ T3543] RCU nest depth: 0, expected: 0 [ 55.073705][ T3543] 2 locks held by syz-executor999/3543: [ 55.079243][ T3543] #0: ffffffff8e0976e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x720/0xf00 [ 55.088720][ T3543] #1: ffff88807e52a908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 55.098029][ T3543] Preemption disabled at: [ 55.098039][ T3543] [<0000000000000000>] 0x0 [ 55.106846][ T3543] CPU: 0 PID: 3543 Comm: syz-executor999 Not tainted 6.1.39-syzkaller #0 [ 55.115257][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 55.125310][ T3543] Call Trace: [ 55.128585][ T3543] [ 55.131515][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 55.136215][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 55.141699][ T3543] ? panic+0x75d/0x75d [ 55.145780][ T3543] __might_resched+0x5cb/0x780 [ 55.150566][ T3543] ? __might_sleep+0xb0/0xb0 [ 55.155175][ T3543] slab_pre_alloc_hook+0x4a/0x2a0 [ 55.160217][ T3543] ? kvmalloc_node+0x6e/0x180 [ 55.164906][ T3543] __kmem_cache_alloc_node+0x47/0x260 [ 55.170295][ T3543] ? kvmalloc_node+0x6e/0x180 [ 55.174980][ T3543] __kmalloc_node+0xa2/0x230 [ 55.179579][ T3543] kvmalloc_node+0x6e/0x180 [ 55.184091][ T3543] get_dist_table+0x91/0x380 [ 55.188700][ T3543] netem_change+0x9a0/0x1ea0 [ 55.193316][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 55.199310][ T3543] ? netem_destroy+0xb0/0xb0 [ 55.203916][ T3543] ? do_raw_spin_unlock+0x137/0x8a0 [ 55.209127][ T3543] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 55.215036][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 55.220255][ T3543] ? memset+0x1f/0x40 [ 55.224249][ T3543] ? __hrtimer_init+0x181/0x260 [ 55.229118][ T3543] netem_init+0x58/0xb0 [ 55.233293][ T3543] ? qdisc_peek_dequeued+0x220/0x220 [ 55.238587][ T3543] qdisc_create+0x8a1/0x1220 [ 55.243205][ T3543] ? qdisc_notify+0x390/0x390 [ 55.247900][ T3543] tc_modify_qdisc+0x9e0/0x1da0 [ 55.252774][ T3543] ? rcu_lock_release+0x20/0x20 [ 55.257659][ T3543] ? rcu_lock_release+0x20/0x20 [ 55.262518][ T3543] rtnetlink_rcv_msg+0x776/0xf00 [ 55.267479][ T3543] ? rtnetlink_bind+0x80/0x80 [ 55.272162][ T3543] ? stack_trace_save+0x1c0/0x1c0 [ 55.277195][ T3543] ? kernel_text_address+0x9f/0xd0 [ 55.282322][ T3543] ? __kernel_text_address+0x9/0x40 [ 55.287533][ T3543] ? unwind_get_return_address+0x49/0x80 [ 55.293177][ T3543] ? arch_stack_walk+0xf3/0x140 [ 55.298047][ T3543] ? mark_lock+0x9a/0x340 [ 55.302397][ T3543] ? mark_lock+0x9a/0x340 [ 55.306737][ T3543] ? __lock_acquire+0x125b/0x1f80 [ 55.311796][ T3543] netlink_rcv_skb+0x1cd/0x410 [ 55.316582][ T3543] ? rtnetlink_bind+0x80/0x80 [ 55.321270][ T3543] ? netlink_ack+0xe60/0xe60 [ 55.325877][ T3543] netlink_unicast+0x7bf/0x990 [ 55.330652][ T3543] ? netlink_detachskb+0x90/0x90 [ 55.335596][ T3543] ? __virt_addr_valid+0x22b/0x2e0 [ 55.340724][ T3543] ? __phys_addr_symbol+0x2b/0x70 [ 55.345774][ T3543] ? __check_object_size+0x4dd/0xa30 [ 55.351076][ T3543] ? bpf_lsm_netlink_send+0x5/0x10 [ 55.356209][ T3543] netlink_sendmsg+0xa26/0xd60 [ 55.360990][ T3543] ? netlink_getsockopt+0x5b0/0x5b0 [ 55.366196][ T3543] ? aa_sock_msg_perm+0x91/0x150 [ 55.371139][ T3543] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 55.376442][ T3543] ? security_socket_sendmsg+0x7d/0xa0 [ 55.381915][ T3543] ? netlink_getsockopt+0x5b0/0x5b0 [ 55.387142][ T3543] ____sys_sendmsg+0x59e/0x8f0 [ 55.391937][ T3543] ? __sys_sendmsg_sock+0x30/0x30 [ 55.397011][ T3543] __sys_sendmsg+0x2a9/0x390 [ 55.401626][ T3543] ? ____sys_sendmsg+0x8f0/0x8f0 [ 55.406619][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 55.412626][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 55.418613][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 55.423817][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 55.429804][ T3543] do_syscall_64+0x3d/0xb0 [ 55.434229][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.440130][ T3543] RIP: 0033:0x7ff6b511b4e9 [ 55.444560][ T3543] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.464169][ T3543] RSP: 002b:00007ffea8e1c3a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.472597][ T3543] RAX: ffffffffffffffda RBX: 00007ffea8e1c578 RCX: 00007ff6b511b4e9 [ 55.480588][ T3543] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 55.488562][ T3543] RBP: 00007ff6b518e610 R08: 00000000ffffffff R09: 00007ffea8e1c578 [ 55.496553][ T3543] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 55.504526][ T3543] R13: 00007ffea8e1c568 R14: 0000000000000001 R15: 0000000000000001 [ 55.512531][ T3543] [ 55.516024][ T3543] [ 55.518362][ T3543] ============================================ [ 55.524507][ T3543] WARNING: possible recursive locking detected [ 55.530649][ T3543] 6.1.39-syzkaller #0 Tainted: G W [ 55.537135][ T3543] -------------------------------------------- [ 55.543294][ T3543] syz-executor999/3543 is trying to acquire lock: [ 55.549700][ T3543] ffff88807e52a908 (&sch->q.lock){+...}-{2:2}, at: get_dist_table+0x254/0x380 [ 55.558577][ T3543] [ 55.558577][ T3543] but task is already holding lock: [ 55.565932][ T3543] ffff88807e52a908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 55.574711][ T3543] [ 55.574711][ T3543] other info that might help us debug this: [ 55.582844][ T3543] Possible unsafe locking scenario: [ 55.582844][ T3543] [ 55.590281][ T3543] CPU0 [ 55.593591][ T3543] ---- [ 55.596862][ T3543] lock(&sch->q.lock); [ 55.601010][ T3543] lock(&sch->q.lock); [ 55.605159][ T3543] [ 55.605159][ T3543] *** DEADLOCK *** [ 55.605159][ T3543] [ 55.613302][ T3543] May be due to missing lock nesting notation [ 55.613302][ T3543] [ 55.621607][ T3543] 2 locks held by syz-executor999/3543: [ 55.627144][ T3543] #0: ffffffff8e0976e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x720/0xf00 [ 55.636596][ T3543] #1: ffff88807e52a908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 55.645828][ T3543] [ 55.645828][ T3543] stack backtrace: [ 55.651710][ T3543] CPU: 0 PID: 3543 Comm: syz-executor999 Tainted: G W 6.1.39-syzkaller #0 [ 55.661608][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 55.671668][ T3543] Call Trace: [ 55.674947][ T3543] [ 55.677885][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 55.682581][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 55.688054][ T3543] ? panic+0x75d/0x75d [ 55.692131][ T3543] validate_chain+0x4726/0x58e0 [ 55.696994][ T3543] ? kfence_guarded_alloc+0x98c/0xe40 [ 55.702383][ T3543] ? reacquire_held_locks+0x660/0x660 [ 55.707766][ T3543] ? get_alloc_stack_hash+0x2cd/0x6e0 [ 55.713144][ T3543] ? __kfence_alloc+0x340/0x370 [ 55.717995][ T3543] ? kfence_guarded_free+0x7f0/0x7f0 [ 55.723284][ T3543] ? __kfence_alloc+0x261/0x370 [ 55.728140][ T3543] ? __kmem_cache_alloc_node+0x1fa/0x260 [ 55.733774][ T3543] ? __kmalloc_node+0xa2/0x230 [ 55.738536][ T3543] ? kvmalloc_node+0x6e/0x180 [ 55.743219][ T3543] ? get_dist_table+0x91/0x380 [ 55.748772][ T3543] ? netem_change+0x9a0/0x1ea0 [ 55.753550][ T3543] ? netem_init+0x58/0xb0 [ 55.757895][ T3543] ? qdisc_create+0x8a1/0x1220 [ 55.762674][ T3543] ? tc_modify_qdisc+0x9e0/0x1da0 [ 55.767739][ T3543] ? rtnetlink_rcv_msg+0x776/0xf00 [ 55.772851][ T3543] ? netlink_rcv_skb+0x1cd/0x410 [ 55.777791][ T3543] ? netlink_unicast+0x7bf/0x990 [ 55.782730][ T3543] ? netlink_sendmsg+0xa26/0xd60 [ 55.787672][ T3543] ? ____sys_sendmsg+0x59e/0x8f0 [ 55.792621][ T3543] ? __sys_sendmsg+0x2a9/0x390 [ 55.797398][ T3543] ? do_syscall_64+0x3d/0xb0 [ 55.801995][ T3543] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.808075][ T3543] ? mark_lock+0x9a/0x340 [ 55.812411][ T3543] __lock_acquire+0x125b/0x1f80 [ 55.817274][ T3543] lock_acquire+0x1f8/0x5a0 [ 55.821785][ T3543] ? get_dist_table+0x254/0x380 [ 55.826651][ T3543] ? read_lock_is_recursive+0x10/0x10 [ 55.832028][ T3543] ? kvmalloc_node+0x6e/0x180 [ 55.836709][ T3543] ? get_dist_table+0x254/0x380 [ 55.841574][ T3543] ? __bpf_trace_softirq+0x10/0x10 [ 55.846688][ T3543] ? kvmalloc_node+0x6e/0x180 [ 55.851369][ T3543] ? get_dist_table+0x254/0x380 [ 55.856254][ T3543] _raw_spin_lock_bh+0x31/0x40 [ 55.861024][ T3543] ? get_dist_table+0x254/0x380 [ 55.865886][ T3543] get_dist_table+0x254/0x380 [ 55.870578][ T3543] netem_change+0x9a0/0x1ea0 [ 55.875185][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 55.881168][ T3543] ? netem_destroy+0xb0/0xb0 [ 55.885771][ T3543] ? do_raw_spin_unlock+0x137/0x8a0 [ 55.890976][ T3543] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 55.896873][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 55.902086][ T3543] ? memset+0x1f/0x40 [ 55.906072][ T3543] ? __hrtimer_init+0x181/0x260 [ 55.910936][ T3543] netem_init+0x58/0xb0 [ 55.915098][ T3543] ? qdisc_peek_dequeued+0x220/0x220 [ 55.920388][ T3543] qdisc_create+0x8a1/0x1220 [ 55.924991][ T3543] ? qdisc_notify+0x390/0x390 [ 55.929680][ T3543] tc_modify_qdisc+0x9e0/0x1da0 [ 55.934542][ T3543] ? rcu_lock_release+0x20/0x20 [ 55.939426][ T3543] ? rcu_lock_release+0x20/0x20 [ 55.944282][ T3543] rtnetlink_rcv_msg+0x776/0xf00 [ 55.949231][ T3543] ? rtnetlink_bind+0x80/0x80 [ 55.953913][ T3543] ? stack_trace_save+0x1c0/0x1c0 [ 55.958937][ T3543] ? kernel_text_address+0x9f/0xd0 [ 55.964062][ T3543] ? __kernel_text_address+0x9/0x40 [ 55.969291][ T3543] ? unwind_get_return_address+0x49/0x80 [ 55.974932][ T3543] ? arch_stack_walk+0xf3/0x140 [ 55.979802][ T3543] ? mark_lock+0x9a/0x340 [ 55.984137][ T3543] ? mark_lock+0x9a/0x340 [ 55.988473][ T3543] ? __lock_acquire+0x125b/0x1f80 [ 55.993514][ T3543] netlink_rcv_skb+0x1cd/0x410 [ 55.998287][ T3543] ? rtnetlink_bind+0x80/0x80 [ 56.002968][ T3543] ? netlink_ack+0xe60/0xe60 [ 56.007570][ T3543] netlink_unicast+0x7bf/0x990 [ 56.012340][ T3543] ? netlink_detachskb+0x90/0x90 [ 56.017277][ T3543] ? __virt_addr_valid+0x22b/0x2e0 [ 56.022397][ T3543] ? __phys_addr_symbol+0x2b/0x70 [ 56.027430][ T3543] ? __check_object_size+0x4dd/0xa30 [ 56.032747][ T3543] ? bpf_lsm_netlink_send+0x5/0x10 [ 56.037875][ T3543] netlink_sendmsg+0xa26/0xd60 [ 56.042681][ T3543] ? netlink_getsockopt+0x5b0/0x5b0 [ 56.047898][ T3543] ? aa_sock_msg_perm+0x91/0x150 [ 56.052846][ T3543] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 56.058160][ T3543] ? security_socket_sendmsg+0x7d/0xa0 [ 56.063641][ T3543] ? netlink_getsockopt+0x5b0/0x5b0 [ 56.068941][ T3543] ____sys_sendmsg+0x59e/0x8f0 [ 56.073727][ T3543] ? __sys_sendmsg_sock+0x30/0x30 [ 56.078787][ T3543] __sys_sendmsg+0x2a9/0x390 [ 56.083393][ T3543] ? ____sys_sendmsg+0x8f0/0x8f0 [ 56.088355][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 56.094347][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 56.100336][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 56.105539][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 56.111526][ T3543] do_syscall_64+0x3d/0xb0 [ 56.115954][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.121855][ T3543] RIP: 0033:0x7ff6b511b4e9 [ 56.126271][ T3543] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.145877][ T3543] RSP: 002b:00007ffea8e1c3a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.154289][ T3543] RAX: ffffffffffffffda RBX: 00007ffea8e1c578 RCX: 00007ff6b511b4e9 [ 56.162347][ T3543] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 56.170319][ T3543] RBP: 00007ff6b518e610 R08: 00000000ffffffff R09: 00007ffea8e1c578 [ 56.178375][ T3543] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 56.186346][ T3543] R13: 00007ffea8e1c568 R14: 0000000000000001 R15: 0000000000000001 [ 56.194323][ T3543]