syzbot
WARNING in netdev_queue_update_kobjects (3)
Status:
upstream: reported syz repro on 2026/09/15 17:57
Reported-by: syzbot+e00027c36301c05fe58d@syzkaller.appspotmail.com
First crash: 3d17h, last: 2d14h
Sample crash report:
------------[ cut here ]------------
sysfs group 'byte_queue_limits' not found for kobject 'tx-0'
WARNING: CPU: 1 PID: 3535 at fs/sysfs/group.c:280 sysfs_remove_group+0x177/0x290 fs/sysfs/group.c:278
Modules linked in:
CPU: 1 PID: 3535 Comm: kworker/1:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: events delete_netdev
RIP: 0010:sysfs_remove_group+0x177/0x290 fs/sysfs/group.c:278
Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 eb 2b cb ff 49 8b 17 48 c7 c7 a0 70 9c 8a 48 89 de e8 f9 6d 45 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 03 e7 79 ff
RSP: 0018:ffffc9000e42f8e0 EFLAGS: 00010246
RAX: bcb2f2d7d2c28700 RBX: ffffffff8b8c2f40 RCX: ffff88802fb05a00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
RBP: 0000000000000058 R08: ffffffff90b0f24f R09: 1ffffffff2161e49
R10: dffffc0000000000 R11: fffffbfff2161e4a R12: 1ffffffff17184fc
R13: dffffc0000000000 R14: ffff88807e9449f8 R15: ffff88802f179820
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f7e2a7ed158 CR3: 000000007e17e000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
netdev_queue_update_kobjects+0x3dd/0x480 net/core/net-sysfs.c:1729
remove_queue_kobjects net/core/net-sysfs.c:1828 [inline]
netdev_unregister_kobject+0x104/0x250 net/core/net-sysfs.c:1981
unregister_netdevice_many_notify+0x14b6/0x1990 net/core/dev.c:11051
unregister_netdevice_many net/core/dev.c:11077 [inline]
unregister_netdevice_queue+0x2e5/0x330 net/core/dev.c:10960
unregister_netdevice include/linux/netdevice.h:3077 [inline]
lowpan_unregister_netdevice net/6lowpan/core.c:66 [inline]
lowpan_unregister_netdev+0x18/0x20 net/6lowpan/core.c:74
unregister_dev+0x70/0x1a0 net/bluetooth/6lowpan.c:763
process_one_work+0x8ab/0x1160 kernel/workqueue.c:2292
worker_thread+0xaf5/0x12a0 kernel/workqueue.c:2439
kthread+0x29d/0x330 kernel/kthread.c:376
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295
</TASK>
* Struck through repros no longer work on HEAD.