Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. executing program [ 52.395202][ T3507] netlink: 56 bytes leftover after parsing attributes in process `syz-executor519'. [ 52.404761][ T3507] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274 [ 52.414325][ T3507] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3507, name: syz-executor519 [ 52.424082][ T3507] preempt_count: 201, expected: 0 [ 52.429094][ T3507] RCU nest depth: 0, expected: 0 [ 52.434045][ T3507] 2 locks held by syz-executor519/3507: [ 52.439587][ T3507] #0: ffffffff8e2988e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x720/0xf00 [ 52.449044][ T3507] #1: ffff8880218f6908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 52.458366][ T3507] Preemption disabled at: [ 52.458377][ T3507] [<0000000000000000>] 0x0 [ 52.467160][ T3507] CPU: 0 PID: 3507 Comm: syz-executor519 Not tainted 6.1.45-syzkaller #0 [ 52.475567][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 52.485616][ T3507] Call Trace: [ 52.488888][ T3507] [ 52.491809][ T3507] dump_stack_lvl+0x1e3/0x2cb [ 52.496485][ T3507] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.501959][ T3507] ? panic+0x75d/0x75d [ 52.506041][ T3507] __might_resched+0x5cb/0x780 [ 52.510807][ T3507] ? __might_sleep+0xb0/0xb0 [ 52.515404][ T3507] slab_pre_alloc_hook+0x4a/0x2a0 [ 52.520426][ T3507] ? kvmalloc_node+0x6e/0x180 [ 52.525092][ T3507] __kmem_cache_alloc_node+0x47/0x260 [ 52.530462][ T3507] ? kvmalloc_node+0x6e/0x180 [ 52.535147][ T3507] __kmalloc_node+0xa2/0x230 [ 52.539774][ T3507] kvmalloc_node+0x6e/0x180 [ 52.544284][ T3507] get_dist_table+0x91/0x380 [ 52.548873][ T3507] netem_change+0x947/0x1ea0 [ 52.553464][ T3507] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 52.559434][ T3507] ? netem_destroy+0xb0/0xb0 [ 52.564029][ T3507] ? do_raw_spin_unlock+0x137/0x8a0 [ 52.569216][ T3507] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 52.575103][ T3507] ? lockdep_hardirqs_on+0x94/0x130 [ 52.580304][ T3507] ? memset+0x1f/0x40 [ 52.584279][ T3507] ? __hrtimer_init+0x181/0x260 [ 52.589126][ T3507] netem_init+0x58/0xb0 [ 52.593273][ T3507] ? qdisc_peek_dequeued+0x220/0x220 [ 52.598551][ T3507] qdisc_create+0x8a1/0x1220 [ 52.603311][ T3507] ? qdisc_notify+0x390/0x390 [ 52.608073][ T3507] tc_modify_qdisc+0x9e0/0x1da0 [ 52.612924][ T3507] ? rcu_lock_release+0x20/0x20 [ 52.617783][ T3507] ? rcu_lock_release+0x20/0x20 [ 52.622624][ T3507] rtnetlink_rcv_msg+0x776/0xf00 [ 52.627557][ T3507] ? rtnetlink_bind+0x80/0x80 [ 52.632222][ T3507] ? stack_trace_save+0x1c0/0x1c0 [ 52.637234][ T3507] ? kernel_text_address+0x9f/0xd0 [ 52.642355][ T3507] ? __kernel_text_address+0x9/0x40 [ 52.647558][ T3507] ? unwind_get_return_address+0x49/0x80 [ 52.653191][ T3507] ? arch_stack_walk+0xf3/0x140 [ 52.658044][ T3507] ? mark_lock+0x9a/0x340 [ 52.662385][ T3507] ? mark_lock+0x9a/0x340 [ 52.666722][ T3507] ? __lock_acquire+0x125b/0x1f80 [ 52.671766][ T3507] netlink_rcv_skb+0x1cd/0x410 [ 52.676528][ T3507] ? rtnetlink_bind+0x80/0x80 [ 52.681199][ T3507] ? netlink_ack+0xe60/0xe60 [ 52.685794][ T3507] netlink_unicast+0x7bf/0x990 [ 52.690552][ T3507] ? netlink_detachskb+0x90/0x90 [ 52.695475][ T3507] ? __virt_addr_valid+0x22b/0x2e0 [ 52.700594][ T3507] ? __phys_addr_symbol+0x2b/0x70 [ 52.705632][ T3507] ? __check_object_size+0x4dd/0xa30 [ 52.710919][ T3507] ? bpf_lsm_netlink_send+0x5/0x10 [ 52.716041][ T3507] netlink_sendmsg+0xa26/0xd60 [ 52.720827][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 52.726031][ T3507] ? aa_sock_msg_perm+0x91/0x150 [ 52.730979][ T3507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 52.736276][ T3507] ? security_socket_sendmsg+0x7d/0xa0 [ 52.741740][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 52.746934][ T3507] ____sys_sendmsg+0x59e/0x8f0 [ 52.751705][ T3507] ? __sys_sendmsg_sock+0x30/0x30 [ 52.756731][ T3507] __sys_sendmsg+0x2a9/0x390 [ 52.761314][ T3507] ? ____sys_sendmsg+0x8f0/0x8f0 [ 52.766259][ T3507] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 52.772237][ T3507] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.778205][ T3507] ? lockdep_hardirqs_on+0x94/0x130 [ 52.783393][ T3507] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.789370][ T3507] do_syscall_64+0x3d/0xb0 [ 52.793781][ T3507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.799668][ T3507] RIP: 0033:0x7f56ea752429 [ 52.804073][ T3507] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.823674][ T3507] RSP: 002b:00007fffe22a4b88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.832078][ T3507] RAX: ffffffffffffffda RBX: 00007fffe22a4d58 RCX: 00007f56ea752429 [ 52.840040][ T3507] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 52.848008][ T3507] RBP: 00007f56ea7c5610 R08: 00007fffe22a4d58 R09: 00007fffe22a4d58 [ 52.855969][ T3507] R10: 00007fffe22a4d58 R11: 0000000000000246 R12: 0000000000000001 [ 52.863929][ T3507] R13: 00007fffe22a4d48 R14: 0000000000000001 R15: 0000000000000001 [ 52.871897][ T3507] [ 52.875015][ T3507] [ 52.877341][ T3507] ============================================ [ 52.883487][ T3507] WARNING: possible recursive locking detected [ 52.889618][ T3507] 6.1.45-syzkaller #0 Tainted: G W [ 52.896095][ T3507] -------------------------------------------- [ 52.902236][ T3507] syz-executor519/3507 is trying to acquire lock: [ 52.908623][ T3507] ffff8880218f6908 (&sch->q.lock){+...}-{2:2}, at: get_dist_table+0x254/0x380 [ 52.917473][ T3507] [ 52.917473][ T3507] but task is already holding lock: [ 52.924814][ T3507] ffff8880218f6908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 52.933662][ T3507] [ 52.933662][ T3507] other info that might help us debug this: [ 52.941694][ T3507] Possible unsafe locking scenario: [ 52.941694][ T3507] [ 52.949396][ T3507] CPU0 [ 52.952667][ T3507] ---- [ 52.955922][ T3507] lock(&sch->q.lock); [ 52.960054][ T3507] lock(&sch->q.lock); [ 52.964190][ T3507] [ 52.964190][ T3507] *** DEADLOCK *** [ 52.964190][ T3507] [ 52.972310][ T3507] May be due to missing lock nesting notation [ 52.972310][ T3507] [ 52.980605][ T3507] 2 locks held by syz-executor519/3507: [ 52.986129][ T3507] #0: ffffffff8e2988e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x720/0xf00 [ 52.995512][ T3507] #1: ffff8880218f6908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x17e/0x1ea0 [ 53.004722][ T3507] [ 53.004722][ T3507] stack backtrace: [ 53.010603][ T3507] CPU: 0 PID: 3507 Comm: syz-executor519 Tainted: G W 6.1.45-syzkaller #0 [ 53.020474][ T3507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 53.030511][ T3507] Call Trace: [ 53.033776][ T3507] [ 53.036781][ T3507] dump_stack_lvl+0x1e3/0x2cb [ 53.041452][ T3507] ? nf_tcp_handle_invalid+0x642/0x642 [ 53.046900][ T3507] ? panic+0x75d/0x75d [ 53.050960][ T3507] validate_chain+0x4726/0x58e0 [ 53.055813][ T3507] ? do_raw_spin_unlock+0x137/0x8a0 [ 53.060998][ T3507] ? reacquire_held_locks+0x660/0x660 [ 53.066359][ T3507] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 53.072238][ T3507] ? _raw_spin_unlock+0x40/0x40 [ 53.077073][ T3507] ? stack_trace_save+0x113/0x1c0 [ 53.082083][ T3507] ? stack_trace_snprint+0xe0/0xe0 [ 53.087182][ T3507] ? __stack_depot_save+0x3f5/0x470 [ 53.092365][ T3507] ? kasan_set_track+0x60/0x70 [ 53.097117][ T3507] ? kasan_set_track+0x4b/0x70 [ 53.101866][ T3507] ? __kasan_kmalloc+0x97/0xb0 [ 53.106617][ T3507] ? mark_lock+0x9a/0x340 [ 53.110933][ T3507] ? tc_modify_qdisc+0x9e0/0x1da0 [ 53.115946][ T3507] __lock_acquire+0x125b/0x1f80 [ 53.120786][ T3507] lock_acquire+0x1f8/0x5a0 [ 53.125275][ T3507] ? get_dist_table+0x254/0x380 [ 53.130118][ T3507] ? read_lock_is_recursive+0x10/0x10 [ 53.135476][ T3507] ? get_dist_table+0x254/0x380 [ 53.140312][ T3507] ? __bpf_trace_softirq+0x10/0x10 [ 53.145407][ T3507] ? kvmalloc_node+0x6e/0x180 [ 53.150067][ T3507] ? get_dist_table+0x254/0x380 [ 53.154908][ T3507] _raw_spin_lock_bh+0x31/0x40 [ 53.159656][ T3507] ? get_dist_table+0x254/0x380 [ 53.164492][ T3507] get_dist_table+0x254/0x380 [ 53.169156][ T3507] netem_change+0x947/0x1ea0 [ 53.173736][ T3507] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 53.179700][ T3507] ? netem_destroy+0xb0/0xb0 [ 53.184278][ T3507] ? do_raw_spin_unlock+0x137/0x8a0 [ 53.189461][ T3507] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 53.195340][ T3507] ? lockdep_hardirqs_on+0x94/0x130 [ 53.200528][ T3507] ? memset+0x1f/0x40 [ 53.204500][ T3507] ? __hrtimer_init+0x181/0x260 [ 53.209341][ T3507] netem_init+0x58/0xb0 [ 53.213487][ T3507] ? qdisc_peek_dequeued+0x220/0x220 [ 53.218759][ T3507] qdisc_create+0x8a1/0x1220 [ 53.223339][ T3507] ? qdisc_notify+0x390/0x390 [ 53.228007][ T3507] tc_modify_qdisc+0x9e0/0x1da0 [ 53.232850][ T3507] ? rcu_lock_release+0x20/0x20 [ 53.237696][ T3507] ? rcu_lock_release+0x20/0x20 [ 53.242537][ T3507] rtnetlink_rcv_msg+0x776/0xf00 [ 53.247464][ T3507] ? rtnetlink_bind+0x80/0x80 [ 53.252134][ T3507] ? stack_trace_save+0x1c0/0x1c0 [ 53.257145][ T3507] ? kernel_text_address+0x9f/0xd0 [ 53.262247][ T3507] ? __kernel_text_address+0x9/0x40 [ 53.267431][ T3507] ? unwind_get_return_address+0x49/0x80 [ 53.273049][ T3507] ? arch_stack_walk+0xf3/0x140 [ 53.277890][ T3507] ? mark_lock+0x9a/0x340 [ 53.282206][ T3507] ? mark_lock+0x9a/0x340 [ 53.286521][ T3507] ? __lock_acquire+0x125b/0x1f80 [ 53.291537][ T3507] netlink_rcv_skb+0x1cd/0x410 [ 53.296286][ T3507] ? rtnetlink_bind+0x80/0x80 [ 53.300946][ T3507] ? netlink_ack+0xe60/0xe60 [ 53.305523][ T3507] netlink_unicast+0x7bf/0x990 [ 53.310272][ T3507] ? netlink_detachskb+0x90/0x90 [ 53.315193][ T3507] ? __virt_addr_valid+0x22b/0x2e0 [ 53.320295][ T3507] ? __phys_addr_symbol+0x2b/0x70 [ 53.325333][ T3507] ? __check_object_size+0x4dd/0xa30 [ 53.330608][ T3507] ? bpf_lsm_netlink_send+0x5/0x10 [ 53.335703][ T3507] netlink_sendmsg+0xa26/0xd60 [ 53.340457][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 53.345725][ T3507] ? aa_sock_msg_perm+0x91/0x150 [ 53.350651][ T3507] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 53.355922][ T3507] ? security_socket_sendmsg+0x7d/0xa0 [ 53.361369][ T3507] ? netlink_getsockopt+0x5b0/0x5b0 [ 53.366557][ T3507] ____sys_sendmsg+0x59e/0x8f0 [ 53.371310][ T3507] ? __sys_sendmsg_sock+0x30/0x30 [ 53.376347][ T3507] __sys_sendmsg+0x2a9/0x390 [ 53.380919][ T3507] ? ____sys_sendmsg+0x8f0/0x8f0 [ 53.385847][ T3507] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 53.391812][ T3507] ? syscall_enter_from_user_mode+0x2e/0x220 [ 53.397778][ T3507] ? lockdep_hardirqs_on+0x94/0x130 [ 53.402960][ T3507] ? syscall_enter_from_user_mode+0x2e/0x220 [ 53.408926][ T3507] do_syscall_64+0x3d/0xb0 [ 53.414374][ T3507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.420259][ T3507] RIP: 0033:0x7f56ea752429 [ 53.424661][ T3507] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.444252][ T3507] RSP: 002b:00007fffe22a4b88 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.452649][ T3507] RAX: ffffffffffffffda RBX: 00007fffe22a4d58 RCX: 00007f56ea752429 [ 53.460607][ T3507] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 53.468563][ T3507] RBP: 00007f56ea7c5610 R08: 00007fffe22a4d58 R09: 00007fffe22a4d58 [ 53.476519][ T3507] R10: 00007fffe22a4d58 R11: 0000000000000246 R12: 0000000000000001 [ 53.484473][ T3507] R13: 00007fffe22a4d48 R14: 0000000000000001 R15: 0000000000000001 [ 53.492433][ T3507]