Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. executing program [ 50.802233][ T3487] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:209 [ 50.815827][ T3487] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3487, name: syz-executor771 [ 50.836722][ T3487] 2 locks held by syz-executor771/3487: [ 50.844612][ T3487] #0: ffffffff8d9e1148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 50.857716][ T3487] #1: ffff88801dcfc108 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x257/0x20c0 [ 50.874808][ T3487] Preemption disabled at: [ 50.874818][ T3487] [<0000000000000000>] 0x0 [ 50.884924][ T3487] CPU: 1 PID: 3487 Comm: syz-executor771 Not tainted 5.15.126-syzkaller #0 [ 50.895044][ T3487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 50.906355][ T3487] Call Trace: [ 50.910100][ T3487] [ 50.913174][ T3487] dump_stack_lvl+0x1e3/0x2cb [ 50.919188][ T3487] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 50.925600][ T3487] ? panic+0x84d/0x84d [ 50.930107][ T3487] ___might_sleep+0x547/0x6a0 [ 50.935008][ T3487] ? __might_sleep+0xc0/0xc0 [ 50.939864][ T3487] slab_pre_alloc_hook+0x44/0xc0 [ 50.947704][ T3487] __kmalloc_node+0x71/0x390 [ 50.952970][ T3487] ? kvmalloc_node+0x80/0x140 [ 50.959072][ T3487] ? __bpf_trace_softirq+0x10/0x10 [ 50.964667][ T3487] kvmalloc_node+0x80/0x140 [ 50.969716][ T3487] get_dist_table+0x83/0x2c0 [ 50.975162][ T3487] netem_change+0xa05/0x20c0 [ 50.980699][ T3487] ? netem_destroy+0xb0/0xb0 [ 50.987506][ T3487] ? debug_object_init+0x10/0x10 [ 50.993637][ T3487] ? memset+0x1f/0x40 [ 50.997741][ T3487] ? lockdep_init_map_type+0x9d/0x8d0 [ 51.003199][ T3487] ? memset+0x1f/0x40 [ 51.007477][ T3487] ? __hrtimer_init+0x181/0x260 [ 51.012329][ T3487] netem_init+0x58/0xb0 [ 51.016651][ T3487] ? qdisc_peek_dequeued+0x220/0x220 [ 51.022344][ T3487] qdisc_create+0x8ae/0x1390 [ 51.027281][ T3487] ? qdisc_notify+0x380/0x380 [ 51.032237][ T3487] ? apparmor_capable+0x12e/0x190 [ 51.037533][ T3487] tc_modify_qdisc+0xac5/0x1710 [ 51.042686][ T3487] ? rcu_lock_release+0x20/0x20 [ 51.048778][ T3487] ? rcu_lock_release+0x20/0x20 [ 51.054355][ T3487] rtnetlink_rcv_msg+0x993/0xee0 [ 51.060504][ T3487] ? reacquire_held_locks+0x660/0x660 [ 51.066080][ T3487] ? rtnetlink_bind+0x80/0x80 [ 51.070939][ T3487] ? is_bpf_text_address+0x24f/0x260 [ 51.076924][ T3487] ? stack_trace_save+0x1c0/0x1c0 [ 51.082163][ T3487] ? __kernel_text_address+0x94/0x100 [ 51.089008][ T3487] ? unwind_get_return_address+0x49/0x80 [ 51.094877][ T3487] ? arch_stack_walk+0xf3/0x140 [ 51.100125][ T3487] ? mark_lock+0x98/0x340 [ 51.105029][ T3487] ? mark_lock+0x98/0x340 [ 51.109968][ T3487] ? __lock_acquire+0x1295/0x1ff0 [ 51.115859][ T3487] netlink_rcv_skb+0x1cf/0x410 [ 51.120837][ T3487] ? rtnetlink_bind+0x80/0x80 [ 51.126167][ T3487] ? netlink_ack+0xb10/0xb10 [ 51.130972][ T3487] netlink_unicast+0x7b6/0x980 [ 51.135856][ T3487] ? netlink_detachskb+0x90/0x90 [ 51.140816][ T3487] ? 0xffffffff81000000 [ 51.145110][ T3487] ? __check_object_size+0x300/0x410 [ 51.150698][ T3487] ? bpf_lsm_netlink_send+0x5/0x10 [ 51.156708][ T3487] netlink_sendmsg+0xa30/0xd60 [ 51.161836][ T3487] ? netlink_getsockopt+0x5b0/0x5b0 [ 51.167160][ T3487] ? aa_sock_msg_perm+0x91/0x150 [ 51.172317][ T3487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 51.177705][ T3487] ? security_socket_sendmsg+0x7d/0xa0 [ 51.183167][ T3487] ? netlink_getsockopt+0x5b0/0x5b0 [ 51.188793][ T3487] ____sys_sendmsg+0x59e/0x8f0 [ 51.193585][ T3487] ? iovec_from_user+0x300/0x390 [ 51.198651][ T3487] ? __sys_sendmsg_sock+0x30/0x30 [ 51.203885][ T3487] ___sys_sendmsg+0x252/0x2e0 [ 51.208587][ T3487] ? __sys_sendmsg+0x260/0x260 [ 51.213568][ T3487] ? __lock_acquire+0x1295/0x1ff0 [ 51.218714][ T3487] ? __context_tracking_enter+0x5f/0x90 [ 51.224536][ T3487] ? __context_tracking_exit+0x4c/0x80 [ 51.230027][ T3487] ? __fdget+0x158/0x220 [ 51.234525][ T3487] __se_sys_sendmsg+0x19a/0x260 [ 51.239399][ T3487] ? __x64_sys_sendmsg+0x80/0x80 [ 51.244649][ T3487] ? syscall_enter_from_user_mode+0x2e/0x230 [ 51.250636][ T3487] ? lockdep_hardirqs_on+0x94/0x130 [ 51.256006][ T3487] ? syscall_enter_from_user_mode+0x2e/0x230 [ 51.262139][ T3487] do_syscall_64+0x3d/0xb0 [ 51.266572][ T3487] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.272855][ T3487] RIP: 0033:0x7fcdfcf084e9 [ 51.277282][ T3487] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.297711][ T3487] RSP: 002b:00007ffe33c996b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.306437][ T3487] RAX: ffffffffffffffda RBX: 00007ffe33c99888 RCX: 00007fcdfcf084e9 [ 51.314618][ T3487] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 51.322783][ T3487] RBP: 00007fcdfcf7b610 R08: 00000000ffffffff R09: 00007ffe33c99888 [ 51.331466][ T3487] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 51.339440][ T3487] R13: 00007ffe33c99878 R14: 0000000000000001 R15: 0000000000000001 [ 51.347600][ T3487] [ 51.351583][ T3487] [ 51.354200][ T3487] ============================================ [ 51.360350][ T3487] WARNING: possible recursive locking detected [ 51.366673][ T3487] 5.15.126-syzkaller #0 Tainted: G W [ 51.373558][ T3487] -------------------------------------------- [ 51.380281][ T3487] syz-executor771/3487 is trying to acquire lock: [ 51.386869][ T3487] ffff88801dcfc108 (&sch->q.lock){+...}-{2:2}, at: get_dist_table+0x1fa/0x2c0 [ 51.396168][ T3487] [ 51.396168][ T3487] but task is already holding lock: [ 51.404600][ T3487] ffff88801dcfc108 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x257/0x20c0 [ 51.413661][ T3487] [ 51.413661][ T3487] other info that might help us debug this: [ 51.421939][ T3487] Possible unsafe locking scenario: [ 51.421939][ T3487] [ 51.430017][ T3487] CPU0 [ 51.433431][ T3487] ---- [ 51.436877][ T3487] lock(&sch->q.lock); [ 51.441023][ T3487] lock(&sch->q.lock); [ 51.445310][ T3487] [ 51.445310][ T3487] *** DEADLOCK *** [ 51.445310][ T3487] [ 51.454179][ T3487] May be due to missing lock nesting notation [ 51.454179][ T3487] [ 51.462492][ T3487] 2 locks held by syz-executor771/3487: [ 51.468188][ T3487] #0: ffffffff8d9e1148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 51.477881][ T3487] #1: ffff88801dcfc108 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x257/0x20c0 [ 51.487478][ T3487] [ 51.487478][ T3487] stack backtrace: [ 51.493498][ T3487] CPU: 1 PID: 3487 Comm: syz-executor771 Tainted: G W 5.15.126-syzkaller #0 [ 51.503996][ T3487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 51.516186][ T3487] Call Trace: [ 51.519544][ T3487] [ 51.523782][ T3487] dump_stack_lvl+0x1e3/0x2cb [ 51.529364][ T3487] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 51.535696][ T3487] ? panic+0x84d/0x84d [ 51.540176][ T3487] validate_chain+0x46cf/0x58b0 [ 51.545033][ T3487] ? do_raw_spin_unlock+0x137/0x8b0 [ 51.550331][ T3487] ? reacquire_held_locks+0x660/0x660 [ 51.555939][ T3487] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 51.562020][ T3487] ? _raw_spin_unlock+0x40/0x40 [ 51.567128][ T3487] ? stack_trace_save+0x113/0x1c0 [ 51.572439][ T3487] ? asm_common_interrupt+0x22/0x40 [ 51.577976][ T3487] ? stack_trace_snprint+0xe0/0xe0 [ 51.583165][ T3487] ? stack_depot_save+0x3db/0x440 [ 51.588868][ T3487] ? ____kasan_kmalloc+0xd1/0xf0 [ 51.594001][ T3487] ? mark_lock+0x98/0x340 [ 51.598325][ T3487] ? qdisc_create+0x8ae/0x1390 [ 51.603442][ T3487] __lock_acquire+0x1295/0x1ff0 [ 51.608510][ T3487] lock_acquire+0x1db/0x4f0 [ 51.613181][ T3487] ? get_dist_table+0x1fa/0x2c0 [ 51.618826][ T3487] ? read_lock_is_recursive+0x10/0x10 [ 51.624687][ T3487] ? get_dist_table+0x1fa/0x2c0 [ 51.629950][ T3487] ? __bpf_trace_softirq+0x10/0x10 [ 51.635430][ T3487] ? __kmalloc_node+0x199/0x390 [ 51.640397][ T3487] ? kvmalloc_node+0x80/0x140 [ 51.645292][ T3487] ? __bpf_trace_softirq+0x10/0x10 [ 51.650804][ T3487] ? get_dist_table+0x1fa/0x2c0 [ 51.655859][ T3487] _raw_spin_lock_bh+0x31/0x40 [ 51.660916][ T3487] ? get_dist_table+0x1fa/0x2c0 [ 51.665790][ T3487] get_dist_table+0x1fa/0x2c0 [ 51.670563][ T3487] netem_change+0xa05/0x20c0 [ 51.675539][ T3487] ? netem_destroy+0xb0/0xb0 [ 51.680605][ T3487] ? debug_object_init+0x10/0x10 [ 51.685911][ T3487] ? memset+0x1f/0x40 [ 51.690030][ T3487] ? lockdep_init_map_type+0x9d/0x8d0 [ 51.695567][ T3487] ? memset+0x1f/0x40 [ 51.699642][ T3487] ? __hrtimer_init+0x181/0x260 [ 51.706105][ T3487] netem_init+0x58/0xb0 [ 51.710767][ T3487] ? qdisc_peek_dequeued+0x220/0x220 [ 51.716137][ T3487] qdisc_create+0x8ae/0x1390 [ 51.720861][ T3487] ? qdisc_notify+0x380/0x380 [ 51.726326][ T3487] ? apparmor_capable+0x12e/0x190 [ 51.731546][ T3487] tc_modify_qdisc+0xac5/0x1710 [ 51.736517][ T3487] ? rcu_lock_release+0x20/0x20 [ 51.741813][ T3487] ? rcu_lock_release+0x20/0x20 [ 51.749771][ T3487] rtnetlink_rcv_msg+0x993/0xee0 [ 51.756432][ T3487] ? reacquire_held_locks+0x660/0x660 [ 51.762814][ T3487] ? rtnetlink_bind+0x80/0x80 [ 51.768137][ T3487] ? is_bpf_text_address+0x24f/0x260 [ 51.773758][ T3487] ? stack_trace_save+0x1c0/0x1c0 [ 51.778949][ T3487] ? __kernel_text_address+0x94/0x100 [ 51.785444][ T3487] ? unwind_get_return_address+0x49/0x80 [ 51.791563][ T3487] ? arch_stack_walk+0xf3/0x140 [ 51.796497][ T3487] ? mark_lock+0x98/0x340 [ 51.801190][ T3487] ? mark_lock+0x98/0x340 [ 51.806448][ T3487] ? __lock_acquire+0x1295/0x1ff0 [ 51.812084][ T3487] netlink_rcv_skb+0x1cf/0x410 [ 51.816865][ T3487] ? rtnetlink_bind+0x80/0x80 [ 51.821958][ T3487] ? netlink_ack+0xb10/0xb10 [ 51.827002][ T3487] netlink_unicast+0x7b6/0x980 [ 51.831904][ T3487] ? netlink_detachskb+0x90/0x90 [ 51.836981][ T3487] ? 0xffffffff81000000 [ 51.841341][ T3487] ? __check_object_size+0x300/0x410 [ 51.846770][ T3487] ? bpf_lsm_netlink_send+0x5/0x10 [ 51.852229][ T3487] netlink_sendmsg+0xa30/0xd60 [ 51.857172][ T3487] ? netlink_getsockopt+0x5b0/0x5b0 [ 51.862540][ T3487] ? aa_sock_msg_perm+0x91/0x150 [ 51.867484][ T3487] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 51.873037][ T3487] ? security_socket_sendmsg+0x7d/0xa0 [ 51.879027][ T3487] ? netlink_getsockopt+0x5b0/0x5b0 [ 51.884956][ T3487] ____sys_sendmsg+0x59e/0x8f0 [ 51.890636][ T3487] ? iovec_from_user+0x300/0x390 [ 51.896765][ T3487] ? __sys_sendmsg_sock+0x30/0x30 [ 51.902149][ T3487] ___sys_sendmsg+0x252/0x2e0 [ 51.907039][ T3487] ? __sys_sendmsg+0x260/0x260 [ 51.912200][ T3487] ? __lock_acquire+0x1295/0x1ff0 [ 51.917563][ T3487] ? __context_tracking_enter+0x5f/0x90 [ 51.923294][ T3487] ? __context_tracking_exit+0x4c/0x80 [ 51.929086][ T3487] ? __fdget+0x158/0x220 [ 51.933348][ T3487] __se_sys_sendmsg+0x19a/0x260 [ 51.938320][ T3487] ? __x64_sys_sendmsg+0x80/0x80 [ 51.943546][ T3487] ? syscall_enter_from_user_mode+0x2e/0x230 [ 51.949808][ T3487] ? lockdep_hardirqs_on+0x94/0x130 [ 51.956050][ T3487] ? syscall_enter_from_user_mode+0x2e/0x230 [ 51.963291][ T3487] do_syscall_64+0x3d/0xb0 [ 51.968071][ T3487] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.975925][ T3487] RIP: 0033:0x7fcdfcf084e9 [ 51.981260][ T3487] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.002182][ T3487] RSP: 002b:00007ffe33c996b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.012012][ T3487] RAX: ffffffffffffffda RBX: 00007ffe33c99888 RCX: 00007fcdfcf084e9 [ 52.020617][ T3487] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 52.028804][ T3487] RBP: 00007fcdfcf7b610 R08: 00000000ffffffff R09: 00007ffe33c99888 [ 52.037072][ T3487] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 52.045798][ T3487] R13: 00007ffe33c99878 R14: 0000000000000001 R15: 0000000000000001 [ 52.054258][ T3487]