============================= WARNING: suspicious RCU usage 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 Not tainted ----------------------------- net/sched/sch_generic.c:1286 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u8:2/36: #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3322 #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3215 [inline] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3322 #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x153/0x2e00 drivers/net/bonding/bond_main.c:2982 stack backtrace: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6871 dev_deactivate_queue+0x8f/0x1b0 net/sched/sch_generic.c:1286 netdev_for_each_tx_queue include/linux/netdevice.h:2655 [inline] dev_deactivate_many+0xd3/0xd40 net/sched/sch_generic.c:1362 dev_deactivate+0x118/0x1b0 net/sched/sch_generic.c:1399 linkwatch_do_dev+0x10f/0x170 net/core/link_watch.c:184 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 Not tainted ----------------------------- ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u8:2/36: #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3322 #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3215 [inline] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3322 #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x153/0x2e00 drivers/net/bonding/bond_main.c:2982 stack backtrace: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6871 dev_ingress_queue include/linux/rtnetlink.h:163 [inline] dev_deactivate_many+0x197/0xd40 net/sched/sch_generic.c:1364 dev_deactivate+0x118/0x1b0 net/sched/sch_generic.c:1399 linkwatch_do_dev+0x10f/0x170 net/core/link_watch.c:184 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 Not tainted ----------------------------- net/sched/sch_generic.c:1302 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u8:2/36: #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3322 #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3215 [inline] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3322 #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x153/0x2e00 drivers/net/bonding/bond_main.c:2982 stack backtrace: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6871 dev_reset_queue+0x88/0x1b0 net/sched/sch_generic.c:1302 netdev_for_each_tx_queue include/linux/netdevice.h:2655 [inline] dev_deactivate_many+0x720/0xd40 net/sched/sch_generic.c:1376 dev_deactivate+0x118/0x1b0 net/sched/sch_generic.c:1399 linkwatch_do_dev+0x10f/0x170 net/core/link_watch.c:184 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 Not tainted ----------------------------- net/sched/sch_generic.c:1333 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u8:2/36: #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3322 #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3215 [inline] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3322 #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x153/0x2e00 drivers/net/bonding/bond_main.c:2982 stack backtrace: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x140/0x1d0 kernel/locking/lockdep.c:6871 some_qdisc_is_busy net/sched/sch_generic.c:1333 [inline] dev_deactivate_many+0xa22/0xd40 net/sched/sch_generic.c:1384 dev_deactivate+0x118/0x1b0 net/sched/sch_generic.c:1399 linkwatch_do_dev+0x10f/0x170 net/core/link_watch.c:184 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1538 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 36, name: kworker/u8:2 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 3 locks held by kworker/u8:2/36: #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3322 #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3215 [inline] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3322 #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x153/0x2e00 drivers/net/bonding/bond_main.c:2982 CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 __might_resched+0x495/0x610 kernel/sched/core.c:8687 down_read+0x22/0x2e0 kernel/locking/rwsem.c:1538 wireless_nlevent_flush net/wireless/wext-core.c:351 [inline] wext_netdev_notifier_call+0x28/0x110 net/wireless/wext-core.c:371 notifier_call_chain+0x1b6/0x3e0 kernel/notifier.c:85 netif_state_change+0x284/0x3a0 net/core/dev.c:1582 linkwatch_do_dev+0x117/0x170 net/core/link_watch.c:186 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= [ BUG: Invalid wait context ] 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 Tainted: G W ----------------------------- kworker/u8:2/36 is trying to lock: ffffffff8f52ab50 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush net/wireless/wext-core.c:351 [inline] ffffffff8f52ab50 (net_rwsem){++++}-{4:4}, at: wext_netdev_notifier_call+0x28/0x110 net/wireless/wext-core.c:371 other info that might help us debug this: context-{5:5} 3 locks held by kworker/u8:2/36: #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3214 [inline] #0: ffff88807de62948 ((wq_completion)bond0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 kernel/workqueue.c:3322 #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3215 [inline] #1: ffffc90000ac7bc0 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 kernel/workqueue.c:3322 #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e13c5a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x153/0x2e00 drivers/net/bonding/bond_main.c:2982 stack backtrace: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor Call Trace: dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4833 [inline] check_wait_context kernel/locking/lockdep.c:4905 [inline] __lock_acquire+0xbcb/0xd20 kernel/locking/lockdep.c:5190 lock_acquire+0x120/0x360 kernel/locking/lockdep.c:5871 down_read+0x46/0x2e0 kernel/locking/rwsem.c:1539 wireless_nlevent_flush net/wireless/wext-core.c:351 [inline] wext_netdev_notifier_call+0x28/0x110 net/wireless/wext-core.c:371 notifier_call_chain+0x1b6/0x3e0 kernel/notifier.c:85 netif_state_change+0x284/0x3a0 net/core/dev.c:1582 linkwatch_do_dev+0x117/0x170 net/core/link_watch.c:186 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ------------[ cut here ]------------ RTNL: assertion failed at net/ipv4/devinet.c (1587) WARNING: net/ipv4/devinet.c:1587 at inetdev_event+0x12b8/0x15b0 net/ipv4/devinet.c:1587, CPU#0: kworker/u8:2/36 Modules linked in: CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc5-next-20250711-syzkaller-09053-ga62b7a37e6fc #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 Workqueue: bond0 bond_mii_monitor RIP: 0010:inetdev_event+0x12b8/0x15b0 net/ipv4/devinet.c:1587 Code: 9d 7c 01 cc e8 79 41 bf f7 c6 05 10 3a 8d 05 01 90 48 c7 c7 80 4c 9e 8c 48 c7 c6 a0 4b 9e 8c ba 33 06 00 00 e8 09 0a 83 f7 90 <0f> 0b 90 90 e9 a3 ee ff ff e8 4a 41 bf f7 48 89 df be 03 00 00 00 RSP: 0018:ffffc90000ac7460 EFLAGS: 00010246 RAX: bc012272a3d15c00 RBX: ffff88802f696418 RCX: ffff888142eb1e00 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 RBP: ffffc90000ac7528 R08: 0000000000000003 R09: 0000000000000004 R10: dffffc0000000000 R11: fffffbfff1bfa4d8 R12: 1ffff11005ed2c83 R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff888125bc6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f29d0547286 CR3: 0000000020f22000 CR4: 00000000003526f0 Call Trace: notifier_call_chain+0x1b6/0x3e0 kernel/notifier.c:85 netif_state_change+0x284/0x3a0 net/core/dev.c:1582 linkwatch_do_dev+0x117/0x170 net/core/link_watch.c:186 ethtool_op_get_link+0x15/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x447/0x6c0 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2762 [inline] bond_mii_monitor+0x428/0x2e00 drivers/net/bonding/bond_main.c:2984 process_one_work kernel/workqueue.c:3239 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3322 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3403 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245