program: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000001c0)="354db1022048a402a2062a8039521aaf8240209d4588bca9a29467c96de6b5af1525a46f3297b4a762398d044268690679b3fe717ee9d57b2d14e120e79d5561c24caf443c87d7d26825959e278b098b535a5fc3bc9a629054de2ff7738e02f53173d5d066a12d8cb4d70573b432295c83dfa686853ee262560d7802a0e7d897b7c0afce53b470bf2adf1da1018c89304228c1adf4d8523ed8", 0x99}, {&(0x7f0000000380)="836ff868e64314a117f3eee586ff0575fd02e1c86efbca7bd6039ebb6efe18e207c7cde8d33592db5ce6c52fd92f355b68c234143bc78369aafa7309526861db688396c7d498e26180a7d25c5480ee28eb8cbcde05ad7516d71d2a8199d37d601f97c0114a75599eba79e4688405d86aaff92dfd9c9a2bce65607ff2aa84e3daeb4a4113d28cab834c132b101b018aebb0d2d2af7c50ab889b2e0d7541ac0f68b4eb9380c58730d6155c4347b862adf87559df0db020860552b18dc461a09ec2dbc1a6fa1f356cab99a21cb23cd357622122572a6201d98974bd54c9216584e9ef0e3e8cbbfa", 0xe6}], 0x3}, 0x0) (rerun: 32) [ 73.163103][ T4674] Bluetooth: hci0: command tx timeout [ 73.292233][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 73.295735][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.298883][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.310179][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.312878][ T5329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.315667][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.318517][ T5329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.323904][ T5329] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 73.327598][ T3009] [ 73.328983][ T3009] ============================= [ 73.330855][ T3009] WARNING: suspicious RCU usage [ 73.332754][ T3009] 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 Not tainted [ 73.335125][ T3009] ----------------------------- [ 73.337036][ T3009] net/sched/sch_generic.c:1256 suspicious rcu_dereference_protected() usage! [ 73.340463][ T3009] [ 73.340463][ T3009] other info that might help us debug this: [ 73.340463][ T3009] [ 73.344382][ T3009] [ 73.344382][ T3009] rcu_scheduler_active = 2, debug_locks = 1 [ 73.347320][ T3009] 3 locks held by kworker/u4:10/3009: [ 73.349466][ T3009] #0: ffff88804f269948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 73.353499][ T3009] #1: ffffc9000d6d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 73.358586][ T3009] #2: ffffffff8e939f20 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 73.362516][ T3009] [ 73.362516][ T3009] stack backtrace: [ 73.364762][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: kworker/u4:10 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 73.368687][ T3009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.372824][ T3009] Workqueue: bond0 bond_mii_monitor [ 73.374814][ T3009] Call Trace: [ 73.376126][ T3009] [ 73.377439][ T3009] dump_stack_lvl+0x241/0x360 [ 73.379320][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.381346][ T3009] ? __pfx__printk+0x10/0x10 [ 73.383236][ T3009] lockdep_rcu_suspicious+0x226/0x340 [ 73.385704][ T3009] dev_activate+0xf8/0x1240 [ 73.387648][ T3009] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 73.389935][ T3009] ? lockdep_hardirqs_on+0x99/0x150 [ 73.391997][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.394241][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.396704][ T3009] ? __pfx_dev_activate+0x10/0x10 [ 73.398593][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.400733][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.402924][ T3009] ? rfc2863_policy+0x10e/0x300 [ 73.404823][ T3009] linkwatch_do_dev+0xfb/0x170 [ 73.406674][ T3009] ethtool_op_get_link+0x15/0x60 [ 73.408610][ T3009] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 73.410932][ T3009] bond_check_dev_link+0x1f1/0x3f0 [ 73.412922][ T3009] ? __pfx_bond_check_dev_link+0x10/0x10 [ 73.415419][ T3009] bond_mii_monitor+0x49a/0x3170 [ 73.417564][ T3009] ? __lock_acquire+0x1384/0x2050 [ 73.419473][ T3009] ? bond_mii_monitor+0x174/0x3170 [ 73.421389][ T3009] ? __pfx_bond_mii_monitor+0x10/0x10 [ 73.423513][ T3009] ? __pfx_lock_acquire+0x10/0x10 [ 73.425479][ T3009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.427763][ T3009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.430204][ T3009] ? process_scheduled_works+0x976/0x1850 [ 73.432351][ T3009] process_scheduled_works+0xa63/0x1850 [ 73.434432][ T3009] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.436853][ T3009] ? assign_work+0x364/0x3d0 [ 73.438609][ T3009] worker_thread+0x870/0xd30 [ 73.440311][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.442469][ T3009] ? __kthread_parkme+0x169/0x1d0 [ 73.444235][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.446075][ T3009] kthread+0x2f0/0x390 [ 73.447516][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.449316][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.450978][ T3009] ret_from_fork+0x4b/0x80 [ 73.452850][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.454970][ T3009] ret_from_fork_asm+0x1a/0x30 [ 73.456974][ T3009] [ 73.474421][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 73.480873][ T3009] [ 73.481902][ T3009] ============================= [ 73.483904][ T3009] WARNING: suspicious RCU usage [ 73.485809][ T3009] 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 Not tainted [ 73.488539][ T3009] ----------------------------- [ 73.490422][ T3009] net/sched/sch_generic.c:1234 suspicious rcu_dereference_protected() usage! [ 73.493849][ T3009] [ 73.493849][ T3009] other info that might help us debug this: [ 73.493849][ T3009] [ 73.497742][ T3009] [ 73.497742][ T3009] rcu_scheduler_active = 2, debug_locks = 1 [ 73.501108][ T3009] 3 locks held by kworker/u4:10/3009: [ 73.503231][ T3009] #0: ffff88804f269948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 73.507385][ T3009] #1: ffffc9000d6d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 73.512321][ T3009] #2: ffffffff8e939f20 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 73.515942][ T3009] [ 73.515942][ T3009] stack backtrace: [ 73.518290][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: kworker/u4:10 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 73.522176][ T3009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.526163][ T3009] Workqueue: bond0 bond_mii_monitor [ 73.528055][ T3009] Call Trace: [ 73.529369][ T3009] [ 73.530532][ T3009] dump_stack_lvl+0x241/0x360 [ 73.532352][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.534313][ T3009] ? __pfx__printk+0x10/0x10 [ 73.535938][ T3009] lockdep_rcu_suspicious+0x226/0x340 [ 73.537913][ T3009] transition_one_qdisc+0x8e/0x1c0 [ 73.539902][ T3009] dev_activate+0x838/0x1240 [ 73.541736][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.544173][ T3009] ? __pfx_dev_activate+0x10/0x10 [ 73.546043][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.548280][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.550676][ T3009] ? rfc2863_policy+0x10e/0x300 [ 73.552651][ T3009] linkwatch_do_dev+0xfb/0x170 [ 73.554374][ T3009] ethtool_op_get_link+0x15/0x60 [ 73.556145][ T3009] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 73.558249][ T3009] bond_check_dev_link+0x1f1/0x3f0 [ 73.560138][ T3009] ? __pfx_bond_check_dev_link+0x10/0x10 [ 73.562107][ T3009] bond_mii_monitor+0x49a/0x3170 [ 73.563907][ T3009] ? __lock_acquire+0x1384/0x2050 [ 73.565768][ T3009] ? bond_mii_monitor+0x174/0x3170 [ 73.567739][ T3009] ? __pfx_bond_mii_monitor+0x10/0x10 [ 73.569814][ T3009] ? __pfx_lock_acquire+0x10/0x10 [ 73.571730][ T3009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.574046][ T3009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.576512][ T3009] ? process_scheduled_works+0x976/0x1850 [ 73.578619][ T3009] process_scheduled_works+0xa63/0x1850 [ 73.580786][ T3009] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.583021][ T3009] ? assign_work+0x364/0x3d0 [ 73.584862][ T3009] worker_thread+0x870/0xd30 [ 73.586795][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.589041][ T3009] ? __kthread_parkme+0x169/0x1d0 [ 73.590918][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.592775][ T3009] kthread+0x2f0/0x390 [ 73.594557][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.596415][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.598155][ T3009] ret_from_fork+0x4b/0x80 [ 73.599983][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.601824][ T3009] ret_from_fork_asm+0x1a/0x30 [ 73.603678][ T3009] [ 73.611694][ T3009] [ 73.612709][ T3009] ============================= [ 73.614624][ T3009] WARNING: suspicious RCU usage [ 73.616497][ T3009] 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 Not tainted [ 73.619213][ T3009] ----------------------------- [ 73.621197][ T3009] include/linux/rtnetlink.h:100 suspicious rcu_dereference_protected() usage! [ 73.624475][ T3009] [ 73.624475][ T3009] other info that might help us debug this: [ 73.624475][ T3009] [ 73.628255][ T3009] [ 73.628255][ T3009] rcu_scheduler_active = 2, debug_locks = 1 [ 73.631239][ T3009] 3 locks held by kworker/u4:10/3009: [ 73.633213][ T3009] #0: ffff88804f269948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 73.637505][ T3009] #1: ffffc9000d6d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 73.642516][ T3009] #2: ffffffff8e939f20 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 73.646385][ T3009] [ 73.646385][ T3009] stack backtrace: [ 73.648772][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: kworker/u4:10 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 73.652654][ T3009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.656653][ T3009] Workqueue: bond0 bond_mii_monitor [ 73.658682][ T3009] Call Trace: [ 73.659898][ T3009] [ 73.661008][ T3009] dump_stack_lvl+0x241/0x360 [ 73.662592][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.664208][ T3009] ? __pfx__printk+0x10/0x10 [ 73.665859][ T3009] lockdep_rcu_suspicious+0x226/0x340 [ 73.667816][ T3009] dev_activate+0x925/0x1240 [ 73.669527][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.671735][ T3009] ? __pfx_dev_activate+0x10/0x10 [ 73.673515][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.675689][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.678125][ T3009] ? rfc2863_policy+0x10e/0x300 [ 73.679920][ T3009] linkwatch_do_dev+0xfb/0x170 [ 73.681814][ T3009] ethtool_op_get_link+0x15/0x60 [ 73.683616][ T3009] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 73.685711][ T3009] bond_check_dev_link+0x1f1/0x3f0 [ 73.687758][ T3009] ? __pfx_bond_check_dev_link+0x10/0x10 [ 73.689918][ T3009] bond_mii_monitor+0x49a/0x3170 [ 73.691790][ T3009] ? __lock_acquire+0x1384/0x2050 [ 73.693652][ T3009] ? bond_mii_monitor+0x174/0x3170 [ 73.695537][ T3009] ? __pfx_bond_mii_monitor+0x10/0x10 [ 73.697536][ T3009] ? __pfx_lock_acquire+0x10/0x10 [ 73.699436][ T3009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.701686][ T3009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.704148][ T3009] ? process_scheduled_works+0x976/0x1850 [ 73.706356][ T3009] process_scheduled_works+0xa63/0x1850 [ 73.708483][ T3009] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.710775][ T3009] ? assign_work+0x364/0x3d0 [ 73.712392][ T3009] worker_thread+0x870/0xd30 [ 73.714244][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.716482][ T3009] ? __kthread_parkme+0x169/0x1d0 [ 73.718356][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.720325][ T3009] kthread+0x2f0/0x390 [ 73.721835][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.723732][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.725441][ T3009] ret_from_fork+0x4b/0x80 [ 73.727123][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.728887][ T3009] ret_from_fork_asm+0x1a/0x30 [ 73.730578][ T3009] [ 73.739819][ T3009] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 [ 73.743482][ T3009] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3009, name: kworker/u4:10 [ 73.747011][ T3009] preempt_count: 0, expected: 0 [ 73.750069][ T3009] RCU nest depth: 1, expected: 0 [ 73.752011][ T3009] 3 locks held by kworker/u4:10/3009: [ 73.754121][ T3009] #0: ffff88804f269948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 73.758688][ T3009] #1: ffffc9000d6d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 73.763569][ T3009] #2: ffffffff8e939f20 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 73.767399][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: kworker/u4:10 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 73.771624][ T3009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.775507][ T3009] Workqueue: bond0 bond_mii_monitor [ 73.777432][ T3009] Call Trace: [ 73.778624][ T3009] [ 73.779705][ T3009] dump_stack_lvl+0x241/0x360 [ 73.781476][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.783488][ T3009] ? __pfx__printk+0x10/0x10 [ 73.785302][ T3009] ? __schedule+0x1857/0x4c30 [ 73.787181][ T3009] __might_resched+0x5d4/0x780 [ 73.789039][ T3009] ? preempt_schedule_notrace+0xf6/0x140 [ 73.791101][ T3009] ? __pfx___might_resched+0x10/0x10 [ 73.793189][ T3009] ? __pfx___schedule+0x10/0x10 [ 73.794922][ T3009] ? lockdep_hardirqs_on+0x99/0x150 [ 73.796871][ T3009] down_read+0x8e/0xa40 [ 73.798430][ T3009] ? dump_stack_lvl+0x2f9/0x360 [ 73.800239][ T3009] ? preempt_schedule_notrace+0x100/0x140 [ 73.802439][ T3009] ? __pfx_down_read+0x10/0x10 [ 73.804218][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.806213][ T3009] ? __pfx__printk+0x10/0x10 [ 73.807907][ T3009] ? dev_get_flags+0xb7/0x1d0 [ 73.809740][ T3009] wext_netdev_notifier_call+0x1f/0x120 [ 73.811766][ T3009] notifier_call_chain+0x19f/0x3e0 [ 73.813626][ T3009] netdev_state_change+0x11f/0x1a0 [ 73.815498][ T3009] ? __pfx_netdev_state_change+0x10/0x10 [ 73.817452][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.819581][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.821929][ T3009] ? rfc2863_policy+0x10e/0x300 [ 73.823717][ T3009] linkwatch_do_dev+0x112/0x170 [ 73.825514][ T3009] ethtool_op_get_link+0x15/0x60 [ 73.827345][ T3009] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 73.829325][ T3009] bond_check_dev_link+0x1f1/0x3f0 [ 73.831118][ T3009] ? __pfx_bond_check_dev_link+0x10/0x10 [ 73.833209][ T3009] bond_mii_monitor+0x49a/0x3170 [ 73.834919][ T3009] ? __lock_acquire+0x1384/0x2050 [ 73.836858][ T3009] ? bond_mii_monitor+0x174/0x3170 [ 73.838792][ T3009] ? __pfx_bond_mii_monitor+0x10/0x10 [ 73.840712][ T3009] ? __pfx_lock_acquire+0x10/0x10 [ 73.842582][ T3009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.844744][ T3009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.846677][ T3009] ? process_scheduled_works+0x976/0x1850 [ 73.848694][ T3009] process_scheduled_works+0xa63/0x1850 [ 73.850670][ T3009] ? __pfx_process_scheduled_works+0x10/0x10 [ 73.852888][ T3009] ? assign_work+0x364/0x3d0 [ 73.854548][ T3009] worker_thread+0x870/0xd30 [ 73.856241][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.858367][ T3009] ? __kthread_parkme+0x169/0x1d0 [ 73.860182][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.862041][ T3009] kthread+0x2f0/0x390 [ 73.863533][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 73.865449][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.867136][ T3009] ret_from_fork+0x4b/0x80 [ 73.868682][ T3009] ? __pfx_kthread+0x10/0x10 [ 73.870423][ T3009] ret_from_fork_asm+0x1a/0x30 [ 73.872260][ T3009] [ 73.879455][ T3009] [ 73.880414][ T3009] ============================= [ 73.882275][ T3009] [ BUG: Invalid wait context ] [ 73.884010][ T3009] 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 Tainted: G W [ 73.886841][ T3009] ----------------------------- [ 73.888667][ T3009] kworker/u4:10/3009 is trying to lock: [ 73.890752][ T3009] ffffffff8fccbc10 (net_rwsem){++++}-{3:3}, at: wext_netdev_notifier_call+0x1f/0x120 [ 73.894236][ T3009] other info that might help us debug this: [ 73.896421][ T3009] context-{4:4} [ 73.897735][ T3009] 3 locks held by kworker/u4:10/3009: [ 73.899655][ T3009] #0: ffff88804f269948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 73.903604][ T3009] #1: ffffc9000d6d7d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 73.908334][ T3009] #2: ffffffff8e939f20 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x174/0x3170 [ 73.911983][ T3009] stack backtrace: [ 73.913666][ T3009] CPU: 0 UID: 0 PID: 3009 Comm: kworker/u4:10 Tainted: G W 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 73.919128][ T3009] Tainted: [W]=WARN [ 73.920466][ T3009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.924460][ T3009] Workqueue: bond0 bond_mii_monitor [ 73.926404][ T3009] Call Trace: [ 73.927657][ T3009] [ 73.928753][ T3009] dump_stack_lvl+0x241/0x360 [ 73.930518][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.932459][ T3009] ? __pfx__printk+0x10/0x10 [ 73.934214][ T3009] __lock_acquire+0x154a/0x2050 [ 73.936068][ T3009] lock_acquire+0x1ed/0x550 [ 73.937786][ T3009] ? wext_netdev_notifier_call+0x1f/0x120 [ 73.939906][ T3009] ? __pfx_lock_acquire+0x10/0x10 [ 73.941858][ T3009] ? preempt_schedule_notrace+0xf6/0x140 [ 73.943965][ T3009] ? __pfx___might_resched+0x10/0x10 [ 73.946012][ T3009] ? __pfx___schedule+0x10/0x10 [ 73.947887][ T3009] ? lockdep_hardirqs_on+0x99/0x150 [ 73.949868][ T3009] down_read+0xb1/0xa40 [ 73.951431][ T3009] ? wext_netdev_notifier_call+0x1f/0x120 [ 73.953402][ T3009] ? dump_stack_lvl+0x2f9/0x360 [ 73.955237][ T3009] ? preempt_schedule_notrace+0x100/0x140 [ 73.957366][ T3009] ? __pfx_down_read+0x10/0x10 [ 73.959207][ T3009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.961180][ T3009] ? __pfx__printk+0x10/0x10 [ 73.962866][ T3009] ? dev_get_flags+0xb7/0x1d0 [ 73.964673][ T3009] wext_netdev_notifier_call+0x1f/0x120 [ 73.966724][ T3009] notifier_call_chain+0x19f/0x3e0 [ 73.968676][ T3009] netdev_state_change+0x11f/0x1a0 [ 73.970502][ T3009] ? __pfx_netdev_state_change+0x10/0x10 [ 73.972596][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 73.974910][ T3009] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 73.977441][ T3009] ? rfc2863_policy+0x10e/0x300 [ 73.979533][ T3009] linkwatch_do_dev+0x112/0x170 [ 73.981475][ T3009] ethtool_op_get_link+0x15/0x60 [ 73.983272][ T3009] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 73.985447][ T3009] bond_check_dev_link+0x1f1/0x3f0 [ 73.987427][ T3009] ? __pfx_bond_check_dev_link+0x10/0x10 [ 73.989441][ T3009] bond_mii_monitor+0x49a/0x3170 [ 73.991326][ T3009] ? __lock_acquire+0x1384/0x2050 [ 73.993258][ T3009] ? bond_mii_monitor+0x174/0x3170 [ 73.995175][ T3009] ? __pfx_bond_mii_monitor+0x10/0x10 [ 73.997161][ T3009] ? __pfx_lock_acquire+0x10/0x10 [ 73.999050][ T3009] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.001365][ T3009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.003744][ T3009] ? process_scheduled_works+0x976/0x1850 [ 74.006038][ T3009] process_scheduled_works+0xa63/0x1850 [ 74.008123][ T3009] ? __pfx_process_scheduled_works+0x10/0x10 [ 74.010417][ T3009] ? assign_work+0x364/0x3d0 [ 74.012161][ T3009] worker_thread+0x870/0xd30 [ 74.013912][ T3009] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 74.016076][ T3009] ? __kthread_parkme+0x169/0x1d0 [ 74.018054][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 74.019943][ T3009] kthread+0x2f0/0x390 [ 74.021437][ T3009] ? __pfx_worker_thread+0x10/0x10 [ 74.023255][ T3009] ? __pfx_kthread+0x10/0x10 [ 74.024985][ T3009] ret_from_fork+0x4b/0x80 [ 74.026608][ T3009] ? __pfx_kthread+0x10/0x10 [ 74.028342][ T3009] ret_from_fork_asm+0x1a/0x30 [ 74.029999][ T3009] [ 74.039050][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.041684][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.045483][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.048931][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.051721][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.054664][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.057692][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.061798][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.064619][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 74.067421][ T5329] netlink: 'syz.0.0': attribute type 10 has an invalid length.