program: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) [ 84.610454][ T45] Bluetooth: hci0: command tx timeout [ 84.761973][ T5331] netlink: 'syz.0.0': attribute type 10 has an invalid length. [ 84.767052][ T1045] ------------[ cut here ]------------ [ 84.769538][ T1045] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 84.773418][ T1045] WARNING: CPU: 0 PID: 1045 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 84.778903][ T1045] Modules linked in: [ 84.781169][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u4:8 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 84.787002][ T1045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.791668][ T1045] Workqueue: bond0 bond_mii_monitor [ 84.794293][ T1045] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 84.797230][ T1045] Code: 7c fe ff ff e8 7e 25 69 f8 c6 05 e4 dc 33 06 01 90 48 c7 c7 80 c0 92 8c 48 c7 c6 3b 97 9c 8d ba 48 00 00 00 e8 ee cd 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 84.806810][ T1045] RSP: 0018:ffffc900025c7670 EFLAGS: 00010246 [ 84.809662][ T1045] RAX: 682a9acfa3492900 RBX: ffff888043ee2000 RCX: ffff888035920000 [ 84.813435][ T1045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 84.817128][ T1045] RBP: 0000000000000000 R08: ffff88801fc24293 R09: 1ffff11003f84852 [ 84.821064][ T1045] R10: dffffc0000000000 R11: ffffed1003f84853 R12: 1ffff110087dc45d [ 84.825356][ T1045] R13: dffffc0000000000 R14: ffffffff8c1c4a88 R15: 0000000000000000 [ 84.828692][ T1045] FS: 0000000000000000(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 [ 84.832365][ T1045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.835570][ T1045] CR2: 00005600234ae660 CR3: 00000000431fb000 CR4: 0000000000352ef0 [ 84.839291][ T1045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.844035][ T1045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.847789][ T1045] Call Trace: [ 84.849662][ T1045] [ 84.851038][ T1045] ? ethtool_op_get_link+0xd/0x70 [ 84.854263][ T1045] ethtool_op_get_link+0x15/0x70 [ 84.856645][ T1045] bond_check_dev_link+0x447/0x6c0 [ 84.859424][ T1045] ? __pfx_bond_check_dev_link+0x10/0x10 [ 84.862789][ T1045] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 84.866354][ T1045] bond_mii_monitor+0x428/0x2e00 [ 84.868675][ T1045] ? bond_mii_monitor+0x153/0x2e00 [ 84.871733][ T1045] ? __pfx_bond_mii_monitor+0x10/0x10 [ 84.875120][ T1045] ? __lock_acquire+0xab9/0xd20 [ 84.877976][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 84.881777][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.885214][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 84.887823][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 84.890407][ T1045] process_scheduled_works+0xae1/0x17b0 [ 84.893076][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 84.897284][ T1045] worker_thread+0x8a0/0xda0 [ 84.899784][ T1045] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 84.902663][ T1045] ? __kthread_parkme+0x7b/0x200 [ 84.904928][ T1045] kthread+0x70e/0x8a0 [ 84.906693][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 84.909002][ T1045] ? __pfx_kthread+0x10/0x10 [ 84.911071][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.913420][ T1045] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.916107][ T1045] ? __pfx_kthread+0x10/0x10 [ 84.918149][ T1045] ret_from_fork+0x3fc/0x770 [ 84.920137][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 84.922573][ T1045] ? __pfx_kthread+0x10/0x10 [ 84.925113][ T1045] ret_from_fork_asm+0x1a/0x30 [ 84.927278][ T1045] [ 84.928745][ T1045] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.931838][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: kworker/u4:8 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 84.936814][ T1045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.941280][ T1045] Workqueue: bond0 bond_mii_monitor [ 84.943592][ T1045] Call Trace: [ 84.945466][ T1045] [ 84.947045][ T1045] dump_stack_lvl+0x99/0x250 [ 84.949195][ T1045] ? __asan_memcpy+0x40/0x70 [ 84.951393][ T1045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.953787][ T1045] ? __pfx__printk+0x10/0x10 [ 84.956082][ T1045] panic+0x2db/0x790 [ 84.958370][ T1045] ? __pfx_panic+0x10/0x10 [ 84.960819][ T1045] ? ret_from_fork_asm+0x1a/0x30 [ 84.963490][ T1045] __warn+0x31b/0x4b0 [ 84.965301][ T1045] ? __linkwatch_sync_dev+0x303/0x350 [ 84.967531][ T1045] ? __linkwatch_sync_dev+0x303/0x350 [ 84.969993][ T1045] report_bug+0x2be/0x4f0 [ 84.972012][ T1045] ? __linkwatch_sync_dev+0x303/0x350 [ 84.974485][ T1045] ? __linkwatch_sync_dev+0x303/0x350 [ 84.976968][ T1045] ? __linkwatch_sync_dev+0x305/0x350 [ 84.979403][ T1045] handle_bug+0x84/0x160 [ 84.981317][ T1045] exc_invalid_op+0x1a/0x50 [ 84.983450][ T1045] asm_exc_invalid_op+0x1a/0x20 [ 84.985787][ T1045] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 84.988593][ T1045] Code: 7c fe ff ff e8 7e 25 69 f8 c6 05 e4 dc 33 06 01 90 48 c7 c7 80 c0 92 8c 48 c7 c6 3b 97 9c 8d ba 48 00 00 00 e8 ee cd 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 84.997576][ T1045] RSP: 0018:ffffc900025c7670 EFLAGS: 00010246 [ 85.000575][ T1045] RAX: 682a9acfa3492900 RBX: ffff888043ee2000 RCX: ffff888035920000 [ 85.004242][ T1045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 85.007936][ T1045] RBP: 0000000000000000 R08: ffff88801fc24293 R09: 1ffff11003f84852 [ 85.011394][ T1045] R10: dffffc0000000000 R11: ffffed1003f84853 R12: 1ffff110087dc45d [ 85.014967][ T1045] R13: dffffc0000000000 R14: ffffffff8c1c4a88 R15: 0000000000000000 [ 85.018514][ T1045] ? ethtool_op_get_link+0xd/0x70 [ 85.020841][ T1045] ethtool_op_get_link+0x15/0x70 [ 85.023124][ T1045] bond_check_dev_link+0x447/0x6c0 [ 85.025506][ T1045] ? __pfx_bond_check_dev_link+0x10/0x10 [ 85.028043][ T1045] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 85.030931][ T1045] bond_mii_monitor+0x428/0x2e00 [ 85.033203][ T1045] ? bond_mii_monitor+0x153/0x2e00 [ 85.035644][ T1045] ? __pfx_bond_mii_monitor+0x10/0x10 [ 85.038105][ T1045] ? __lock_acquire+0xab9/0xd20 [ 85.040363][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 85.042971][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.045625][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 85.048246][ T1045] ? process_scheduled_works+0x9ef/0x17b0 [ 85.050865][ T1045] process_scheduled_works+0xae1/0x17b0 [ 85.053429][ T1045] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.056163][ T1045] worker_thread+0x8a0/0xda0 [ 85.058291][ T1045] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.061176][ T1045] ? __kthread_parkme+0x7b/0x200 [ 85.063431][ T1045] kthread+0x70e/0x8a0 [ 85.065378][ T1045] ? __pfx_worker_thread+0x10/0x10 [ 85.067782][ T1045] ? __pfx_kthread+0x10/0x10 [ 85.069919][ T1045] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.072255][ T1045] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.074598][ T1045] ? __pfx_kthread+0x10/0x10 [ 85.076676][ T1045] ret_from_fork+0x3fc/0x770 [ 85.078796][ T1045] ? __pfx_ret_from_fork+0x10/0x10 [ 85.081106][ T1045] ? __pfx_kthread+0x10/0x10 [ 85.083201][ T1045] ret_from_fork_asm+0x1a/0x30 [ 85.085485][ T1045] [ 85.087243][ T1045] Kernel Offset: disabled [ 85.089229][ T1045] Rebooting in 86400 seconds..