[ 75.605291][ T1214] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2025/06/28 14:12:27 ignoring optional flag "sandboxArg"="0" 2025/06/28 14:12:28 parsed 1 programs [ 81.241912][ T6670] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.104641][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 83.129040][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.136836][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.144013][ T6684] bridge_slave_0: entered allmulticast mode [ 83.150517][ T6684] bridge_slave_0: entered promiscuous mode [ 83.158648][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.166169][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.173229][ T6684] bridge_slave_1: entered allmulticast mode [ 83.179732][ T6684] bridge_slave_1: entered promiscuous mode [ 83.192759][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.203004][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.221309][ T6684] team0: Port device team_slave_0 added [ 83.227858][ T6684] team0: Port device team_slave_1 added [ 83.241110][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.248136][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.274067][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.285442][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.292378][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.318430][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.338050][ T6684] hsr_slave_0: entered promiscuous mode [ 83.343924][ T6684] hsr_slave_1: entered promiscuous mode [ 83.660393][ T6684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.668220][ T6684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.683276][ T6684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.691824][ T6684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.708081][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.715186][ T6684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.722464][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.729575][ T6684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.751410][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.761181][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.770231][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.783094][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.793403][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.800551][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.811409][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.818513][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.849535][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.872089][ T6684] veth0_vlan: entered promiscuous mode [ 83.881514][ T6684] veth1_vlan: entered promiscuous mode [ 83.896930][ T6684] veth0_macvtap: entered promiscuous mode [ 83.903963][ T6684] veth1_macvtap: entered promiscuous mode [ 83.915856][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.926782][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.937067][ T6684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.946485][ T6684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.956472][ T6684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.965836][ T6684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.041439][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.128403][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.145006][ T6044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.153015][ T6044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.163458][ T6044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.177353][ T6044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.184582][ T6044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.205795][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.266616][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.927490][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.940271][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.955909][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.963837][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/28 14:12:35 executed programs: 0 [ 86.340292][ T5342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.348965][ T5342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.356833][ T5342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.365691][ T5342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.373016][ T5342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.457813][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 86.496778][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.504039][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.511979][ T6949] bridge_slave_0: entered allmulticast mode [ 86.519708][ T6949] bridge_slave_0: entered promiscuous mode [ 86.527169][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.535176][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.542316][ T6949] bridge_slave_1: entered allmulticast mode [ 86.549863][ T6949] bridge_slave_1: entered promiscuous mode [ 86.569283][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.580219][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.601544][ T6949] team0: Port device team_slave_0 added [ 86.608564][ T6949] team0: Port device team_slave_1 added [ 86.625674][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.632641][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.660448][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.672571][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.681168][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.708872][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.736804][ T6949] hsr_slave_0: entered promiscuous mode [ 86.742766][ T6949] hsr_slave_1: entered promiscuous mode [ 86.750181][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.758064][ T6949] Cannot create hsr debugfs directory [ 87.147274][ T13] bridge_slave_1: left allmulticast mode [ 87.152952][ T13] bridge_slave_1: left promiscuous mode [ 87.160409][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.168786][ T13] bridge_slave_0: left allmulticast mode [ 87.177470][ T13] bridge_slave_0: left promiscuous mode [ 87.183125][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.396537][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.406542][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.415891][ T13] bond0 (unregistering): Released all slaves [ 87.469206][ T6949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.482376][ T6949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.500303][ T13] hsr_slave_0: left promiscuous mode [ 87.506406][ T13] hsr_slave_1: left promiscuous mode [ 87.512017][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.520033][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.528211][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.535871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.549455][ T13] veth1_macvtap: left promiscuous mode [ 87.555052][ T13] veth0_macvtap: left promiscuous mode [ 87.560580][ T13] veth1_vlan: left promiscuous mode [ 87.566161][ T13] veth0_vlan: left promiscuous mode [ 87.817825][ T13] team0 (unregistering): Port device team_slave_1 removed [ 87.847672][ T13] team0 (unregistering): Port device team_slave_0 removed [ 88.059713][ T6949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.067278][ T6949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.117044][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.129035][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.148957][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.156039][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.170956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.178066][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.228765][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.246488][ T6949] veth0_vlan: entered promiscuous mode [ 88.254081][ T6949] veth1_vlan: entered promiscuous mode [ 88.267610][ T6949] veth0_macvtap: entered promiscuous mode [ 88.275054][ T6949] veth1_macvtap: entered promiscuous mode [ 88.289980][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.301532][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.315092][ T6949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.323769][ T6949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.333241][ T6949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.342150][ T6949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.405187][ T6044] Bluetooth: hci0: command tx timeout [ 88.606547][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.621336][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.639599][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.648471][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.692477][ T7107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 88.711510][ T7107] veth0_to_bond: entered allmulticast mode [ 88.734406][ T35] [ 88.736858][ T35] ============================= [ 88.741695][ T35] WARNING: suspicious RCU usage [ 88.746764][ T35] 6.16.0-rc3-syzkaller #0 Not tainted [ 88.752179][ T35] ----------------------------- [ 88.757137][ T35] net/sched/sch_generic.c:1286 suspicious rcu_dereference_protected() usage! [ 88.766199][ T35] [ 88.766199][ T35] other info that might help us debug this: [ 88.766199][ T35] [ 88.776536][ T35] [ 88.776536][ T35] rcu_scheduler_active = 2, debug_locks = 1 [ 88.784649][ T35] 3 locks held by kworker/u8:2/35: [ 88.789763][ T35] #0: ffff888122019148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x34c/0x8c0 [ 88.800860][ T35] #1: ffffc90000187e18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x373/0x8c0 [ 88.813851][ T35] #2: ffffffff87c12120 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x71/0x1380 [ 88.823562][ T35] [ 88.823562][ T35] stack backtrace: [ 88.829689][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 88.829709][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.829718][ T35] Workqueue: bond0 bond_mii_monitor [ 88.829739][ T35] Call Trace: [ 88.829744][ T35] [ 88.829749][ T35] dump_stack_lvl+0x128/0x1c0 [ 88.829778][ T35] lockdep_rcu_suspicious+0x128/0x170 [ 88.829805][ T35] dev_deactivate_many+0xd7/0x950 [ 88.829829][ T35] dev_deactivate+0x75/0xc0 [ 88.829848][ T35] linkwatch_do_dev+0x9a/0xe0 [ 88.829869][ T35] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 88.829893][ T35] ethtool_op_get_link+0x15/0x40 [ 88.829922][ T35] bond_check_dev_link+0x205/0x370 [ 88.829944][ T35] bond_mii_monitor+0x23a/0x1380 [ 88.829960][ T35] ? bond_mii_monitor+0x71/0x1380 [ 88.829978][ T35] ? process_scheduled_works+0x373/0x8c0 [ 88.830001][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.830018][ T35] ? process_scheduled_works+0x373/0x8c0 [ 88.830037][ T35] process_scheduled_works+0x3e1/0x8c0 [ 88.830071][ T35] worker_thread+0x36d/0x4e0 [ 88.830096][ T35] kthread+0x2ba/0x300 [ 88.830118][ T35] ? __pfx_worker_thread+0x10/0x10 [ 88.830138][ T35] ? __pfx_kthread+0x10/0x10 [ 88.830160][ T35] ret_from_fork+0x26d/0x380 [ 88.830182][ T35] ? __pfx_kthread+0x10/0x10 [ 88.830205][ T35] ret_from_fork_asm+0x1a/0x30 [ 88.830236][ T35] [ 88.832114][ T35] [ 88.974624][ T35] ============================= [ 88.979478][ T35] WARNING: suspicious RCU usage [ 88.984367][ T35] 6.16.0-rc3-syzkaller #0 Not tainted [ 88.989731][ T35] ----------------------------- [ 88.994628][ T35] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 89.003659][ T35] [ 89.003659][ T35] other info that might help us debug this: [ 89.003659][ T35] [ 89.013945][ T35] [ 89.013945][ T35] rcu_scheduler_active = 2, debug_locks = 1 [ 89.022071][ T35] 3 locks held by kworker/u8:2/35: [ 89.027230][ T35] #0: ffff888122019148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x34c/0x8c0 [ 89.038261][ T35] #1: ffffc90000187e18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x373/0x8c0 [ 89.051190][ T35] #2: ffffffff87c12120 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x71/0x1380 [ 89.060834][ T35] [ 89.060834][ T35] stack backtrace: [ 89.066820][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 89.066840][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.066849][ T35] Workqueue: bond0 bond_mii_monitor [ 89.066866][ T35] Call Trace: [ 89.066871][ T35] [ 89.066876][ T35] dump_stack_lvl+0x128/0x1c0 [ 89.066912][ T35] lockdep_rcu_suspicious+0x128/0x170 [ 89.066939][ T35] dev_deactivate_many+0x276/0x950 [ 89.066964][ T35] dev_deactivate+0x75/0xc0 [ 89.066984][ T35] linkwatch_do_dev+0x9a/0xe0 [ 89.067004][ T35] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 89.067027][ T35] ethtool_op_get_link+0x15/0x40 [ 89.067049][ T35] bond_check_dev_link+0x205/0x370 [ 89.067068][ T35] bond_mii_monitor+0x23a/0x1380 [ 89.067083][ T35] ? bond_mii_monitor+0x71/0x1380 [ 89.067099][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.067122][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.067138][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.067156][ T35] process_scheduled_works+0x3e1/0x8c0 [ 89.067186][ T35] worker_thread+0x36d/0x4e0 [ 89.067209][ T35] kthread+0x2ba/0x300 [ 89.067231][ T35] ? __pfx_worker_thread+0x10/0x10 [ 89.067250][ T35] ? __pfx_kthread+0x10/0x10 [ 89.067271][ T35] ret_from_fork+0x26d/0x380 [ 89.067293][ T35] ? __pfx_kthread+0x10/0x10 [ 89.067313][ T35] ret_from_fork_asm+0x1a/0x30 [ 89.067342][ T35] [ 89.072701][ T35] [ 89.215411][ T35] ============================= [ 89.220253][ T35] WARNING: suspicious RCU usage [ 89.225158][ T35] 6.16.0-rc3-syzkaller #0 Not tainted [ 89.230525][ T35] ----------------------------- [ 89.235418][ T35] net/sched/sch_generic.c:1302 suspicious rcu_dereference_protected() usage! [ 89.244172][ T35] [ 89.244172][ T35] other info that might help us debug this: [ 89.244172][ T35] [ 89.254461][ T35] [ 89.254461][ T35] rcu_scheduler_active = 2, debug_locks = 1 [ 89.262525][ T35] 3 locks held by kworker/u8:2/35: [ 89.267854][ T35] #0: ffff888122019148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x34c/0x8c0 [ 89.278972][ T35] #1: ffffc90000187e18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x373/0x8c0 [ 89.291973][ T35] #2: ffffffff87c12120 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x71/0x1380 [ 89.301613][ T35] [ 89.301613][ T35] stack backtrace: [ 89.307537][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 89.307554][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.307563][ T35] Workqueue: bond0 bond_mii_monitor [ 89.307580][ T35] Call Trace: [ 89.307585][ T35] [ 89.307590][ T35] dump_stack_lvl+0x128/0x1c0 [ 89.307619][ T35] lockdep_rcu_suspicious+0x128/0x170 [ 89.307645][ T35] dev_reset_queue+0x88/0x130 [ 89.307664][ T35] dev_deactivate_many+0x5b5/0x950 [ 89.307680][ T35] ? dev_deactivate_many+0x399/0x950 [ 89.307700][ T35] dev_deactivate+0x75/0xc0 [ 89.307718][ T35] linkwatch_do_dev+0x9a/0xe0 [ 89.307739][ T35] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 89.307762][ T35] ethtool_op_get_link+0x15/0x40 [ 89.307784][ T35] bond_check_dev_link+0x205/0x370 [ 89.307807][ T35] bond_mii_monitor+0x23a/0x1380 [ 89.307822][ T35] ? bond_mii_monitor+0x71/0x1380 [ 89.307840][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.307882][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.307899][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.307918][ T35] process_scheduled_works+0x3e1/0x8c0 [ 89.307950][ T35] worker_thread+0x36d/0x4e0 [ 89.307974][ T35] kthread+0x2ba/0x300 [ 89.307996][ T35] ? __pfx_worker_thread+0x10/0x10 [ 89.308015][ T35] ? __pfx_kthread+0x10/0x10 [ 89.308037][ T35] ret_from_fork+0x26d/0x380 [ 89.308059][ T35] ? __pfx_kthread+0x10/0x10 [ 89.308083][ T35] ret_from_fork_asm+0x1a/0x30 [ 89.308113][ T35] [ 89.313581][ T35] [ 89.465830][ T35] ============================= [ 89.470680][ T35] WARNING: suspicious RCU usage [ 89.475639][ T35] 6.16.0-rc3-syzkaller #0 Not tainted [ 89.481012][ T35] ----------------------------- [ 89.485978][ T35] net/sched/sch_generic.c:1333 suspicious rcu_dereference_protected() usage! [ 89.494815][ T35] [ 89.494815][ T35] other info that might help us debug this: [ 89.494815][ T35] [ 89.505102][ T35] [ 89.505102][ T35] rcu_scheduler_active = 2, debug_locks = 1 [ 89.513252][ T35] 3 locks held by kworker/u8:2/35: [ 89.518430][ T35] #0: ffff888122019148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x34c/0x8c0 [ 89.529556][ T35] #1: ffffc90000187e18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x373/0x8c0 [ 89.542420][ T35] #2: ffffffff87c12120 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x71/0x1380 [ 89.552040][ T35] [ 89.552040][ T35] stack backtrace: [ 89.557977][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 89.557993][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.558001][ T35] Workqueue: bond0 bond_mii_monitor [ 89.558018][ T35] Call Trace: [ 89.558023][ T35] [ 89.558028][ T35] dump_stack_lvl+0x128/0x1c0 [ 89.558057][ T35] lockdep_rcu_suspicious+0x128/0x170 [ 89.558083][ T35] dev_deactivate_many+0x7f4/0x950 [ 89.558100][ T35] ? dev_deactivate_many+0x399/0x950 [ 89.558121][ T35] dev_deactivate+0x75/0xc0 [ 89.558140][ T35] linkwatch_do_dev+0x9a/0xe0 [ 89.558161][ T35] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 89.558184][ T35] ethtool_op_get_link+0x15/0x40 [ 89.558207][ T35] bond_check_dev_link+0x205/0x370 [ 89.558225][ T35] bond_mii_monitor+0x23a/0x1380 [ 89.558238][ T35] ? bond_mii_monitor+0x71/0x1380 [ 89.558254][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.558274][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.558290][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.558309][ T35] process_scheduled_works+0x3e1/0x8c0 [ 89.558341][ T35] worker_thread+0x36d/0x4e0 [ 89.558364][ T35] kthread+0x2ba/0x300 [ 89.558385][ T35] ? __pfx_worker_thread+0x10/0x10 [ 89.558404][ T35] ? __pfx_kthread+0x10/0x10 [ 89.558426][ T35] ret_from_fork+0x26d/0x380 [ 89.558447][ T35] ? __pfx_kthread+0x10/0x10 [ 89.558470][ T35] ret_from_fork_asm+0x1a/0x30 [ 89.558501][ T35] [ 89.710183][ T35] [ 89.712520][ T35] ============================= [ 89.717541][ T35] [ BUG: Invalid wait context ] [ 89.722463][ T35] 6.16.0-rc3-syzkaller #0 Not tainted [ 89.727829][ T35] ----------------------------- [ 89.732669][ T35] kworker/u8:2/35 is trying to lock: [ 89.738035][ T35] ffffffff880df4c0 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x1c/0xd0 [ 89.747434][ T35] other info that might help us debug this: [ 89.753314][ T35] context-{5:5} [ 89.756762][ T35] 3 locks held by kworker/u8:2/35: [ 89.761866][ T35] #0: ffff888122019148 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_scheduled_works+0x34c/0x8c0 [ 89.772832][ T35] #1: ffffc90000187e18 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x373/0x8c0 [ 89.785616][ T35] #2: ffffffff87c12120 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x71/0x1380 [ 89.795193][ T35] stack backtrace: [ 89.798914][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 89.798933][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.798942][ T35] Workqueue: bond0 bond_mii_monitor [ 89.798959][ T35] Call Trace: [ 89.798963][ T35] [ 89.798968][ T35] dump_stack_lvl+0x128/0x1c0 [ 89.798993][ T35] __lock_acquire+0xc52/0x2100 [ 89.799014][ T35] ? finish_task_switch+0x14e/0x3c0 [ 89.799030][ T35] ? rcu_is_watching+0x10/0x40 [ 89.799046][ T35] ? __schedule+0x7d1/0x16e0 [ 89.799057][ T35] ? preempt_schedule_notrace+0x6c/0xa0 [ 89.799074][ T35] ? wext_netdev_notifier_call+0x1c/0xd0 [ 89.799095][ T35] lock_acquire+0xe9/0x270 [ 89.799116][ T35] ? wext_netdev_notifier_call+0x1c/0xd0 [ 89.799140][ T35] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 89.799161][ T35] down_read+0x2c/0xf0 [ 89.799177][ T35] ? wext_netdev_notifier_call+0x1c/0xd0 [ 89.799198][ T35] wext_netdev_notifier_call+0x1c/0xd0 [ 89.799218][ T35] notifier_call_chain+0xce/0x200 [ 89.799238][ T35] netif_state_change+0x15f/0x1b0 [ 89.799256][ T35] linkwatch_do_dev+0xa2/0xe0 [ 89.799277][ T35] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 89.799300][ T35] ethtool_op_get_link+0x15/0x40 [ 89.799322][ T35] bond_check_dev_link+0x205/0x370 [ 89.799338][ T35] bond_mii_monitor+0x23a/0x1380 [ 89.799353][ T35] ? bond_mii_monitor+0x71/0x1380 [ 89.799368][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.799387][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.799402][ T35] ? process_scheduled_works+0x373/0x8c0 [ 89.799419][ T35] process_scheduled_works+0x3e1/0x8c0 [ 89.799440][ T35] worker_thread+0x36d/0x4e0 [ 89.799460][ T35] kthread+0x2ba/0x300 [ 89.799481][ T35] ? __pfx_worker_thread+0x10/0x10 [ 89.799499][ T35] ? __pfx_kthread+0x10/0x10 [ 89.799520][ T35] ret_from_fork+0x26d/0x380 [ 89.799541][ T35] ? __pfx_kthread+0x10/0x10 [ 89.799561][ T35] ret_from_fork_asm+0x1a/0x30 [ 89.799579][ T35] [ 89.996762][ T35] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 90.013766][ T7213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 90.082141][ T7224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18'. [ 90.111825][ T7227] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19'. [ 90.148456][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 90.182568][ T7235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'. [ 90.219198][ T7239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 90.275896][ T7249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 90.310439][ T7253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.24'. [ 90.329576][ T7257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25'. [ 90.485073][ T5342] Bluetooth: hci0: command tx timeout 2025/06/28 14:12:40 executed programs: 68 [ 92.575855][ T5342] Bluetooth: hci0: command tx timeout [ 93.697677][ T7967] __nla_validate_parse: 196 callbacks suppressed [ 93.697688][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.222'. [ 93.718426][ T7969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.223'. [ 93.732351][ T7971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.224'. [ 93.757446][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.225'. [ 93.777460][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.226'. [ 93.791947][ T7977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.227'. [ 93.817798][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 93.835683][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.229'. [ 93.849875][ T7983] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 93.878132][ T7985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.231'. [ 94.644333][ T5342] Bluetooth: hci0: command tx timeout 2025/06/28 14:12:45 executed programs: 365