Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. executing program [ 43.350932][ T3486] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:209 [ 43.360492][ T3486] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3486, name: syz-executor313 [ 43.370265][ T3486] 2 locks held by syz-executor313/3486: [ 43.375820][ T3486] #0: ffffffff8d9e1148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 43.385244][ T3486] #1: ffff88801f031908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x257/0x20c0 [ 43.394485][ T3486] Preemption disabled at: [ 43.394492][ T3486] [<0000000000000000>] 0x0 [ 43.403212][ T3486] CPU: 0 PID: 3486 Comm: syz-executor313 Not tainted 5.15.126-syzkaller #0 [ 43.411786][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 43.421817][ T3486] Call Trace: [ 43.425074][ T3486] [ 43.427981][ T3486] dump_stack_lvl+0x1e3/0x2cb [ 43.432640][ T3486] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 43.438335][ T3486] ? panic+0x84d/0x84d [ 43.442385][ T3486] ___might_sleep+0x547/0x6a0 [ 43.447138][ T3486] ? __might_sleep+0xc0/0xc0 [ 43.451711][ T3486] slab_pre_alloc_hook+0x44/0xc0 [ 43.456624][ T3486] __kmalloc_node+0x71/0x390 [ 43.461187][ T3486] ? kvmalloc_node+0x80/0x140 [ 43.465835][ T3486] ? __bpf_trace_softirq+0x10/0x10 [ 43.470929][ T3486] kvmalloc_node+0x80/0x140 [ 43.475408][ T3486] get_dist_table+0x83/0x2c0 [ 43.479976][ T3486] netem_change+0xa6a/0x20c0 [ 43.484554][ T3486] ? netem_destroy+0xb0/0xb0 [ 43.489119][ T3486] ? debug_object_init+0x10/0x10 [ 43.494034][ T3486] ? memset+0x1f/0x40 [ 43.497998][ T3486] ? lockdep_init_map_type+0x9d/0x8d0 [ 43.503358][ T3486] ? memset+0x1f/0x40 [ 43.507320][ T3486] ? __hrtimer_init+0x181/0x260 [ 43.512148][ T3486] netem_init+0x58/0xb0 [ 43.516365][ T3486] ? qdisc_peek_dequeued+0x220/0x220 [ 43.521622][ T3486] qdisc_create+0x8ae/0x1390 [ 43.526191][ T3486] ? qdisc_notify+0x380/0x380 [ 43.530849][ T3486] ? apparmor_capable+0x12e/0x190 [ 43.535859][ T3486] tc_modify_qdisc+0xac5/0x1710 [ 43.540783][ T3486] ? rcu_lock_release+0x20/0x20 [ 43.545622][ T3486] ? rcu_lock_release+0x20/0x20 [ 43.550542][ T3486] rtnetlink_rcv_msg+0x993/0xee0 [ 43.555457][ T3486] ? reacquire_held_locks+0x660/0x660 [ 43.560819][ T3486] ? rtnetlink_bind+0x80/0x80 [ 43.565471][ T3486] ? is_bpf_text_address+0x24f/0x260 [ 43.570729][ T3486] ? stack_trace_save+0x1c0/0x1c0 [ 43.575754][ T3486] ? __kernel_text_address+0x94/0x100 [ 43.581101][ T3486] ? unwind_get_return_address+0x49/0x80 [ 43.586708][ T3486] ? arch_stack_walk+0xf3/0x140 [ 43.591534][ T3486] ? mark_lock+0x98/0x340 [ 43.595843][ T3486] ? mark_lock+0x98/0x340 [ 43.600147][ T3486] ? __lock_acquire+0x1295/0x1ff0 [ 43.605171][ T3486] netlink_rcv_skb+0x1cf/0x410 [ 43.609913][ T3486] ? rtnetlink_bind+0x80/0x80 [ 43.614575][ T3486] ? netlink_ack+0xb10/0xb10 [ 43.619149][ T3486] netlink_unicast+0x7b6/0x980 [ 43.623894][ T3486] ? netlink_detachskb+0x90/0x90 [ 43.628806][ T3486] ? 0xffffffff81000000 [ 43.632938][ T3486] ? __check_object_size+0x300/0x410 [ 43.638198][ T3486] ? bpf_lsm_netlink_send+0x5/0x10 [ 43.643287][ T3486] netlink_sendmsg+0xa30/0xd60 [ 43.648047][ T3486] ? netlink_getsockopt+0x5b0/0x5b0 [ 43.653236][ T3486] ? aa_sock_msg_perm+0x91/0x150 [ 43.658148][ T3486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 43.663406][ T3486] ? security_socket_sendmsg+0x7d/0xa0 [ 43.668841][ T3486] ? netlink_getsockopt+0x5b0/0x5b0 [ 43.674015][ T3486] ____sys_sendmsg+0x59e/0x8f0 [ 43.678756][ T3486] ? iovec_from_user+0x300/0x390 [ 43.683669][ T3486] ? __sys_sendmsg_sock+0x30/0x30 [ 43.688675][ T3486] ___sys_sendmsg+0x252/0x2e0 [ 43.693329][ T3486] ? __sys_sendmsg+0x260/0x260 [ 43.698067][ T3486] ? __lock_acquire+0x1295/0x1ff0 [ 43.703082][ T3486] ? __context_tracking_enter+0x5f/0x90 [ 43.708865][ T3486] ? __context_tracking_exit+0x4c/0x80 [ 43.714302][ T3486] ? __fdget+0x158/0x220 [ 43.718520][ T3486] __se_sys_sendmsg+0x19a/0x260 [ 43.723348][ T3486] ? __x64_sys_sendmsg+0x80/0x80 [ 43.728362][ T3486] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.734319][ T3486] ? lockdep_hardirqs_on+0x94/0x130 [ 43.739491][ T3486] ? syscall_enter_from_user_mode+0x2e/0x230 [ 43.745446][ T3486] do_syscall_64+0x3d/0xb0 [ 43.749842][ T3486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.755709][ T3486] RIP: 0033:0x7fe1e63214e9 [ 43.760204][ T3486] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.779867][ T3486] RSP: 002b:00007fff21504588 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.788257][ T3486] RAX: ffffffffffffffda RBX: 00007fff21504758 RCX: 00007fe1e63214e9 [ 43.796213][ T3486] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 43.804165][ T3486] RBP: 00007fe1e6394610 R08: 00000000ffffffff R09: 00007fff21504758 [ 43.812110][ T3486] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 43.820057][ T3486] R13: 00007fff21504748 R14: 0000000000000001 R15: 0000000000000001 [ 43.828013][ T3486] [ 43.831100][ T3486] [ 43.833415][ T3486] ============================================ [ 43.839549][ T3486] WARNING: possible recursive locking detected [ 43.845677][ T3486] 5.15.126-syzkaller #0 Tainted: G W [ 43.852240][ T3486] -------------------------------------------- [ 43.858360][ T3486] syz-executor313/3486 is trying to acquire lock: [ 43.864832][ T3486] ffff88801f031908 (&sch->q.lock){+...}-{2:2}, at: get_dist_table+0x1fa/0x2c0 [ 43.873674][ T3486] [ 43.873674][ T3486] but task is already holding lock: [ 43.881016][ T3486] ffff88801f031908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x257/0x20c0 [ 43.889768][ T3486] [ 43.889768][ T3486] other info that might help us debug this: [ 43.897799][ T3486] Possible unsafe locking scenario: [ 43.897799][ T3486] [ 43.905222][ T3486] CPU0 [ 43.908474][ T3486] ---- [ 43.911722][ T3486] lock(&sch->q.lock); [ 43.915848][ T3486] lock(&sch->q.lock); [ 43.919974][ T3486] [ 43.919974][ T3486] *** DEADLOCK *** [ 43.919974][ T3486] [ 43.928093][ T3486] May be due to missing lock nesting notation [ 43.928093][ T3486] [ 43.936386][ T3486] 2 locks held by syz-executor313/3486: [ 43.941916][ T3486] #0: ffffffff8d9e1148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x94c/0xee0 [ 43.951282][ T3486] #1: ffff88801f031908 (&sch->q.lock){+...}-{2:2}, at: netem_change+0x257/0x20c0 [ 43.960476][ T3486] [ 43.960476][ T3486] stack backtrace: [ 43.966338][ T3486] CPU: 0 PID: 3486 Comm: syz-executor313 Tainted: G W 5.15.126-syzkaller #0 [ 43.976370][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 43.986399][ T3486] Call Trace: [ 43.989655][ T3486] [ 43.992563][ T3486] dump_stack_lvl+0x1e3/0x2cb [ 43.997219][ T3486] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 44.002823][ T3486] ? panic+0x84d/0x84d [ 44.006868][ T3486] validate_chain+0x46cf/0x58b0 [ 44.011692][ T3486] ? do_raw_spin_unlock+0x137/0x8b0 [ 44.016864][ T3486] ? reacquire_held_locks+0x660/0x660 [ 44.022213][ T3486] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 44.028079][ T3486] ? _raw_spin_unlock+0x40/0x40 [ 44.032902][ T3486] ? stack_trace_save+0x113/0x1c0 [ 44.037900][ T3486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 44.044025][ T3486] ? stack_trace_snprint+0xe0/0xe0 [ 44.049110][ T3486] ? stack_depot_save+0x3db/0x440 [ 44.054111][ T3486] ? ____kasan_kmalloc+0xd1/0xf0 [ 44.059023][ T3486] ? mark_lock+0x98/0x340 [ 44.063322][ T3486] ? qdisc_create+0x8ae/0x1390 [ 44.068059][ T3486] __lock_acquire+0x1295/0x1ff0 [ 44.072886][ T3486] lock_acquire+0x1db/0x4f0 [ 44.077360][ T3486] ? get_dist_table+0x1fa/0x2c0 [ 44.082183][ T3486] ? read_lock_is_recursive+0x10/0x10 [ 44.087530][ T3486] ? get_dist_table+0x1fa/0x2c0 [ 44.092354][ T3486] ? __bpf_trace_softirq+0x10/0x10 [ 44.097438][ T3486] ? __kmalloc_node+0x199/0x390 [ 44.102261][ T3486] ? kvmalloc_node+0x80/0x140 [ 44.106910][ T3486] ? __bpf_trace_softirq+0x10/0x10 [ 44.111996][ T3486] ? get_dist_table+0x1fa/0x2c0 [ 44.116821][ T3486] _raw_spin_lock_bh+0x31/0x40 [ 44.121558][ T3486] ? get_dist_table+0x1fa/0x2c0 [ 44.126382][ T3486] get_dist_table+0x1fa/0x2c0 [ 44.131033][ T3486] netem_change+0xa6a/0x20c0 [ 44.135602][ T3486] ? netem_destroy+0xb0/0xb0 [ 44.140162][ T3486] ? debug_object_init+0x10/0x10 [ 44.145071][ T3486] ? memset+0x1f/0x40 [ 44.149027][ T3486] ? lockdep_init_map_type+0x9d/0x8d0 [ 44.154373][ T3486] ? memset+0x1f/0x40 [ 44.158327][ T3486] ? __hrtimer_init+0x181/0x260 [ 44.163156][ T3486] netem_init+0x58/0xb0 [ 44.167285][ T3486] ? qdisc_peek_dequeued+0x220/0x220 [ 44.172541][ T3486] qdisc_create+0x8ae/0x1390 [ 44.177104][ T3486] ? qdisc_notify+0x380/0x380 [ 44.181769][ T3486] ? apparmor_capable+0x12e/0x190 [ 44.186769][ T3486] tc_modify_qdisc+0xac5/0x1710 [ 44.191595][ T3486] ? rcu_lock_release+0x20/0x20 [ 44.196423][ T3486] ? rcu_lock_release+0x20/0x20 [ 44.201246][ T3486] rtnetlink_rcv_msg+0x993/0xee0 [ 44.206155][ T3486] ? reacquire_held_locks+0x660/0x660 [ 44.211500][ T3486] ? rtnetlink_bind+0x80/0x80 [ 44.216146][ T3486] ? is_bpf_text_address+0x24f/0x260 [ 44.221404][ T3486] ? stack_trace_save+0x1c0/0x1c0 [ 44.226399][ T3486] ? __kernel_text_address+0x94/0x100 [ 44.231746][ T3486] ? unwind_get_return_address+0x49/0x80 [ 44.237353][ T3486] ? arch_stack_walk+0xf3/0x140 [ 44.242179][ T3486] ? mark_lock+0x98/0x340 [ 44.246485][ T3486] ? mark_lock+0x98/0x340 [ 44.250785][ T3486] ? __lock_acquire+0x1295/0x1ff0 [ 44.255789][ T3486] netlink_rcv_skb+0x1cf/0x410 [ 44.260527][ T3486] ? rtnetlink_bind+0x80/0x80 [ 44.265174][ T3486] ? netlink_ack+0xb10/0xb10 [ 44.269745][ T3486] netlink_unicast+0x7b6/0x980 [ 44.274483][ T3486] ? netlink_detachskb+0x90/0x90 [ 44.279392][ T3486] ? 0xffffffff81000000 [ 44.283515][ T3486] ? __check_object_size+0x300/0x410 [ 44.288774][ T3486] ? bpf_lsm_netlink_send+0x5/0x10 [ 44.293862][ T3486] netlink_sendmsg+0xa30/0xd60 [ 44.298604][ T3486] ? netlink_getsockopt+0x5b0/0x5b0 [ 44.303776][ T3486] ? aa_sock_msg_perm+0x91/0x150 [ 44.308687][ T3486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 44.313942][ T3486] ? security_socket_sendmsg+0x7d/0xa0 [ 44.319375][ T3486] ? netlink_getsockopt+0x5b0/0x5b0 [ 44.324546][ T3486] ____sys_sendmsg+0x59e/0x8f0 [ 44.329292][ T3486] ? iovec_from_user+0x300/0x390 [ 44.334201][ T3486] ? __sys_sendmsg_sock+0x30/0x30 [ 44.339339][ T3486] ___sys_sendmsg+0x252/0x2e0 [ 44.344005][ T3486] ? __sys_sendmsg+0x260/0x260 [ 44.348747][ T3486] ? __lock_acquire+0x1295/0x1ff0 [ 44.353756][ T3486] ? __context_tracking_enter+0x5f/0x90 [ 44.359278][ T3486] ? __context_tracking_exit+0x4c/0x80 [ 44.364710][ T3486] ? __fdget+0x158/0x220 [ 44.368931][ T3486] __se_sys_sendmsg+0x19a/0x260 [ 44.373759][ T3486] ? __x64_sys_sendmsg+0x80/0x80 [ 44.378672][ T3486] ? syscall_enter_from_user_mode+0x2e/0x230 [ 44.384623][ T3486] ? lockdep_hardirqs_on+0x94/0x130 [ 44.389792][ T3486] ? syscall_enter_from_user_mode+0x2e/0x230 [ 44.395741][ T3486] do_syscall_64+0x3d/0xb0 [ 44.400141][ T3486] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.406008][ T3486] RIP: 0033:0x7fe1e63214e9 [ 44.410399][ T3486] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.429974][ T3486] RSP: 002b:00007fff21504588 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.438360][ T3486] RAX: ffffffffffffffda RBX: 00007fff21504758 RCX: 00007fe1e63214e9 [ 44.446303][ T3486] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 44.454249][ T3486] RBP: 00007fe1e6394610 R08: 00000000ffffffff R09: 00007fff21504758 [ 44.462192][ T3486] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 44.470131][ T3486] R13: 00007fff21504748 R14: 0000000000000001 R15: 0000000000000001 [ 44.478077][ T3486]