Warning: Permanently added '[localhost]:9080' (ED25519) to the list of known hosts. [ 86.828763][ T1029] cfg80211: failed to load regulatory.db 2025/09/20 17:59:39 parsed 1 programs [ 89.529247][ T40] audit: type=1400 audit(1758391181.564:116): avc: denied { unlink } for pid=6248 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.644570][ T6248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.697983][ T6258] chnl_net:caif_netlink_parms(): no params data found [ 92.899813][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.902964][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.905865][ T6258] bridge_slave_0: entered allmulticast mode [ 92.911266][ T6258] bridge_slave_0: entered promiscuous mode [ 92.949222][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.951583][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.953880][ T6258] bridge_slave_1: entered allmulticast mode [ 92.956467][ T6258] bridge_slave_1: entered promiscuous mode [ 93.039279][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.087896][ T6044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.091654][ T6044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.095002][ T6044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.100413][ T6044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.103979][ T6044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.135932][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.194405][ T6258] team0: Port device team_slave_0 added [ 93.217488][ T6258] team0: Port device team_slave_1 added [ 93.303112][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.305469][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.313665][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.322117][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.324324][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.335874][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.459993][ T6258] hsr_slave_0: entered promiscuous mode [ 93.463141][ T6258] hsr_slave_1: entered promiscuous mode [ 93.533660][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.540040][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.754331][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.757508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.767564][ T40] audit: type=1401 audit(1758391185.804:117): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 94.011053][ T6258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.021086][ T6258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.030101][ T6258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.035199][ T6258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.093484][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.105278][ T6258] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.145880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.148220][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.155892][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.158186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.342439][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.365074][ T6258] veth0_vlan: entered promiscuous mode [ 94.373817][ T6258] veth1_vlan: entered promiscuous mode [ 94.401353][ T6258] veth0_macvtap: entered promiscuous mode [ 94.406355][ T6258] veth1_macvtap: entered promiscuous mode [ 94.418660][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.426577][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.435173][ T1184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439984][ T1184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.443585][ T1184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.446651][ T1184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/20 17:59:46 executed programs: 0 [ 94.525345][ T6044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.541679][ T5328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.544890][ T5328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.548213][ T5328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.551125][ T5328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.553993][ T6345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.561949][ T5328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.564988][ T5328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.572313][ T5328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.575763][ T5328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.579715][ T5328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.582538][ T6352] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.583982][ T5328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.592739][ T6350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.597936][ T5328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.599813][ T6350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.601488][ T5328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.606812][ T5328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.618902][ T5328] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.622098][ T5328] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.962397][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 95.010702][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 95.029087][ T6351] chnl_net:caif_netlink_parms(): no params data found [ 95.112340][ T6340] chnl_net:caif_netlink_parms(): no params data found [ 95.164107][ T79] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.295283][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.298163][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.300769][ T6348] bridge_slave_0: entered allmulticast mode [ 95.304100][ T6348] bridge_slave_0: entered promiscuous mode [ 95.384004][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.386227][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.389544][ T6348] bridge_slave_1: entered allmulticast mode [ 95.392401][ T6348] bridge_slave_1: entered promiscuous mode [ 95.395237][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.397593][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.399835][ T6341] bridge_slave_0: entered allmulticast mode [ 95.402842][ T6341] bridge_slave_0: entered promiscuous mode [ 95.422563][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.425065][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.427653][ T6340] bridge_slave_0: entered allmulticast mode [ 95.430855][ T6340] bridge_slave_0: entered promiscuous mode [ 95.452840][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.455759][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.459136][ T6351] bridge_slave_0: entered allmulticast mode [ 95.462741][ T6351] bridge_slave_0: entered promiscuous mode [ 95.484465][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.487289][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.489694][ T6341] bridge_slave_1: entered allmulticast mode [ 95.493232][ T6341] bridge_slave_1: entered promiscuous mode [ 95.515120][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.517762][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.520148][ T6340] bridge_slave_1: entered allmulticast mode [ 95.523417][ T6340] bridge_slave_1: entered promiscuous mode [ 95.526186][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.529483][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.532051][ T6351] bridge_slave_1: entered allmulticast mode [ 95.534977][ T6351] bridge_slave_1: entered promiscuous mode [ 95.640831][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.645486][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.668653][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.674159][ T6351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.680776][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.704997][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.725620][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.730815][ T6351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.820747][ T6348] team0: Port device team_slave_0 added [ 95.824072][ T6341] team0: Port device team_slave_0 added [ 95.849358][ T6340] team0: Port device team_slave_0 added [ 95.861194][ T6351] team0: Port device team_slave_0 added [ 95.865204][ T6348] team0: Port device team_slave_1 added [ 95.870525][ T6341] team0: Port device team_slave_1 added [ 95.874316][ T6340] team0: Port device team_slave_1 added [ 95.893292][ T6351] team0: Port device team_slave_1 added [ 96.011378][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.014219][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.025655][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.031179][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.033745][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.043007][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.048793][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.051326][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.060398][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.087602][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.090353][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.099540][ T6351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.104080][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.106691][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.117869][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.122961][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.125254][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.135114][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.150569][ T6351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.153082][ T6351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.161981][ T6351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.166181][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.168608][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.176929][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.230177][ T6341] hsr_slave_0: entered promiscuous mode [ 96.232536][ T6341] hsr_slave_1: entered promiscuous mode [ 96.234628][ T6341] debugfs: 'hsr0' already exists in 'hsr' [ 96.236436][ T6341] Cannot create hsr debugfs directory [ 96.342072][ T6348] hsr_slave_0: entered promiscuous mode [ 96.345211][ T6348] hsr_slave_1: entered promiscuous mode [ 96.348866][ T6348] debugfs: 'hsr0' already exists in 'hsr' [ 96.351166][ T6348] Cannot create hsr debugfs directory [ 96.357867][ T6340] hsr_slave_0: entered promiscuous mode [ 96.360188][ T6340] hsr_slave_1: entered promiscuous mode [ 96.362513][ T6340] debugfs: 'hsr0' already exists in 'hsr' [ 96.364322][ T6340] Cannot create hsr debugfs directory [ 96.460906][ T6351] hsr_slave_0: entered promiscuous mode [ 96.463201][ T6351] hsr_slave_1: entered promiscuous mode [ 96.465448][ T6351] debugfs: 'hsr0' already exists in 'hsr' [ 96.468309][ T6351] Cannot create hsr debugfs directory [ 96.477992][ T79] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.588071][ T5328] Bluetooth: hci0: command tx timeout [ 96.667326][ T5328] Bluetooth: hci2: command tx timeout [ 96.677402][ T5328] Bluetooth: hci3: command tx timeout [ 96.677416][ T6344] Bluetooth: hci1: command tx timeout [ 96.876822][ T6341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.900998][ T6341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.905246][ T6341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.915257][ T6341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.961196][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.984977][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.993969][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.997167][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.010838][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.013862][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.064533][ T79] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.169547][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.198214][ T6341] veth0_vlan: entered promiscuous mode [ 97.205320][ T6341] veth1_vlan: entered promiscuous mode [ 97.218306][ T6341] veth0_macvtap: entered promiscuous mode [ 97.225102][ T6341] veth1_macvtap: entered promiscuous mode [ 97.242660][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.259627][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.273314][ T6348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.280026][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.300034][ T6348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.308412][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.312064][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.315726][ T6348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.323137][ T6348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.329929][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.372005][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.375183][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.403755][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.406971][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.434952][ T40] audit: type=1400 audit(1758391189.464:118): avc: denied { create } for pid=6418 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.446970][ T40] audit: type=1400 audit(1758391189.474:119): avc: denied { ioctl } for pid=6418 comm="syz.1.17" path="socket:[11728]" dev="sockfs" ino=11728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.450399][ T6419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 97.464189][ T6419] veth0_to_bond: entered allmulticast mode [ 97.470285][ T14] [ 97.471490][ T14] ============================= [ 97.473100][ T14] WARNING: suspicious RCU usage [ 97.474632][ T14] syzkaller #0 Not tainted [ 97.477061][ T14] ----------------------------- [ 97.480279][ T14] net/sched/sch_generic.c:1288 suspicious rcu_dereference_protected() usage! [ 97.484011][ T14] [ 97.484011][ T14] other info that might help us debug this: [ 97.484011][ T14] [ 97.485323][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.488206][ T14] [ 97.488206][ T14] rcu_scheduler_active = 2, debug_locks = 1 [ 97.493570][ T14] 3 locks held by kworker/u32:1/14: [ 97.495869][ T14] #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 97.500255][ T14] #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 97.502745][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.505182][ T14] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 97.512032][ T14] [ 97.512032][ T14] stack backtrace: [ 97.514442][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 97.514456][ T14] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.514463][ T14] Workqueue: bond0 bond_mii_monitor [ 97.514479][ T14] Call Trace: [ 97.514484][ T14] [ 97.514488][ T14] dump_stack_lvl+0x16c/0x1f0 [ 97.514504][ T14] lockdep_rcu_suspicious+0x166/0x260 [ 97.514523][ T14] dev_deactivate_queue+0x1c0/0x210 [ 97.514536][ T14] dev_deactivate_many+0x14b/0xd50 [ 97.514551][ T14] ? __pfx_dev_deactivate_many+0x10/0x10 [ 97.514566][ T14] ? find_held_lock+0x2b/0x80 [ 97.514580][ T14] dev_deactivate+0xf8/0x1c0 [ 97.514593][ T14] ? __pfx_dev_deactivate+0x10/0x10 [ 97.514606][ T14] ? veth_get_iflink+0x11b/0x2c0 [ 97.514619][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.514633][ T14] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 97.514649][ T14] linkwatch_do_dev+0x11e/0x160 [ 97.514666][ T14] __linkwatch_sync_dev+0xfd/0x230 [ 97.514676][ T14] ethtool_op_get_link+0x1d/0x70 [ 97.514691][ T14] bond_check_dev_link+0x3fc/0x710 [ 97.514703][ T14] ? __pfx_bond_check_dev_link+0x10/0x10 [ 97.514719][ T14] bond_mii_monitor+0x3c0/0x2dc0 [ 97.514736][ T14] ? __pfx_bond_mii_monitor+0x10/0x10 [ 97.514752][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.514767][ T14] process_one_work+0x9cc/0x1b70 [ 97.514783][ T14] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 97.514799][ T14] ? __pfx_process_one_work+0x10/0x10 [ 97.514819][ T14] ? assign_work+0x1a0/0x250 [ 97.514831][ T14] worker_thread+0x6c8/0xf10 [ 97.514848][ T14] ? __pfx_worker_thread+0x10/0x10 [ 97.514860][ T14] kthread+0x3c2/0x780 [ 97.514871][ T14] ? __pfx_kthread+0x10/0x10 [ 97.514883][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.514896][ T14] ? __pfx_kthread+0x10/0x10 [ 97.514907][ T14] ret_from_fork+0x56a/0x730 [ 97.514917][ T14] ? __pfx_kthread+0x10/0x10 [ 97.514928][ T14] ret_from_fork_asm+0x1a/0x30 [ 97.514947][ T14] [ 97.515417][ T14] [ 97.518502][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.522591][ T14] ============================= [ 97.522600][ T14] WARNING: suspicious RCU usage [ 97.525087][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.526130][ T14] syzkaller #0 Not tainted [ 97.526139][ T14] ----------------------------- [ 97.529553][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.531136][ T14] ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! [ 97.533263][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.535271][ T14] [ 97.535271][ T14] other info that might help us debug this: [ 97.535271][ T14] [ 97.610941][ T14] [ 97.610941][ T14] rcu_scheduler_active = 2, debug_locks = 1 [ 97.613423][ T14] 3 locks held by kworker/u32:1/14: [ 97.615036][ T14] #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 97.618381][ T14] #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 97.622200][ T14] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 97.625158][ T14] [ 97.625158][ T14] stack backtrace: [ 97.626985][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 97.626999][ T14] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.627006][ T14] Workqueue: bond0 bond_mii_monitor [ 97.627019][ T14] Call Trace: [ 97.627023][ T14] [ 97.627027][ T14] dump_stack_lvl+0x16c/0x1f0 [ 97.627043][ T14] lockdep_rcu_suspicious+0x166/0x260 [ 97.627062][ T14] dev_deactivate_many+0xa6c/0xd50 [ 97.627077][ T14] ? __pfx_dev_deactivate_many+0x10/0x10 [ 97.627105][ T14] ? find_held_lock+0x2b/0x80 [ 97.627119][ T14] dev_deactivate+0xf8/0x1c0 [ 97.627132][ T14] ? __pfx_dev_deactivate+0x10/0x10 [ 97.627145][ T14] ? veth_get_iflink+0x11b/0x2c0 [ 97.627158][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.627172][ T14] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 97.627188][ T14] linkwatch_do_dev+0x11e/0x160 [ 97.627207][ T14] __linkwatch_sync_dev+0xfd/0x230 [ 97.627217][ T14] ethtool_op_get_link+0x1d/0x70 [ 97.627232][ T14] bond_check_dev_link+0x3fc/0x710 [ 97.627243][ T14] ? __pfx_bond_check_dev_link+0x10/0x10 [ 97.627260][ T14] bond_mii_monitor+0x3c0/0x2dc0 [ 97.627276][ T14] ? __pfx_bond_mii_monitor+0x10/0x10 [ 97.627292][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.627308][ T14] process_one_work+0x9cc/0x1b70 [ 97.627323][ T14] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 97.627339][ T14] ? __pfx_process_one_work+0x10/0x10 [ 97.627354][ T14] ? assign_work+0x1a0/0x250 [ 97.627366][ T14] worker_thread+0x6c8/0xf10 [ 97.627383][ T14] ? __pfx_worker_thread+0x10/0x10 [ 97.627395][ T14] kthread+0x3c2/0x780 [ 97.627408][ T14] ? __pfx_kthread+0x10/0x10 [ 97.627419][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.627432][ T14] ? __pfx_kthread+0x10/0x10 [ 97.627443][ T14] ret_from_fork+0x56a/0x730 [ 97.627454][ T14] ? __pfx_kthread+0x10/0x10 [ 97.627464][ T14] ret_from_fork_asm+0x1a/0x30 [ 97.627484][ T14] [ 97.671363][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.672203][ T14] [ 97.691957][ T14] ============================= [ 97.693491][ T14] WARNING: suspicious RCU usage [ 97.693810][ T6348] veth0_vlan: entered promiscuous mode [ 97.695077][ T14] syzkaller #0 Not tainted [ 97.698462][ T14] ----------------------------- [ 97.699991][ T14] net/sched/sch_generic.c:1304 suspicious rcu_dereference_protected() usage! [ 97.701746][ T6348] veth1_vlan: entered promiscuous mode [ 97.702712][ T14] [ 97.702712][ T14] other info that might help us debug this: [ 97.702712][ T14] [ 97.702718][ T14] [ 97.702718][ T14] rcu_scheduler_active = 2, debug_locks = 1 [ 97.710169][ T14] 3 locks held by kworker/u32:1/14: [ 97.711801][ T14] #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 97.715128][ T14] #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 97.718933][ T14] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 97.721969][ T14] [ 97.721969][ T14] stack backtrace: [ 97.723952][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 97.723965][ T14] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.723973][ T14] Workqueue: bond0 bond_mii_monitor [ 97.723997][ T14] Call Trace: [ 97.724003][ T14] [ 97.724007][ T14] dump_stack_lvl+0x16c/0x1f0 [ 97.724024][ T14] lockdep_rcu_suspicious+0x166/0x260 [ 97.724042][ T14] dev_reset_queue+0x13f/0x1d0 [ 97.724057][ T14] dev_deactivate_many+0x4e5/0xd50 [ 97.724073][ T14] ? __pfx_dev_deactivate_many+0x10/0x10 [ 97.724087][ T14] ? find_held_lock+0x2b/0x80 [ 97.724102][ T14] dev_deactivate+0xf8/0x1c0 [ 97.724115][ T14] ? __pfx_dev_deactivate+0x10/0x10 [ 97.724128][ T14] ? veth_get_iflink+0x11b/0x2c0 [ 97.724141][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.724156][ T14] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 97.724171][ T14] linkwatch_do_dev+0x11e/0x160 [ 97.724188][ T14] __linkwatch_sync_dev+0xfd/0x230 [ 97.724198][ T14] ethtool_op_get_link+0x1d/0x70 [ 97.724213][ T14] bond_check_dev_link+0x3fc/0x710 [ 97.724225][ T14] ? __pfx_bond_check_dev_link+0x10/0x10 [ 97.724241][ T14] bond_mii_monitor+0x3c0/0x2dc0 [ 97.724258][ T14] ? __pfx_bond_mii_monitor+0x10/0x10 [ 97.724274][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.724290][ T14] process_one_work+0x9cc/0x1b70 [ 97.724306][ T14] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 97.724322][ T14] ? __pfx_process_one_work+0x10/0x10 [ 97.724357][ T14] ? assign_work+0x1a0/0x250 [ 97.724373][ T14] worker_thread+0x6c8/0xf10 [ 97.724390][ T14] ? __pfx_worker_thread+0x10/0x10 [ 97.724402][ T14] kthread+0x3c2/0x780 [ 97.724413][ T14] ? __pfx_kthread+0x10/0x10 [ 97.724425][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.724438][ T14] ? __pfx_kthread+0x10/0x10 [ 97.724449][ T14] ret_from_fork+0x56a/0x730 [ 97.724459][ T14] ? __pfx_kthread+0x10/0x10 [ 97.724470][ T14] ret_from_fork_asm+0x1a/0x30 [ 97.724502][ T14] [ 97.724629][ T14] [ 97.736394][ T6348] veth0_macvtap: entered promiscuous mode [ 97.737892][ T14] ============================= [ 97.743133][ T6348] veth1_macvtap: entered promiscuous mode [ 97.744311][ T14] WARNING: suspicious RCU usage [ 97.744318][ T14] syzkaller #0 Not tainted [ 97.756727][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.757903][ T14] ----------------------------- [ 97.757912][ T14] net/sched/sch_generic.c:1335 suspicious rcu_dereference_protected() usage! [ 97.757924][ T14] [ 97.757924][ T14] other info that might help us debug this: [ 97.757924][ T14] [ 97.757930][ T14] [ 97.757930][ T14] rcu_scheduler_active = 2, debug_locks = 1 [ 97.757940][ T14] 3 locks held by kworker/u32:1/14: [ 97.757950][ T14] #0: ffff8880349c6948 ((wq_completion)bond0 [ 97.765979][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.767266][ T14] #3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 97.774899][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.776837][ T14] #1: [ 97.779215][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.780728][ T14] ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work) [ 97.783195][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.784556][ T14] ){+.+.}-{0:0} [ 97.785880][ T1157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.787390][ T14] , at: process_one_work+0x929/0x1b70 [ 97.787409][ T14] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 97.787442][ T14] [ 97.787442][ T14] stack backtrace: [ 97.787449][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 97.787462][ T14] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.787470][ T14] Workqueue: bond0 bond_mii_monitor [ 97.787483][ T14] Call Trace: [ 97.787487][ T14] [ 97.787491][ T14] dump_stack_lvl+0x16c/0x1f0 [ 97.787507][ T14] lockdep_rcu_suspicious+0x166/0x260 [ 97.787526][ T14] dev_deactivate_many+0x876/0xd50 [ 97.787542][ T14] ? __pfx_dev_deactivate_many+0x10/0x10 [ 97.787556][ T14] ? find_held_lock+0x2b/0x80 [ 97.787571][ T14] dev_deactivate+0xf8/0x1c0 [ 97.787584][ T14] ? __pfx_dev_deactivate+0x10/0x10 [ 97.787597][ T14] ? veth_get_iflink+0x11b/0x2c0 [ 97.787609][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.787624][ T14] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 97.787639][ T14] linkwatch_do_dev+0x11e/0x160 [ 97.787657][ T14] __linkwatch_sync_dev+0xfd/0x230 [ 97.787668][ T14] ethtool_op_get_link+0x1d/0x70 [ 97.787682][ T14] bond_check_dev_link+0x3fc/0x710 [ 97.787694][ T14] ? __pfx_bond_check_dev_link+0x10/0x10 [ 97.787710][ T14] bond_mii_monitor+0x3c0/0x2dc0 [ 97.787727][ T14] ? __pfx_bond_mii_monitor+0x10/0x10 [ 97.787743][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.787758][ T14] process_one_work+0x9cc/0x1b70 [ 97.787777][ T14] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 97.787792][ T14] ? __pfx_process_one_work+0x10/0x10 [ 97.787807][ T14] ? assign_work+0x1a0/0x250 [ 97.787819][ T14] worker_thread+0x6c8/0xf10 [ 97.787836][ T14] ? __pfx_worker_thread+0x10/0x10 [ 97.787848][ T14] kthread+0x3c2/0x780 [ 97.787859][ T14] ? __pfx_kthread+0x10/0x10 [ 97.787871][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.787884][ T14] ? __pfx_kthread+0x10/0x10 [ 97.787895][ T14] ret_from_fork+0x56a/0x730 [ 97.787905][ T14] ? __pfx_kthread+0x10/0x10 [ 97.787916][ T14] ret_from_fork_asm+0x1a/0x30 [ 97.787935][ T14] [ 97.788313][ T14] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1536 [ 97.917580][ T14] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 14, name: kworker/u32:1 [ 97.921082][ T14] preempt_count: 0, expected: 0 [ 97.922981][ T14] RCU nest depth: 1, expected: 0 [ 97.924937][ T14] 3 locks held by kworker/u32:1/14: [ 97.926963][ T14] #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 97.931107][ T14] #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 97.935735][ T14] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 97.939821][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 97.939836][ T14] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.939844][ T14] Workqueue: bond0 bond_mii_monitor [ 97.939859][ T14] Call Trace: [ 97.939863][ T14] [ 97.939867][ T14] dump_stack_lvl+0x16c/0x1f0 [ 97.939883][ T14] __might_resched+0x3c0/0x5e0 [ 97.939898][ T14] ? __pfx___might_resched+0x10/0x10 [ 97.939913][ T14] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 97.939931][ T14] down_read+0x74/0x480 [ 97.939948][ T14] ? __pfx_down_read+0x10/0x10 [ 97.939964][ T14] ? dev_map_notification+0x6a/0xb00 [ 97.939974][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.939987][ T14] ? nexthop_flush_dev+0x5b/0x230 [ 97.940004][ T14] wireless_nlevent_flush+0x1b/0x100 [ 97.940019][ T14] wext_netdev_notifier_call+0xe/0x20 [ 97.940032][ T14] notifier_call_chain+0xb9/0x410 [ 97.940048][ T14] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 97.940064][ T14] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 97.940080][ T14] call_netdevice_notifiers_info+0xbe/0x140 [ 97.940098][ T14] netif_state_change+0x165/0x3b0 [ 97.940114][ T14] ? __pfx_netif_state_change+0x10/0x10 [ 97.940132][ T14] ? veth_get_iflink+0x11b/0x2c0 [ 97.940145][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.940160][ T14] linkwatch_do_dev+0x12b/0x160 [ 97.940178][ T14] __linkwatch_sync_dev+0xfd/0x230 [ 97.940187][ T14] ethtool_op_get_link+0x1d/0x70 [ 97.940203][ T14] bond_check_dev_link+0x3fc/0x710 [ 97.940215][ T14] ? __pfx_bond_check_dev_link+0x10/0x10 [ 97.940232][ T14] bond_mii_monitor+0x3c0/0x2dc0 [ 97.940249][ T14] ? __pfx_bond_mii_monitor+0x10/0x10 [ 97.940265][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.940281][ T14] process_one_work+0x9cc/0x1b70 [ 97.940297][ T14] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 97.940313][ T14] ? __pfx_process_one_work+0x10/0x10 [ 97.940328][ T14] ? assign_work+0x1a0/0x250 [ 97.940365][ T14] worker_thread+0x6c8/0xf10 [ 97.940383][ T14] ? __pfx_worker_thread+0x10/0x10 [ 97.940395][ T14] kthread+0x3c2/0x780 [ 97.940406][ T14] ? __pfx_kthread+0x10/0x10 [ 97.940417][ T14] ? rcu_is_watching+0x12/0xc0 [ 97.940430][ T14] ? __pfx_kthread+0x10/0x10 [ 97.940441][ T14] ret_from_fork+0x56a/0x730 [ 97.940452][ T14] ? __pfx_kthread+0x10/0x10 [ 97.940462][ T14] ret_from_fork_asm+0x1a/0x30 [ 97.940482][ T14] [ 97.940487][ T14] [ 98.035030][ T14] ============================= [ 98.036937][ T14] [ BUG: Invalid wait context ] [ 98.038854][ T14] syzkaller #0 Tainted: G W [ 98.041192][ T14] ----------------------------- [ 98.043122][ T14] kworker/u32:1/14 is trying to lock: [ 98.045283][ T14] ffffffff9036f350 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 [ 98.048894][ T14] other info that might help us debug this: [ 98.051172][ T14] context-{5:5} [ 98.052542][ T14] 3 locks held by kworker/u32:1/14: [ 98.054568][ T14] #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 98.058661][ T14] #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 98.063373][ T14] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 [ 98.067059][ T14] stack backtrace: [ 98.068544][ T14] CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.068567][ T14] Tainted: [W]=WARN [ 98.068572][ T14] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.068584][ T14] Workqueue: bond0 bond_mii_monitor [ 98.068599][ T14] Call Trace: [ 98.068605][ T14] [ 98.068611][ T14] dump_stack_lvl+0x116/0x1f0 [ 98.068633][ T14] __lock_acquire+0xa27/0x1ce0 [ 98.068662][ T14] lock_acquire+0x179/0x350 [ 98.068674][ T14] ? wireless_nlevent_flush+0x1b/0x100 [ 98.068690][ T14] ? __pfx___might_resched+0x10/0x10 [ 98.068713][ T14] down_read+0x9b/0x480 [ 98.068734][ T14] ? wireless_nlevent_flush+0x1b/0x100 [ 98.068751][ T14] ? __pfx_down_read+0x10/0x10 [ 98.068770][ T14] ? dev_map_notification+0x6a/0xb00 [ 98.068791][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.068809][ T14] ? nexthop_flush_dev+0x5b/0x230 [ 98.068831][ T14] wireless_nlevent_flush+0x1b/0x100 [ 98.068849][ T14] wext_netdev_notifier_call+0xe/0x20 [ 98.068861][ T14] notifier_call_chain+0xb9/0x410 [ 98.068877][ T14] ? __pfx_wext_netdev_notifier_call+0x10/0x10 [ 98.068890][ T14] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 98.068905][ T14] call_netdevice_notifiers_info+0xbe/0x140 [ 98.068923][ T14] netif_state_change+0x165/0x3b0 [ 98.068938][ T14] ? __pfx_netif_state_change+0x10/0x10 [ 98.068955][ T14] ? veth_get_iflink+0x11b/0x2c0 [ 98.068967][ T14] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.068980][ T14] linkwatch_do_dev+0x12b/0x160 [ 98.068997][ T14] __linkwatch_sync_dev+0xfd/0x230 [ 98.069006][ T14] ethtool_op_get_link+0x1d/0x70 [ 98.069021][ T14] bond_check_dev_link+0x3fc/0x710 [ 98.069033][ T14] ? __pfx_bond_check_dev_link+0x10/0x10 [ 98.069045][ T14] bond_mii_monitor+0x3c0/0x2dc0 [ 98.069058][ T14] ? __pfx_bond_mii_monitor+0x10/0x10 [ 98.069072][ T14] ? rcu_is_watching+0x12/0xc0 [ 98.069086][ T14] process_one_work+0x9cc/0x1b70 [ 98.069099][ T14] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 98.069114][ T14] ? __pfx_process_one_work+0x10/0x10 [ 98.069127][ T14] ? assign_work+0x1a0/0x250 [ 98.069137][ T14] worker_thread+0x6c8/0xf10 [ 98.069150][ T14] ? __pfx_worker_thread+0x10/0x10 [ 98.069162][ T14] kthread+0x3c2/0x780 [ 98.069171][ T14] ? __pfx_kthread+0x10/0x10 [ 98.069182][ T14] ? rcu_is_watching+0x12/0xc0 [ 98.069194][ T14] ? __pfx_kthread+0x10/0x10 [ 98.069204][ T14] ret_from_fork+0x56a/0x730 [ 98.069214][ T14] ? __pfx_kthread+0x10/0x10 [ 98.069224][ T14] ret_from_fork_asm+0x1a/0x30 [ 98.069240][ T14] [ 98.171477][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 98.177349][ T1157] ------------[ cut here ]------------ [ 98.179845][ T1157] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 98.183561][ T1157] WARNING: CPU: 0 PID: 1157 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 98.187930][ T1157] Modules linked in: [ 98.189613][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u32:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.194217][ T1157] Tainted: [W]=WARN [ 98.195824][ T1157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.200545][ T1157] Workqueue: bond0 bond_mii_monitor [ 98.202584][ T1157] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 98.205042][ T1157] Code: 05 ff ff ff e8 84 53 43 f8 c6 05 11 8f 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 08 e6 8c 48 c7 c7 40 08 e6 8c e8 d4 f7 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a7 ab 90 e8 2e bb a9 f8 e9 [ 98.212197][ T1157] RSP: 0018:ffffc900061df9f0 EFLAGS: 00010286 [ 98.214184][ T1157] RAX: 0000000000000000 RBX: ffff8880259b2000 RCX: ffffffff817a4388 [ 98.217416][ T1157] RDX: ffff888029364880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 98.220679][ T1157] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 98.223826][ T1157] R10: 0000000000000000 R11: 7361203a4c4e5452 R12: 1ffff92000c3bf48 [ 98.226961][ T1157] R13: ffff8880259b2cc1 R14: ffffffff8c59e740 R15: ffffffff89b17420 [ 98.230361][ T1157] FS: 0000000000000000(0000) GS:ffff8880d66b2000(0000) knlGS:0000000000000000 [ 98.234137][ T1157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.236913][ T1157] CR2: 0000200000000300 CR3: 00000000337c8000 CR4: 0000000000352ef0 [ 98.240372][ T1157] Call Trace: [ 98.241666][ T1157] [ 98.242625][ T1157] ethtool_op_get_link+0x1d/0x70 [ 98.244236][ T1157] bond_check_dev_link+0x3fc/0x710 [ 98.245922][ T1157] ? __pfx_bond_check_dev_link+0x10/0x10 [ 98.247677][ T6448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21'. [ 98.247902][ T1157] ? lock_acquire+0x2cd/0x350 [ 98.252732][ T1157] ? do_raw_spin_lock+0x12c/0x2b0 [ 98.254369][ T1157] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 98.256231][ T1157] bond_mii_monitor+0x3c0/0x2dc0 [ 98.257957][ T1157] ? __pfx_bond_mii_monitor+0x10/0x10 [ 98.259678][ T1157] ? trace_sched_exit_tp+0xd1/0x120 [ 98.261438][ T1157] ? lock_acquire+0x2cd/0x350 [ 98.262971][ T1157] ? rcu_is_watching+0x12/0xc0 [ 98.264571][ T1157] process_one_work+0x9cc/0x1b70 [ 98.266231][ T1157] ? __pfx_fsnotify_connector_destroy_workfn+0x10/0x10 [ 98.268590][ T1157] ? __pfx_process_one_work+0x10/0x10 [ 98.270302][ T1157] ? assign_work+0x1a0/0x250 [ 98.271867][ T1157] worker_thread+0x6c8/0xf10 [ 98.273373][ T1157] ? __kthread_parkme+0x19e/0x250 [ 98.274971][ T1157] ? __pfx_worker_thread+0x10/0x10 [ 98.276669][ T1157] kthread+0x3c2/0x780 [ 98.278207][ T1157] ? __pfx_kthread+0x10/0x10 [ 98.279672][ T1157] ? rcu_is_watching+0x12/0xc0 [ 98.281229][ T1157] ? __pfx_kthread+0x10/0x10 [ 98.282771][ T1157] ret_from_fork+0x56a/0x730 [ 98.284328][ T1157] ? __pfx_kthread+0x10/0x10 [ 98.285837][ T1157] ret_from_fork_asm+0x1a/0x30 [ 98.287534][ T1157] [ 98.288615][ T1157] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.291011][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u32:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.295498][ T1157] Tainted: [W]=WARN [ 98.297117][ T1157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.301415][ T1157] Workqueue: bond0 bond_mii_monitor [ 98.303484][ T1157] Call Trace: [ 98.304922][ T1157] [ 98.306159][ T1157] dump_stack_lvl+0x3d/0x1f0 [ 98.307982][ T1157] vpanic+0x6e8/0x7a0 [ 98.309347][ T1157] ? __pfx_vpanic+0x10/0x10 [ 98.310687][ T1157] ? __linkwatch_sync_dev+0x1ed/0x230 [ 98.312205][ T1157] panic+0xca/0xd0 [ 98.313302][ T1157] ? __pfx_panic+0x10/0x10 [ 98.314789][ T1157] ? check_panic_on_warn+0x1f/0xb0 [ 98.316235][ T1157] check_panic_on_warn+0xab/0xb0 [ 98.317935][ T1157] __warn+0xf6/0x3c0 [ 98.319240][ T1157] ? __pfx_vprintk_emit+0x10/0x10 [ 98.320981][ T1157] ? __linkwatch_sync_dev+0x1ed/0x230 [ 98.322912][ T1157] report_bug+0x3c3/0x580 [ 98.324651][ T1157] ? __linkwatch_sync_dev+0x1ed/0x230 [ 98.326572][ T1157] handle_bug+0x184/0x210 [ 98.328449][ T1157] exc_invalid_op+0x17/0x50 [ 98.330038][ T1157] asm_exc_invalid_op+0x1a/0x20 [ 98.331607][ T1157] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 98.333696][ T1157] Code: 05 ff ff ff e8 84 53 43 f8 c6 05 11 8f 1b 07 01 90 ba 48 00 00 00 48 c7 c6 a0 08 e6 8c 48 c7 c7 40 08 e6 8c e8 d4 f7 01 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 54 a7 ab 90 e8 2e bb a9 f8 e9 [ 98.340359][ T1157] RSP: 0018:ffffc900061df9f0 EFLAGS: 00010286 [ 98.342624][ T1157] RAX: 0000000000000000 RBX: ffff8880259b2000 RCX: ffffffff817a4388 [ 98.345484][ T1157] RDX: ffff888029364880 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 98.348513][ T1157] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 98.352159][ T1157] R10: 0000000000000000 R11: 7361203a4c4e5452 R12: 1ffff92000c3bf48 [ 98.355554][ T1157] R13: ffff8880259b2cc1 R14: ffffffff8c59e740 R15: ffffffff89b17420 [ 98.358905][ T1157] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 98.360983][ T1157] ? __warn_printk+0x198/0x350 [ 98.362855][ T1157] ? __warn_printk+0x1a5/0x350 [ 98.364930][ T1157] ethtool_op_get_link+0x1d/0x70 [ 98.367069][ T1157] bond_check_dev_link+0x3fc/0x710 [ 98.369263][ T1157] ? __pfx_bond_check_dev_link+0x10/0x10 [ 98.371640][ T1157] ? lock_acquire+0x2cd/0x350 [ 98.373728][ T1157] ? do_raw_spin_lock+0x12c/0x2b0 [ 98.375802][ T1157] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 98.378049][ T1157] bond_mii_monitor+0x3c0/0x2dc0 [ 98.380097][ T1157] ? __pfx_bond_mii_monitor+0x10/0x10 [ 98.382424][ T1157] ? trace_sched_exit_tp+0xd1/0x120 [ 98.384621][ T1157] ? lock_acquire+0x2cd/0x350 [ 98.386824][ T1157] ? rcu_is_watching+0x12/0xc0 [ 98.389227][ T1157] process_one_work+0x9cc/0x1b70 [ 98.391572][ T1157] ? __pfx_fsnotify_connector_destroy_workfn+0x10/0x10 [ 98.394366][ T1157] ? __pfx_process_one_work+0x10/0x10 [ 98.396317][ T1157] ? assign_work+0x1a0/0x250 [ 98.398061][ T1157] worker_thread+0x6c8/0xf10 [ 98.399795][ T1157] ? __kthread_parkme+0x19e/0x250 [ 98.401661][ T1157] ? __pfx_worker_thread+0x10/0x10 [ 98.403532][ T1157] kthread+0x3c2/0x780 [ 98.405056][ T1157] ? __pfx_kthread+0x10/0x10 [ 98.406798][ T1157] ? rcu_is_watching+0x12/0xc0 [ 98.408473][ T1157] ? __pfx_kthread+0x10/0x10 [ 98.410344][ T1157] ret_from_fork+0x56a/0x730 [ 98.412287][ T1157] ? __pfx_kthread+0x10/0x10 [ 98.414292][ T1157] ret_from_fork_asm+0x1a/0x30 [ 98.416441][ T1157] [ 98.418701][ T1157] Kernel Offset: disabled [ 98.420624][ T1157] Rebooting in 86400 seconds..