============================= WARNING: suspicious RCU usage 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Not tainted ----------------------------- net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:2/43: #0: ffff8880360f6948 ((wq_completion)bond0 ){+.+.}-{0:0} , at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3213 #1: ffffc900007b7d18 ( (work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0} , at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3214 #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960 stack backtrace: CPU: 0 UID: 0 PID: 43 Comm: kworker/u32:2 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6847 dev_deactivate_queue+0x1c0/0x210 net/sched/sch_generic.c:1285 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x145/0xc30 net/sched/sch_generic.c:1361 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1398 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline] bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ============================= WARNING: suspicious RCU usage 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Not tainted ----------------------------- ./include/linux/rtnetlink.h:162 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:2/43: #0: ffff8880360f6948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3213 #1: ffffc900007b7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3214 #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960 stack backtrace: CPU: 0 UID: 0 PID: 43 Comm: kworker/u32:2 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6847 dev_ingress_queue include/linux/rtnetlink.h:162 [inline] dev_deactivate_many+0x980/0xc30 net/sched/sch_generic.c:1363 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1398 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline] bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ============================= WARNING: suspicious RCU usage 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Not tainted ----------------------------- net/sched/sch_generic.c:1301 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:2/43: #0: ffff8880360f6948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3213 #1: ffffc900007b7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3214 #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960 stack backtrace: CPU: 0 UID: 0 PID: 43 Comm: kworker/u32:2 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6847 dev_reset_queue+0x13f/0x1d0 net/sched/sch_generic.c:1301 netdev_for_each_tx_queue include/linux/netdevice.h:2590 [inline] dev_deactivate_many+0x401/0xc30 net/sched/sch_generic.c:1375 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1398 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline] bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ============================= WARNING: suspicious RCU usage 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Not tainted ----------------------------- net/sched/sch_generic.c:1332 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:2/43: #0: ffff8880360f6948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3213 #1: ffffc900007b7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3214 #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960 stack backtrace: CPU: 0 UID: 0 PID: 43 Comm: kworker/u32:2 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x210/0x3c0 kernel/locking/lockdep.c:6847 some_qdisc_is_busy net/sched/sch_generic.c:1332 [inline] dev_deactivate_many+0x78b/0xc30 net/sched/sch_generic.c:1383 dev_deactivate+0xf9/0x1c0 net/sched/sch_generic.c:1398 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline] bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 43, name: kworker/u32:2 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 3 locks held by kworker/u32:2/43: #0: ffff8880360f6948 ( (wq_completion)bond0 ){+.+.}-{0:0} , at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3213 #1: ffffc900007b7d18 ((work_completion)(&(&bond->mii_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3214 #2: ffffffff8e1bd140 (rcu_read_lock ){....}-{1:3} , at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] , at: rcu_read_lock include/linux/rcupdate.h:849 [inline] , at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960 CPU: 0 UID: 0 PID: 43 Comm: kworker/u32:2 Not tainted 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 __might_resched+0x3c0/0x5e0 kernel/sched/core.c:8767 down_read+0x73/0x330 kernel/locking/rwsem.c:1523 wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351 wext_netdev_notifier_call+0xe/0x20 net/wireless/wext-core.c:371 notifier_call_chain+0xb7/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2206 netdev_state_change net/core/dev.c:1537 [inline] netdev_state_change+0x115/0x150 net/core/dev.c:1530 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline] bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 ============================= [ BUG: Invalid wait context ] 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Tainted: G W ----------------------------- kworker/u32:2/43 is trying to lock: ffffffff8fee23d0 ( net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351 other info that might help us debug this: context-{5:5} 3 locks held by kworker/u32:2/43: #0: ffff8880360f6948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 kernel/workqueue.c:3213 #1: ffffc900007b7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 kernel/workqueue.c:3214 #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x140/0x2d90 drivers/net/bonding/bond_main.c:2960 stack backtrace: CPU: 0 UID: 0 PID: 43 Comm: kworker/u32:2 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 Tainted: [W]=WARN Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4828 [inline] check_wait_context kernel/locking/lockdep.c:4900 [inline] __lock_acquire+0x878/0x3c40 kernel/locking/lockdep.c:5178 lock_acquire.part.0+0x11b/0x380 kernel/locking/lockdep.c:5851 down_read+0x9a/0x330 kernel/locking/rwsem.c:1524 wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351 wext_netdev_notifier_call+0xe/0x20 net/wireless/wext-core.c:371 notifier_call_chain+0xb7/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2206 netdev_state_change net/core/dev.c:1537 [inline] netdev_state_change+0x115/0x150 net/core/dev.c:1530 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:62 bond_check_dev_link+0x197/0x490 drivers/net/bonding/bond_main.c:873 bond_miimon_inspect drivers/net/bonding/bond_main.c:2740 [inline] bond_mii_monitor+0x3c1/0x2d90 drivers/net/bonding/bond_main.c:2962 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf00 kernel/workqueue.c:3400 kthread+0x3af/0x750 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bridge_slave_1: left allmulticast mode bridge_slave_1: left promiscuous mode bridge0: port 2(bridge_slave_1) entered disabled state bridge_slave_0: left allmulticast mode bridge_slave_0: left promiscuous mode bridge0: port 1(bridge_slave_0) entered disabled state bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves bond0 (unregistering): (slave bond_slave_0): Releasing backup interface bond0 (unregistering): (slave bond_slave_1): Releasing backup interface bond0 (unregistering): Released all slaves hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 hsr_slave_0: left promiscuous mode hsr_slave_1: left promiscuous mode batman_adv: batadv0: Interface deactivated: batadv_slave_0 batman_adv: batadv0: Removing interface: batadv_slave_0 batman_adv: batadv0: Interface deactivated: batadv_slave_1 batman_adv: batadv0: Removing interface: batadv_slave_1 veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode veth1_macvtap: left promiscuous mode veth0_macvtap: left promiscuous mode veth1_vlan: left promiscuous mode veth0_vlan: left promiscuous mode team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed team0 (unregistering): Port device team_slave_1 removed team0 (unregistering): Port device team_slave_0 removed