============================= WARNING: suspicious RCU usage syzkaller #0 Not tainted ----------------------------- net/sched/sch_generic.c:1288 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:1/14: #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3211 #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3212 #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2983 stack backtrace: CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6876 dev_deactivate_queue+0x1c0/0x210 net/sched/sch_generic.c:1288 netdev_for_each_tx_queue include/linux/netdevice.h:2660 [inline] dev_deactivate_many+0x14b/0xd50 net/sched/sch_generic.c:1364 dev_deactivate+0xf8/0x1c0 net/sched/sch_generic.c:1401 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 __linkwatch_sync_dev+0xfd/0x230 net/core/link_watch.c:282 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x3fc/0x710 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2763 [inline] bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2985 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage syzkaller #0 Not tainted ----------------------------- ./include/linux/rtnetlink.h:163 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:1/14: #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3211 #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3212 #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2983 stack backtrace: CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6876 dev_ingress_queue include/linux/rtnetlink.h:163 [inline] dev_deactivate_many+0xa6c/0xd50 net/sched/sch_generic.c:1366 dev_deactivate+0xf8/0x1c0 net/sched/sch_generic.c:1401 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 __linkwatch_sync_dev+0xfd/0x230 net/core/link_watch.c:282 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x3fc/0x710 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2763 [inline] bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2985 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage syzkaller #0 Not tainted ----------------------------- net/sched/sch_generic.c:1304 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:1/14: #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3211 #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3212 #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2983 stack backtrace: CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6876 dev_reset_queue+0x13f/0x1d0 net/sched/sch_generic.c:1304 netdev_for_each_tx_queue include/linux/netdevice.h:2660 [inline] dev_deactivate_many+0x4e5/0xd50 net/sched/sch_generic.c:1378 dev_deactivate+0xf8/0x1c0 net/sched/sch_generic.c:1401 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 __linkwatch_sync_dev+0xfd/0x230 net/core/link_watch.c:282 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x3fc/0x710 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2763 [inline] bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2985 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= WARNING: suspicious RCU usage syzkaller #0 Not tainted ----------------------------- net/sched/sch_generic.c:1335 suspicious rcu_dereference_protected() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u32:1/14: #0: ffff8880349c6948 ((wq_completion)bond0 #3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3211 #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work) ){+.+.}-{0:0} , at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3212 #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2983 stack backtrace: CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 lockdep_rcu_suspicious+0x166/0x260 kernel/locking/lockdep.c:6876 some_qdisc_is_busy net/sched/sch_generic.c:1335 [inline] dev_deactivate_many+0x876/0xd50 net/sched/sch_generic.c:1386 dev_deactivate+0xf8/0x1c0 net/sched/sch_generic.c:1401 linkwatch_do_dev+0x11e/0x160 net/core/link_watch.c:184 __linkwatch_sync_dev+0xfd/0x230 net/core/link_watch.c:282 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x3fc/0x710 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2763 [inline] bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2985 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1536 in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 14, name: kworker/u32:1 preempt_count: 0, expected: 0 RCU nest depth: 1, expected: 0 3 locks held by kworker/u32:1/14: #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3211 #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3212 #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2983 CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 __might_resched+0x3c0/0x5e0 kernel/sched/core.c:8957 down_read+0x74/0x480 kernel/locking/rwsem.c:1536 wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351 wext_netdev_notifier_call+0xe/0x20 net/wireless/wext-core.c:371 notifier_call_chain+0xb9/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 netif_state_change+0x165/0x3b0 net/core/dev.c:1583 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186 __linkwatch_sync_dev+0xfd/0x230 net/core/link_watch.c:282 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x3fc/0x710 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2763 [inline] bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2985 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ============================= [ BUG: Invalid wait context ] syzkaller #0 Tainted: G W ----------------------------- kworker/u32:1/14 is trying to lock: ffffffff9036f350 (net_rwsem){++++}-{4:4}, at: wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351 other info that might help us debug this: context-{5:5} 3 locks held by kworker/u32:1/14: #0: ffff8880349c6948 ((wq_completion)bond0#3){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 kernel/workqueue.c:3211 #1: ffffc90000117d10 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 kernel/workqueue.c:3212 #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:331 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:841 [inline] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x134/0x2dc0 drivers/net/bonding/bond_main.c:2983 stack backtrace: CPU: 1 UID: 0 PID: 14 Comm: kworker/u32:1 Tainted: G W syzkaller #0 PREEMPT(full) Tainted: [W]=WARN Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: bond0 bond_mii_monitor Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_lock_invalid_wait_context kernel/locking/lockdep.c:4830 [inline] check_wait_context kernel/locking/lockdep.c:4902 [inline] __lock_acquire+0xa27/0x1ce0 kernel/locking/lockdep.c:5187 lock_acquire kernel/locking/lockdep.c:5868 [inline] lock_acquire+0x179/0x350 kernel/locking/lockdep.c:5825 down_read+0x9b/0x480 kernel/locking/rwsem.c:1537 wireless_nlevent_flush+0x1b/0x100 net/wireless/wext-core.c:351 wext_netdev_notifier_call+0xe/0x20 net/wireless/wext-core.c:371 notifier_call_chain+0xb9/0x410 kernel/notifier.c:85 call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:2229 netif_state_change+0x165/0x3b0 net/core/dev.c:1583 linkwatch_do_dev+0x12b/0x160 net/core/link_watch.c:186 __linkwatch_sync_dev+0xfd/0x230 net/core/link_watch.c:282 ethtool_op_get_link+0x1d/0x70 net/ethtool/ioctl.c:63 bond_check_dev_link+0x3fc/0x710 drivers/net/bonding/bond_main.c:865 bond_miimon_inspect drivers/net/bonding/bond_main.c:2763 [inline] bond_mii_monitor+0x3c0/0x2dc0 drivers/net/bonding/bond_main.c:2985 process_one_work+0x9cc/0x1b70 kernel/workqueue.c:3236 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x56a/0x730 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245