netdevsim netdevsim6 eth16: bond_netdev_event received NETDEV_GOING_DOWN net eth16: siw: event 10 BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 1 UID: 0 PID: 12075 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) Call trace: show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C) __dump_stack+0x30/0x40 lib/dump_stack.c:94 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120 dump_stack+0x1c/0x28 lib/dump_stack.c:129 add_chain_cache kernel/locking/lockdep.c:-1 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3899 [inline] validate_chain kernel/locking/lockdep.c:3920 [inline] __lock_acquire+0xed4/0x2b08 kernel/locking/lockdep.c:5288 lock_acquire+0x13c/0x320 kernel/locking/lockdep.c:5942 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:155 [inline] _raw_spin_lock_irqsave+0x5c/0x7c kernel/locking/spinlock.c:181 prepare_to_wait_event+0x3c/0x3e4 kernel/sched/wait.c:282 synchronize_rcu_expedited+0x4b8/0x66c kernel/rcu/tree_exp.h:981 synchronize_net+0x88/0xa4 net/core/dev.c:12544 nsim_del_napi drivers/net/netdevsim/netdev.c:544 [inline] nsim_stop+0x258/0x3fc drivers/net/netdevsim/netdev.c:564 __dev_close_many+0x2f4/0x648 net/core/dev.c:1836 netif_close_many+0x1d8/0x51c net/core/dev.c:1862 netif_close_many_and_unlock+0x38/0x15c net/core/dev.c:12613 unregister_netdevice_many_notify+0x330/0x14f0 net/core/dev.c:12688 unregister_netdevice_many net/core/dev.c:12796 [inline] unregister_netdevice_queue+0x274/0x30c net/core/dev.c:12592 unregister_netdevice include/linux/netdevice.h:3509 [inline] nsim_destroy+0x248/0x5f8 drivers/net/netdevsim/netdev.c:1206 __nsim_dev_port_del+0x13c/0x1ec drivers/net/netdevsim/dev.c:1472 nsim_dev_port_del_all drivers/net/netdevsim/dev.c:1486 [inline] nsim_dev_reload_destroy+0x13c/0x210 drivers/net/netdevsim/dev.c:1710 nsim_drv_remove+0x5c/0x114 drivers/net/netdevsim/dev.c:1725 nsim_bus_remove+0x20/0x30 drivers/net/netdevsim/bus.c:426 device_remove+0xc4/0x134 drivers/base/dd.c:617 __device_release_driver drivers/base/dd.c:1357 [inline] device_release_driver_internal+0x124/0x20c drivers/base/dd.c:1380 device_release_driver+0x28/0x38 drivers/base/dd.c:1403 bus_remove_device+0x2d0/0x400 drivers/base/bus.c:678 device_del+0x3ec/0x71c drivers/base/core.c:3967 device_unregister+0x2c/0xf0 drivers/base/core.c:4008 nsim_bus_dev_del+0x60/0x8c drivers/net/netdevsim/bus.c:488 del_device_store+0x24c/0x2d4 drivers/net/netdevsim/bus.c:243 bus_attr_store+0x80/0xa4 drivers/base/bus.c:172 sysfs_kf_write+0xe0/0x108 fs/sysfs/file.c:145 kernfs_fop_write_iter+0x260/0x3b8 fs/kernfs/file.c:345 new_sync_write fs/read_write.c:595 [inline] vfs_write+0x51c/0xa0c fs/read_write.c:687 ksys_write+0x12c/0x228 fs/read_write.c:739 __do_sys_write fs/read_write.c:750 [inline] __se_sys_write fs/read_write.c:747 [inline] __arm64_sys_write+0x84/0x98 fs/read_write.c:747 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140 el0_svc+0x60/0x1d8 arch/arm64/kernel/entry-common.c:796 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:815 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:606 In tnode_resize 00000000de4d6759 inflate_threshold=50 threshold=25 In tnode_resize 00000000e8815314 inflate_threshold=50 threshold=25 In tnode_resize 00000000f43a3b49 inflate_threshold=50 threshold=25 In tnode_resize 00000000a27005a2 inflate_threshold=50 threshold=25 In tnode_resize 000000006df96eec inflate_threshold=50 threshold=25 In tnode_resize 000000009f858f74 inflate_threshold=50 threshold=25 In tnode_resize 000000003e0361ce inflate_threshold=50 threshold=25 In tnode_resize 00000000c225325f inflate_threshold=50 threshold=25 In tnode_resize 000000003dc2299d inflate_threshold=50 threshold=25 In tnode_resize 0000000022eb55a4 inflate_threshold=50 threshold=25 In tnode_resize 0000000099313227 inflate_threshold=50 threshold=25 trie_flush found=1 In tnode_resize 00000000de4d6759 inflate_threshold=50 threshold=25 In tnode_resize 00000000e8815314 inflate_threshold=50 threshold=25 In tnode_resize 00000000f43a3b49 inflate_threshold=50 threshold=25 In tnode_resize 00000000a27005a2 inflate_threshold=50 threshold=25 In tnode_resize 000000006df96eec inflate_threshold=50 threshold=25 In tnode_resize 000000009f858f74 inflate_threshold=50 threshold=25 In tnode_resize 000000003e0361ce inflate_threshold=50 threshold=25 In tnode_resize 00000000c225325f inflate_threshold=50 threshold=25 In tnode_resize 000000003dc2299d inflate_threshold=50 threshold=25 In tnode_resize 0000000022eb55a4 inflate_threshold=50 threshold=25 In tnode_resize 0000000099313227 inflate_threshold=50 threshold=25 trie_flush found=1 IPv6: walker 00000000272ede0c adjusted by delroute IPv6: walker 00000000272ede0c adjusted by delroute IPv6: fixing tree: plen=128 iter=0 IPv6: W 00000000272ede0c adjusted by delnode 1, s=4/2 IPv6: fixing tree: plen=71 iter=1 IPv6: W 00000000272ede0c adjusted by delnode 2, s=2 IPv6: fixing tree: plen=69 iter=2 IPv6: walker 00000000272ede0c adjusted by delroute netdevsim netdevsim6 eth16: bond_netdev_event received NETDEV_DOWN net eth16: siw: event 2 Deleting a9feffff/32 dsfield=0x00 t=00000000b2474260 Deleting a9feffff/32 dsfield=0x00 t=00000000b2474260 Deleting a9fe20b9/32 dsfield=0x00 t=00000000b2474260 In tnode_resize 000000006df96eec inflate_threshold=50 threshold=25 In tnode_resize 000000009f858f74 inflate_threshold=50 threshold=25 In tnode_resize 0000000099313227 inflate_threshold=50 threshold=25 netdevsim netdevsim6 eth16 (unregistering): bond_netdev_event received NETDEV_UNREGISTER net eth16: siw: event 6 netdevsim netdevsim6 eth16 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT net eth16: siw: event 18 kernfs rps_cpus: removing kernfs rps_flow_cnt: removing kobject: 'rx-0' (0000000073a335d1): kobject_cleanup, parent 0000000080b81b04 kobject: 'rx-0' (0000000073a335d1): auto cleanup kobject_del kobject: 'rx-0' (0000000073a335d1): auto cleanup 'remove' event kobject: 'rx-0' (0000000073a335d1): kobject_uevent_env kobject: 'rx-0' (0000000073a335d1): fill_kobj_path: path = '/devices/netdevsim6/net/eth16/queues/rx-0' kernfs rx-0: removing kobject: 'rx-0' (0000000073a335d1): calling ktype release kobject: 'rx-0': free name kernfs limit: removing kernfs limit_max: removing kernfs limit_min: removing kernfs hold_time: removing kernfs inflight: removing kernfs stall_thrs: removing kernfs stall_cnt: removing kernfs stall_max: removing kernfs byte_queue_limits: removing kernfs tx_timeout: removing kernfs traffic_class: removing kernfs xps_cpus: removing kernfs xps_rxqs: removing kernfs tx_maxrate: removing kobject: 'tx-0' (0000000033e3de3b): kobject_cleanup, parent 0000000080b81b04 kobject: 'tx-0' (0000000033e3de3b): auto cleanup kobject_del kobject: 'tx-0' (0000000033e3de3b): auto cleanup 'remove' event kobject: 'tx-0' (0000000033e3de3b): kobject_uevent_env kobject: 'tx-0' (0000000033e3de3b): fill_kobj_path: path = '/devices/netdevsim6/net/eth16/queues/tx-0' kernfs tx-0: removing kobject: 'tx-0' (0000000033e3de3b): calling ktype release kobject: 'tx-0': free name kernfs queues: removing kobject: 'queues' (0000000080b81b04): kobject_cleanup, parent 0000000000000000 kobject: 'queues' (0000000080b81b04): calling ktype release kobject: 'queues' (0000000080b81b04): kset_release kobject: 'queues': free name kernfs runtime_status: removing kernfs control: removing kernfs runtime_suspended_time: removing kernfs runtime_active_time: removing kernfs autosuspend_delay_ms: removing kernfs power: removing kernfs device: removing kernfs subsystem: removing kernfs eth16: removing kernfs uevent: removing kernfs rx_packets: removing kernfs tx_packets: removing kernfs rx_bytes: removing kernfs tx_bytes: removing kernfs rx_errors: removing kernfs tx_errors: removing kernfs rx_dropped: removing kernfs tx_dropped: removing kernfs multicast: removing kernfs collisions: removing kernfs rx_length_errors: removing kernfs rx_over_errors: removing kernfs rx_crc_errors: removing kernfs rx_frame_errors: removing kernfs rx_fifo_errors: removing kernfs rx_missed_errors: removing kernfs tx_aborted_errors: removing kernfs tx_carrier_errors: removing kernfs tx_fifo_errors: removing kernfs tx_heartbeat_errors: removing kernfs tx_window_errors: removing kernfs rx_compressed: removing kernfs tx_compressed: removing kernfs rx_nohandler: removing kernfs statistics: removing kernfs phys_port_name: removing kernfs phys_switch_id: removing kernfs netdev_group: removing kernfs type: removing kernfs dev_id: removing kernfs dev_port: removing kernfs iflink: removing kernfs ifindex: removing kernfs name_assign_type: removing kernfs addr_assign_type: removing kernfs addr_len: removing kernfs link_mode: removing kernfs address: removing kernfs broadcast: removing kernfs speed: removing kernfs duplex: removing kernfs dormant: removing kernfs testing: removing kernfs operstate: removing kernfs carrier_changes: removing kernfs ifalias: removing kernfs carrier: removing kernfs mtu: removing kernfs flags: removing kernfs tx_queue_len: removing kernfs gro_flush_timeout: removing kernfs napi_defer_hard_irqs: removing kernfs proto_down: removing kernfs carrier_up_count: removing kernfs carrier_down_count: removing kernfs threaded: removing PM: Removing info for No Bus:eth16 kobject: 'eth16' (00000000e1c5cc65): kobject_uevent_env kobject: 'eth16' (00000000e1c5cc65): fill_kobj_path: path = '/devices/netdevsim6/net/eth16' kernfs eth16: removing kernfs net: removing kobject: 'net' (00000000cda17b10): kobject_cleanup, parent 0000000000000000 kobject: 'net' (00000000cda17b10): calling ktype release kobject: 'net': free name kobject: 'eth16' (00000000e1c5cc65): kobject_cleanup, parent 0000000000000000 kobject: 'eth16' (00000000e1c5cc65): calling ktype release kobject: 'eth16': free name kobject: 'netdevsim6' (000000001999d713): kobject_uevent_env kobject: 'netdevsim6' (000000001999d713): fill_kobj_path: path = '/devices/netdevsim6' PM: Removing info for netdevsim:netdevsim6 kobject: 'netdevsim6' (000000001999d713): kobject_uevent_env kobject: 'netdevsim6' (000000001999d713): fill_kobj_path: path = '/devices/netdevsim6' kernfs netdevsim6: removing 000000002bba8e7e name hci3 bus 0 hci3: Updating devcoredump state from IDLE to IDLE. hci3: err 0x13 hci3 000000002bba8e7e hci3: hci3: err 0x13 hci3: cancelling interleave scan All LE pending actions cleared hdev hci3 hcon 00000000e9b535b2 reason 22 hcon 00000000e9b535b2 conn 00000000a1a4405f, err 103 hci3 hcon 00000000e9b535b2 chan 00000000dab90192 hci3 hcon 00000000e9b535b2 handle 200 hci3: hcon 00000000e9b535b2 kernfs hci3:201: removing kobject: 'hci3:201' (0000000014db3195): kobject_cleanup, parent 0000000000000000 kobject: 'hci3:201' (0000000014db3195): calling ktype release kobject: 'hci3:201': free name hci3 orig refcnt 7 kobject: 'hci3' (0000000025893421): kobject_uevent_env kobject: 'tx-0' (000000005f7867a1): kobject_uevent_env kobject: 'tx-0' (000000005f7867a1): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' kernfs tx-0: removing kobject: 'tx-0' (000000005f7867a1): calling ktype release kobject: 'syz_tun' (0000000038241ba6): calling ktype release kobject: 'syz_tun': free name