DUID 00:04:e4:c6:50:7c:d0:20:e3:9c:0b:ff:93:a0:6d:15:c2:87 forked to background, child pid 3836 [ 57.472286][ T3837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.486922][ T3837] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. syzkaller login: [ 82.722135][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 82.782685][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.791934][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.800837][ T4166] device bridge_slave_0 entered promiscuous mode [ 82.811570][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.819207][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.827458][ T4166] device bridge_slave_1 entered promiscuous mode [ 82.855314][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.871257][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.903620][ T4166] team0: Port device team_slave_0 added [ 82.917445][ T4166] team0: Port device team_slave_1 added [ 82.943233][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.951726][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.979392][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.994595][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.002059][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.030011][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.067360][ T4166] device hsr_slave_0 entered promiscuous mode [ 83.074535][ T4166] device hsr_slave_1 entered promiscuous mode [ 83.189080][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.202142][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.212428][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.224580][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.252721][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.260823][ T4166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.269730][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.277159][ T4166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.336809][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.351314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.362435][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.373985][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.385151][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 83.406911][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.433498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.442892][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.450810][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.468104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.477914][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.485197][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.502515][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.513418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.528938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.541160][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.555084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.568414][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.588208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.596527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.610999][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.634599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.662494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.672842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.682892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.695434][ T4166] device veth0_vlan entered promiscuous mode [ 83.709077][ T4166] device veth1_vlan entered promiscuous mode [ 83.717864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.748219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.757683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.770644][ T4166] device veth0_macvtap entered promiscuous mode [ 83.782628][ T4166] device veth1_macvtap entered promiscuous mode [ 83.803475][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.820044][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.830114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.839858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.849025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.859294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.870125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.880292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.895553][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.906519][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.918121][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.929542][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 83.990696][ T4166] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 87.006067][ T13] [ 87.009007][ T13] ============================= [ 87.015111][ T13] WARNING: suspicious RCU usage [ 87.020655][ T13] 5.15.179-syzkaller #0 Not tainted [ 87.031498][ T13] ----------------------------- [ 87.037472][ T13] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 87.055233][ T13] [ 87.055233][ T13] other info that might help us debug this: [ 87.055233][ T13] [ 87.075519][ T13] [ 87.075519][ T13] rcu_scheduler_active = 2, debug_locks = 1 [ 87.087138][ T13] 8 locks held by kworker/0:1/13: [ 87.093510][ T13] #0: ffff888023ce6538 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 87.107219][ T13] #1: ffffc90000d27d20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 87.125177][ T13] #2: ffff888075f28ad8 (&peer->endpoint_lock){++..}-{2:2}, at: wg_socket_send_skb_to_peer+0x56/0x1d0 [ 87.141598][ T13] #3: ffffffff8cb1f540 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 87.159776][ T13] #4: ffffffff8cb1f540 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 87.178702][ T13] #5: ffffffff8cb1f540 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 87.189092][ T13] #6: ffff88802c3c5108 (&sch->q.lock){+...}-{2:2}, at: __dev_queue_xmit+0xc1f/0x32b0 [ 87.199492][ T13] #7: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 87.214639][ T13] [ 87.214639][ T13] stack backtrace: [ 87.222393][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.179-syzkaller #0 [ 87.235291][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.246284][ T13] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 87.252977][ T13] Call Trace: [ 87.257013][ T13] [ 87.260341][ T13] dump_stack_lvl+0x1e3/0x2d0 [ 87.265806][ T13] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 87.274644][ T13] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 87.281049][ T13] qdisc_lookup+0xa8/0x630 [ 87.286269][ T13] qdisc_tree_reduce_backlog+0x212/0x4f0 [ 87.294020][ T13] sfq_enqueue+0x1214/0x23e0 [ 87.299294][ T13] ? decrement_one_qlen+0x550/0x550 [ 87.305042][ T13] ? read_lock_is_recursive+0x10/0x10 [ 87.311532][ T13] tbf_enqueue+0x35d/0x6f0 [ 87.316567][ T13] dev_qdisc_enqueue+0x47/0x240 [ 87.321909][ T13] ? __dev_queue_xmit+0xcba/0x32b0 [ 87.328839][ T13] __dev_queue_xmit+0xe32/0x32b0 [ 87.334286][ T13] ? dev_queue_xmit+0x20/0x20 [ 87.339485][ T13] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 87.346425][ T13] ? print_irqtrace_events+0x210/0x210 [ 87.352381][ T13] ? __ipv6_neigh_lookup_noref+0x59b/0x730 [ 87.358525][ T13] ? ip6_finish_output2+0xcbf/0x15a0 [ 87.363938][ T13] ip6_finish_output2+0xead/0x15a0 [ 87.369174][ T13] ? __ip6_finish_output+0x7d0/0x7d0 [ 87.374585][ T13] ? __ip6_finish_output+0x645/0x7d0 [ 87.380213][ T13] udp_tunnel6_xmit_skb+0x536/0x970 [ 87.386219][ T13] send6+0x6b8/0xad0 [ 87.393131][ T13] ? send4+0x1130/0x1130 [ 87.398004][ T13] ? __local_bh_disable_ip+0x183/0x210 [ 87.405212][ T13] ? del_timer+0x183/0x310 [ 87.410692][ T13] ? wg_socket_send_skb_to_peer+0x56/0x1d0 [ 87.417750][ T13] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 87.425041][ T13] wg_packet_tx_worker+0x1a1/0x7a0 [ 87.435092][ T13] process_one_work+0x8a1/0x10c0 [ 87.440492][ T13] ? worker_detach_from_pool+0x260/0x260 [ 87.447110][ T13] ? _raw_spin_lock_irqsave+0x120/0x120 [ 87.453589][ T13] ? kthread_data+0x4e/0xc0 [ 87.459377][ T13] ? wq_worker_running+0x97/0x170 [ 87.466072][ T13] worker_thread+0xaca/0x1280 [ 87.476019][ T13] kthread+0x3f6/0x4f0 [ 87.481065][ T13] ? rcu_lock_release+0x20/0x20 [ 87.486818][ T13] ? kthread_blkcg+0xd0/0xd0 [ 87.494393][ T13] ret_from_fork+0x1f/0x30 [ 87.499682][ T13]