DUID 00:04:8e:2a:3c:04:ae:1e:09:29:3f:0a:36:6a:00:10:eb:de forked to background, child pid 3836 [ 28.980728][ T3837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.995316][ T3837] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. syzkaller login: [ 53.055362][ T4162] chnl_net:caif_netlink_parms(): no params data found [ 53.099593][ T4162] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.107049][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.115021][ T4162] device bridge_slave_0 entered promiscuous mode [ 53.124180][ T4162] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.131321][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.139288][ T4162] device bridge_slave_1 entered promiscuous mode [ 53.159888][ T4162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.170808][ T4162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.193775][ T4162] team0: Port device team_slave_0 added [ 53.200956][ T4162] team0: Port device team_slave_1 added [ 53.219456][ T4162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.226384][ T4162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.252479][ T4162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.264786][ T4162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.271768][ T4162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.297659][ T4162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.326769][ T4162] device hsr_slave_0 entered promiscuous mode [ 53.333955][ T4162] device hsr_slave_1 entered promiscuous mode [ 53.416645][ T4162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.426910][ T4162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.435667][ T4162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.444665][ T4162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.465436][ T4162] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.472717][ T4162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.480421][ T4162] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.487452][ T4162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.531079][ T4162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.543832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.553704][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.562209][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.571552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 53.584181][ T4162] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.595439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.604147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.611359][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.623640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.632155][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.639230][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.657660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.666610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.678263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.690151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.701492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.712005][ T4162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.727502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.735135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.747187][ T4162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.764582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.782631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.791064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.798675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.808257][ T4162] device veth0_vlan entered promiscuous mode [ 53.819746][ T4162] device veth1_vlan entered promiscuous mode [ 53.837321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.846034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.854288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.865207][ T4162] device veth0_macvtap entered promiscuous mode [ 53.874425][ T4162] device veth1_macvtap entered promiscuous mode [ 53.890972][ T4162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.898389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.907483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.918505][ T4162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.926209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready executing program [ 53.937632][ T4162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.946685][ T4162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.957625][ T4162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.966503][ T4162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.006833][ T4162] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 57.029087][ T1111] [ 57.031571][ T1111] ============================= [ 57.036394][ T1111] WARNING: suspicious RCU usage [ 57.041257][ T1111] 5.15.180-syzkaller #0 Not tainted [ 57.046448][ T1111] ----------------------------- [ 57.051310][ T1111] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 57.059651][ T1111] [ 57.059651][ T1111] other info that might help us debug this: [ 57.059651][ T1111] [ 57.069909][ T1111] [ 57.069909][ T1111] rcu_scheduler_active = 2, debug_locks = 1 [ 57.077963][ T1111] 8 locks held by kworker/0:2/1111: [ 57.083186][ T1111] #0: ffff88807305e538 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 57.094181][ T1111] #1: ffffc900051a7d20 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 57.106741][ T1111] #2: ffff888078480ad8 (&peer->endpoint_lock){++..}-{2:2}, at: wg_socket_send_skb_to_peer+0x56/0x1d0 [ 57.117749][ T1111] #3: ffffffff8cb1f540 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 57.127475][ T1111] #4: ffffffff8cb1f540 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 57.137065][ T1111] #5: ffffffff8cb1f540 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 57.146646][ T1111] #6: ffff888078587908 (&sch->q.lock){+...}-{2:2}, at: __dev_queue_xmit+0xc1f/0x32b0 [ 57.156219][ T1111] #7: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 57.165534][ T1111] [ 57.165534][ T1111] stack backtrace: [ 57.171434][ T1111] CPU: 0 PID: 1111 Comm: kworker/0:2 Not tainted 5.15.180-syzkaller #0 [ 57.179656][ T1111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.189703][ T1111] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 57.195784][ T1111] Call Trace: [ 57.199056][ T1111] [ 57.201989][ T1111] dump_stack_lvl+0x1e3/0x2d0 [ 57.206748][ T1111] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 57.212378][ T1111] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 57.217918][ T1111] qdisc_lookup+0xa8/0x630 [ 57.222344][ T1111] qdisc_tree_reduce_backlog+0x212/0x4f0 [ 57.227970][ T1111] sfq_enqueue+0x1214/0x23e0 [ 57.232563][ T1111] ? decrement_one_qlen+0x550/0x550 [ 57.237749][ T1111] ? read_lock_is_recursive+0x10/0x10 [ 57.243116][ T1111] tbf_enqueue+0x35d/0x6f0 [ 57.247528][ T1111] dev_qdisc_enqueue+0x47/0x240 [ 57.252361][ T1111] ? __dev_queue_xmit+0xcba/0x32b0 [ 57.257458][ T1111] __dev_queue_xmit+0xe32/0x32b0 [ 57.262389][ T1111] ? dev_queue_xmit+0x20/0x20 [ 57.267055][ T1111] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 57.273034][ T1111] ? print_irqtrace_events+0x210/0x210 [ 57.278494][ T1111] ? __ipv6_neigh_lookup_noref+0x59b/0x730 [ 57.284299][ T1111] ? ip6_finish_output2+0xcbf/0x15a0 [ 57.289582][ T1111] ip6_finish_output2+0xead/0x15a0 [ 57.294693][ T1111] ? __ip6_finish_output+0x7d0/0x7d0 [ 57.299966][ T1111] ? __ip6_finish_output+0x645/0x7d0 [ 57.305363][ T1111] udp_tunnel6_xmit_skb+0x536/0x970 [ 57.310567][ T1111] send6+0x6b8/0xad0 [ 57.314465][ T1111] ? send4+0x1130/0x1130 [ 57.318691][ T1111] ? __local_bh_disable_ip+0x183/0x210 [ 57.324142][ T1111] ? del_timer+0x183/0x310 [ 57.328541][ T1111] ? wg_socket_send_skb_to_peer+0x56/0x1d0 [ 57.334335][ T1111] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 57.340044][ T1111] wg_packet_tx_worker+0x1a1/0x7a0 [ 57.345150][ T1111] process_one_work+0x8a1/0x10c0 [ 57.350102][ T1111] ? worker_detach_from_pool+0x260/0x260 [ 57.355726][ T1111] ? _raw_spin_lock_irqsave+0x120/0x120 [ 57.361256][ T1111] ? kthread_data+0x4e/0xc0 [ 57.365748][ T1111] ? wq_worker_running+0x97/0x170 [ 57.370754][ T1111] worker_thread+0xaca/0x1280 [ 57.375411][ T1111] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 57.381299][ T1111] kthread+0x3f6/0x4f0 [ 57.385351][ T1111] ? rcu_lock_release+0x20/0x20 [ 57.390189][ T1111] ? kthread_blkcg+0xd0/0xd0 [ 57.394767][ T1111] ret_from_fork+0x1f/0x30 [ 57.399196][ T1111]