=============================
WARNING: suspicious RCU usage
6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 Not tainted
-----------------------------
net/sched/sch_generic.c:1251 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:0/12:
 #0: ffff8880361f0948 ((wq_completion)bond0#9){+.+.}-{0:0}
, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: 
ffffc900000f7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff8e3c15c0 (rcu_read_lock
){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2954

stack backtrace:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6865
 dev_activate+0x45c/0x12d0 net/sched/sch_generic.c:1251
 linkwatch_do_dev+0x13d/0x160 net/core/link_watch.c:182
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63
 bond_check_dev_link+0x196/0x480 drivers/net/bonding/bond_main.c:864
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2734 [inline]
 bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2956
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

=============================
WARNING: suspicious RCU usage
6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 Not tainted
-----------------------------
net/sched/sch_generic.c:1229 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:0/12:
 #0: 
ffff8880361f0948 ((wq_completion)bond0
#9){+.+.}-{0:0}
, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc900000f7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}
, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
 #2: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
 #2: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2954

stack backtrace:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6865
 transition_one_qdisc+0x1d4/0x210 net/sched/sch_generic.c:1229
 netdev_for_each_tx_queue include/linux/netdevice.h:2650 [inline]
 dev_activate+0x216/0x12d0 net/sched/sch_generic.c:1259
 linkwatch_do_dev+0x13d/0x160 net/core/link_watch.c:182
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63
 bond_check_dev_link+0x196/0x480 drivers/net/bonding/bond_main.c:864
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2734 [inline]
 bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2956
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

=============================
WARNING: suspicious RCU usage
6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 Not tainted
-----------------------------
./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage!

other info that might help us debug this:


rcu_scheduler_active = 2, debug_locks = 1
3 locks held by kworker/u32:0/12:
 #0: ffff8880361f0948 ((wq_completion)bond0#9){+.+.}-{0:0}
, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc900000f7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}
, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2954

stack backtrace:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6865
 dev_ingress_queue include/linux/rtnetlink.h:163 [inline]
 dev_activate+0x7f8/0x12d0 net/sched/sch_generic.c:1260
 linkwatch_do_dev+0x13d/0x160 net/core/link_watch.c:182
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63
 bond_check_dev_link+0x196/0x480 drivers/net/bonding/bond_main.c:864
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2734 [inline]
 bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2956
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1523
in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u32:0
preempt_count: 0, expected: 0
RCU nest depth: 1, expected: 0
3 locks held by kworker/u32:0/12:
 #0: 
ffff8880361f0948
 (
(wq_completion)bond0
#9
){+.+.}-{0:0}
, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: 
ffffc900000f7d18
 ((work_completion)(&(&bond->mii_work)->work)
){+.+.}-{0:0}
, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: 
ffffffff8e3c15c0
 (
rcu_read_lock
){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2954
CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 __might_resched+0x3c0/0x5e0 kernel/sched/core.c:8818
 down_read+0x74/0x480 kernel/locking/rwsem.c:1523
 wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351
 wext_netdev_notifier_call+0xe/0x20 net/wireless/wext-core.c:371
 notifier_call_chain+0xb9/0x410 kernel/notifier.c:85
 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2180
 netdev_state_change net/core/dev.c:1536 [inline]
 netdev_state_change+0x113/0x150 net/core/dev.c:1529
 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63
 bond_check_dev_link+0x196/0x480 drivers/net/bonding/bond_main.c:864
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2734 [inline]
 bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2956
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

=============================
[ BUG: Invalid wait context ]
6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 Tainted: G        W          
-----------------------------
kworker/u32:0/12 is trying to lock:
ffffffff90114510 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351
other info that might help us debug this:
context-{5:5}
3 locks held by kworker/u32:0/12:
 #0: ffff8880361f0948 ((wq_completion)bond0#9
){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3213
 #1: ffffc900000f7d18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3214
 #2: ffffffff8e3c15c0
 (rcu_read_lock){....}-{1:3}
, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline]
, at: rcu_read_lock include/linux/rcupdate.h:841 [inline]
, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2954
stack backtrace:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G        W           6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_lock_invalid_wait_context kernel/locking/lockdep.c:4831 [inline]
 check_wait_context kernel/locking/lockdep.c:4903 [inline]
 __lock_acquire+0x3ff/0x1ba0 kernel/locking/lockdep.c:5185
 lock_acquire kernel/locking/lockdep.c:5866 [inline]
 lock_acquire+0x179/0x350 kernel/locking/lockdep.c:5823
 down_read+0x9b/0x480 kernel/locking/rwsem.c:1524
 wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351
 wext_netdev_notifier_call+0xe/0x20 net/wireless/wext-core.c:371
 notifier_call_chain+0xb9/0x410 kernel/notifier.c:85
 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2180
 netdev_state_change net/core/dev.c:1536 [inline]
 netdev_state_change+0x113/0x150 net/core/dev.c:1529
 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63
 bond_check_dev_link+0x196/0x480 drivers/net/bonding/bond_main.c:864
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2734 [inline]
 bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2956
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
------------[ cut here ]------------
RTNL: assertion failed at net/ipv4/devinet.c (1587)
WARNING: CPU: 1 PID: 12 at net/ipv4/devinet.c:1587 inetdev_event+0xc49/0x18a0 net/ipv4/devinet.c:1587
Modules linked in:
CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Tainted: G        W           6.14.0-syzkaller-12456-gacc4d5ff0b61 #0 PREEMPT(full) 
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: bond0 bond_mii_monitor
RIP: 0010:inetdev_event+0xc49/0x18a0 net/ipv4/devinet.c:1587
Code: c4 f4 ff ff e8 08 e4 ce f7 c6 05 8d 34 82 06 01 90 ba 33 06 00 00 48 c7 c6 a0 a7 cd 8c 48 c7 c7 e0 a7 cd 8c e8 38 72 8e f7 90 <0f> 0b 90 90 e9 95 f4 ff ff e8 d9 e3 ce f7 4c 89 ef e8 61 d6 ff ff
RSP: 0018:ffffc900000f77c8 EFLAGS: 00010286
RAX: 0000000000000000 RBX: ffff888043c87400 RCX: ffffffff817ad048
RDX: ffff88801cae4880 RSI: ffffffff817ad055 RDI: 0000000000000001
RBP: 1ffff9200001eeff R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 7361203a4c4e5452 R12: 0000000000000004
R13: ffff8880272d8000 R14: 0000000000000000 R15: ffff8880272d8418
FS:  0000000000000000(0000) GS:ffff8880d6abb000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc85f3a2d58 CR3: 0000000031ef2000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 notifier_call_chain+0xb9/0x410 kernel/notifier.c:85
 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2180
 netdev_state_change net/core/dev.c:1536 [inline]
 netdev_state_change+0x113/0x150 net/core/dev.c:1529
 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186
 linkwatch_sync_dev+0x181/0x210 net/core/link_watch.c:272
 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63
 bond_check_dev_link+0x196/0x480 drivers/net/bonding/bond_main.c:864
 bond_miimon_inspect drivers/net/bonding/bond_main.c:2734 [inline]
 bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2956
 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3319 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400
 kthread+0x3c2/0x780 kernel/kthread.c:464
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>