last executing test programs:
141.114008ms ago: executing program 1 (id=2):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1}, 0x10)
listen(r0, 0x5)
118.668747ms ago: executing program 0 (id=1):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@ipv6header={{0x28}, {0x4}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x18, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x40}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffe, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0x7}}}}, 0x3b8)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080), 0x8)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x10}], 0x1}, 0x0)
137.746µs ago: executing program 1 (id=5):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/27, 0x1a)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
0s ago: executing program 3 (id=4):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x1234, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000000)="00112233", 0x4, 0x0, 0x0, 0x0)
kernel console output (not intermixed with test programs):
[ 38.062395][ T42] audit: type=1400 audit(1785768285.881:121): avc: denied { siginh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.408179][ T42] audit: type=1400 audit(1785768286.251:122): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '[localhost]:3629' (ED25519) to the list of known hosts.
[ 41.369741][ T5678] cgroup: Unknown subsys name 'net'
[ 41.539216][ T5678] cgroup: Unknown subsys name 'cpuset'
[ 41.543174][ T5678] cgroup: Unknown subsys name 'rlimit'
[ 41.777725][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 42.530525][ T5678] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 45.881809][ T42] kauditd_printk_skb: 35 callbacks suppressed
[ 45.881821][ T42] audit: type=1400 audit(1785768293.721:158): avc: denied { execmem } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 46.063943][ T42] audit: type=1400 audit(1785768293.901:159): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 46.077369][ T42] audit: type=1400 audit(1785768293.911:160): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 46.084528][ T42] audit: type=1400 audit(1785768293.911:161): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 46.090916][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 46.092786][ T42] audit: type=1400 audit(1785768293.921:162): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="socket:[1904]" dev="sockfs" ino=1904 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 46.098300][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 46.106031][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 46.108543][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 46.111579][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 46.114576][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 46.117313][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 46.118049][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 46.120880][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 46.122047][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 46.123159][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 46.123738][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 46.123966][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 46.124236][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 46.127981][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 46.132668][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 46.134345][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 46.135275][ T42] audit: type=1400 audit(1785768293.971:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 46.135326][ T42] audit: type=1400 audit(1785768293.971:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 46.142727][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 46.143828][ T42] audit: type=1400 audit(1785768293.971:165): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 46.146874][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 46.147634][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 46.153454][ T42] audit: type=1400 audit(1785768293.971:166): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 46.185961][ T42] audit: type=1400 audit(1785768293.991:167): avc: denied { sys_module } for pid=5737 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 46.669524][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.672856][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.676239][ T5737] bridge_slave_0: entered allmulticast mode
[ 46.679970][ T5737] bridge_slave_0: entered promiscuous mode
[ 46.685337][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.688223][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.690591][ T5737] bridge_slave_1: entered allmulticast mode
[ 46.693907][ T5737] bridge_slave_1: entered promiscuous mode
[ 46.793819][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 46.819370][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 46.861271][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.863742][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.866623][ T5733] bridge_slave_0: entered allmulticast mode
[ 46.870701][ T5733] bridge_slave_0: entered promiscuous mode
[ 46.876554][ T5737] team0: Port device team_slave_0 added
[ 46.881139][ T5737] team0: Port device team_slave_1 added
[ 46.894883][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.897100][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.899247][ T5745] bridge_slave_0: entered allmulticast mode
[ 46.901810][ T5745] bridge_slave_0: entered promiscuous mode
[ 46.906077][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.908127][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.910364][ T5733] bridge_slave_1: entered allmulticast mode
[ 46.913818][ T5733] bridge_slave_1: entered promiscuous mode
[ 46.928675][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.931065][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.933236][ T5745] bridge_slave_1: entered allmulticast mode
[ 46.935903][ T5745] bridge_slave_1: entered promiscuous mode
[ 46.988307][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 46.991241][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.001986][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 47.008959][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 47.011720][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.021893][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 47.036327][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 47.042846][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 47.049449][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 47.071234][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 47.115233][ T5733] team0: Port device team_slave_0 added
[ 47.129313][ T5737] hsr_slave_0: entered promiscuous mode
[ 47.131901][ T5737] hsr_slave_1: entered promiscuous mode
[ 47.134299][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.136847][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.139418][ T5734] bridge_slave_0: entered allmulticast mode
[ 47.141917][ T5734] bridge_slave_0: entered promiscuous mode
[ 47.145866][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.148041][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.150156][ T5734] bridge_slave_1: entered allmulticast mode
[ 47.152884][ T5734] bridge_slave_1: entered promiscuous mode
[ 47.156550][ T5745] team0: Port device team_slave_0 added
[ 47.159398][ T5733] team0: Port device team_slave_1 added
[ 47.186967][ T5745] team0: Port device team_slave_1 added
[ 47.195499][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 47.197814][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.205273][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 47.233943][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 47.236115][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.243994][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 47.256369][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 47.267368][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 47.269793][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.277491][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 47.287815][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 47.289897][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.297457][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 47.305910][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 47.334133][ T5734] team0: Port device team_slave_0 added
[ 47.339508][ T5734] team0: Port device team_slave_1 added
[ 47.399769][ T5733] hsr_slave_0: entered promiscuous mode
[ 47.402387][ T5733] hsr_slave_1: entered promiscuous mode
[ 47.404911][ T5733] debugfs: 'hsr0' already exists in 'hsr'
[ 47.407216][ T5733] Cannot create hsr debugfs directory
[ 47.417860][ T5745] hsr_slave_0: entered promiscuous mode
[ 47.420663][ T5745] hsr_slave_1: entered promiscuous mode
[ 47.423287][ T5745] debugfs: 'hsr0' already exists in 'hsr'
[ 47.425352][ T5745] Cannot create hsr debugfs directory
[ 47.428235][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 47.430559][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.440051][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 47.451196][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 47.453868][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 47.462226][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 47.571566][ T5734] hsr_slave_0: entered promiscuous mode
[ 47.574675][ T5734] hsr_slave_1: entered promiscuous mode
[ 47.577353][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[ 47.579650][ T5734] Cannot create hsr debugfs directory
[ 47.786656][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 47.793701][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 47.805301][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 47.809177][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 47.832820][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 47.837351][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 47.846886][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 47.853181][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 47.890862][ T5733] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 47.896012][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 47.900348][ T5733] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 47.904418][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 47.910664][ T5733] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 47.916955][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 47.926499][ T5733] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 47.931973][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 48.006747][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 48.012069][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 48.014960][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 48.019056][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 48.021968][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 48.025883][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 48.029705][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 48.033804][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 48.118302][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.121690][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 48.125996][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 48.133917][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 48.139881][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 48.142543][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 48.146679][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 48.154372][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 48.159772][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 48.176668][ T5749] Bluetooth: hci1: command tx timeout
[ 48.176674][ T64] Bluetooth: hci0: command tx timeout
[ 48.176678][ T5738] Bluetooth: hci2: command tx timeout
[ 48.192354][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[ 48.216980][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.223384][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.226536][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.239524][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.242053][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.256258][ T5749] Bluetooth: hci3: command tx timeout
[ 48.256489][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.268139][ T5733] 8021q: adding VLAN 0 to HW filter on device team0
[ 48.283818][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.286113][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.301072][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.303294][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.322933][ T5745] 8021q: adding VLAN 0 to HW filter on device team0
[ 48.340252][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.342515][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.363960][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.366871][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.401748][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.437795][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[ 48.450296][ T140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.453246][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.480583][ T140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.483057][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.664511][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 48.681848][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 48.720330][ T5737] veth0_vlan: entered promiscuous mode
[ 48.730395][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 48.741552][ T5737] veth1_vlan: entered promiscuous mode
[ 48.751117][ T5733] veth0_vlan: entered promiscuous mode
[ 48.761381][ T5733] veth1_vlan: entered promiscuous mode
[ 48.806493][ T5737] veth0_macvtap: entered promiscuous mode
[ 48.814819][ T5745] veth0_vlan: entered promiscuous mode
[ 48.818987][ T5737] veth1_macvtap: entered promiscuous mode
[ 48.822405][ T5733] veth0_macvtap: entered promiscuous mode
[ 48.831100][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 48.834447][ T5733] veth1_macvtap: entered promiscuous mode
[ 48.846643][ T5745] veth1_vlan: entered promiscuous mode
[ 48.853772][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 48.864998][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 48.868661][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 48.880402][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 48.927605][ T5745] veth0_macvtap: entered promiscuous mode
[ 48.938320][ T5734] veth0_vlan: entered promiscuous mode
[ 48.946078][ T5604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.951068][ T5745] veth1_macvtap: entered promiscuous mode
[ 48.966383][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.974464][ T5734] veth1_vlan: entered promiscuous mode
[ 48.985877][ T5604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 48.992028][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 49.018535][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 49.036630][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.038031][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.039963][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.046208][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.078941][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.083142][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.084154][ T5734] veth0_macvtap: entered promiscuous mode
[ 49.110767][ T5734] veth1_macvtap: entered promiscuous mode
[ 49.111593][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.116540][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.143061][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 49.160305][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 49.176557][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 49.177703][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.182187][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.241431][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.244584][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.350842][ T10] ------------[ cut here ]------------
[ 49.353463][ T10] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq)
[ 49.353479][ T10] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#0: kworker/0:1/10
[ 49.360299][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.361462][ T10] Modules linked in:
[ 49.365266][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 49.365289][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 49.365301][ T10] Workqueue: ceph-msgr ceph_con_workfn
[ 49.366698][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.377129][ T10]
[ 49.378106][ T10] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0
[ 49.380616][ T10] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90
[ 49.385964][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 49.388494][ T10] RSP: 0018:ffffc900000d7a08 EFLAGS: 00010293
[ 49.392054][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 49.393498][ T10] RAX: 0000000000000000 RBX: ffff8880280ec88b RCX: ffffffff8b7fbff0
[ 49.393514][ T10] RDX: ffff88801eaba540 RSI: ffffffff8b7fda6c RDI: ffff88801eaba540
[ 49.402244][ T10] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000
[ 49.405070][ T10] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 49.408034][ T10] R13: ffff8880280ec950 R14: ffff8880280ec418 R15: dffffc0000000000
[ 49.410400][ T10] FS: 0000000000000000(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000
[ 49.413040][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.415316][ T10] CR2: 000000110c2fa6bb CR3: 0000000058bd9000 CR4: 0000000000352ef0
[ 49.417794][ T10] Call Trace:
[ 49.418818][ T10]
[ 49.419718][ T10] ? ceph_con_workfn+0x48/0x13e0
[ 49.421307][ T10] ? register_lock_class+0x40/0x560
[ 49.422783][ T10] ? do_raw_spin_lock+0x128/0x260
[ 49.424184][ T10] ? __pfx___mutex_lock+0x10/0x10
[ 49.425671][ T10] ? __lock_acquire+0x49f/0x1a40
[ 49.427186][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 49.428954][ T10] ? debug_object_deactivate+0x2e4/0x3b0
[ 49.430722][ T10] ceph_con_workfn+0x9a5/0x13e0
[ 49.432264][ T10] process_one_work+0xa23/0x1940
[ 49.433853][ T10] ? __pfx_process_one_work+0x10/0x10
[ 49.435554][ T10] ? __pfx_ceph_con_workfn+0x10/0x10
[ 49.437288][ T10] worker_thread+0x5ef/0xe50
[ 49.438729][ T10] ? __pfx_worker_thread+0x10/0x10
[ 49.440265][ T10] ? kthread+0x13a/0x450
[ 49.441620][ T10] ? __pfx_worker_thread+0x10/0x10
[ 49.443246][ T10] kthread+0x370/0x450
[ 49.444512][ T10] ? __pfx_kthread+0x10/0x10
[ 49.445958][ T10] ret_from_fork+0x72b/0xd50
[ 49.447395][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 49.449027][ T10] ? __switch_to+0x800/0x10f0
[ 49.450504][ T10] ? __pfx_kthread+0x10/0x10
[ 49.451949][ T10] ret_from_fork_asm+0x1a/0x30
[ 49.453499][ T10]
[ 49.454496][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 49.456758][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 49.459569][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 49.462685][ T10] Workqueue: ceph-msgr ceph_con_workfn
[ 49.464354][ T10] Call Trace:
[ 49.465398][ T10]
[ 49.466335][ T10] dump_stack_lvl+0x100/0x190
[ 49.467809][ T10] vpanic+0x552/0x970
[ 49.469032][ T10] ? __pfx_vpanic+0x10/0x10
[ 49.470483][ T10] panic+0xd1/0xe0
[ 49.471671][ T10] ? __pfx_panic+0x10/0x10
[ 49.473028][ T10] ? check_panic_on_warn+0x1f/0x90
[ 49.474565][ T10] check_panic_on_warn.cold+0x19/0x34
[ 49.476182][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0
[ 49.477914][ T10] __warn.cold+0x191/0x318
[ 49.479310][ T10] __report_bug+0x30f/0x440
[ 49.480748][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0
[ 49.482490][ T10] ? __pfx___report_bug+0x10/0x10
[ 49.484095][ T10] ? __pfx_tcp_recvmsg+0x10/0x10
[ 49.485644][ T10] ? inet_recvmsg+0xdc/0x4c0
[ 49.487102][ T10] ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 49.488771][ T10] ? rcu_is_watching+0x12/0xc0
[ 49.490293][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0
[ 49.491991][ T10] report_bug+0xb2/0x220
[ 49.493338][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0
[ 49.495041][ T10] handle_bug+0x16a/0x2a0
[ 49.496420][ T10] exc_invalid_op+0x17/0x50
[ 49.497860][ T10] asm_exc_invalid_op+0x1a/0x20
[ 49.499375][ T10] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0
[ 49.501272][ T10] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90
[ 49.507170][ T10] RSP: 0018:ffffc900000d7a08 EFLAGS: 00010293
[ 49.509063][ T10] RAX: 0000000000000000 RBX: ffff8880280ec88b RCX: ffffffff8b7fbff0
[ 49.511493][ T10] RDX: ffff88801eaba540 RSI: ffffffff8b7fda6c RDI: ffff88801eaba540
[ 49.513945][ T10] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000
[ 49.516363][ T10] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[ 49.518804][ T10] R13: ffff8880280ec950 R14: ffff8880280ec418 R15: dffffc0000000000
[ 49.521240][ T10] ? ceph_con_v1_try_read+0x2a00/0x6ca0
[ 49.523002][ T10] ? ceph_con_v1_try_read+0x447c/0x6ca0
[ 49.524724][ T10] ? ceph_con_v1_try_read+0x447c/0x6ca0
[ 49.526371][ T10] ? ceph_con_workfn+0x48/0x13e0
[ 49.527753][ T10] ? register_lock_class+0x40/0x560
[ 49.529276][ T10] ? do_raw_spin_lock+0x128/0x260
[ 49.530799][ T10] ? __pfx___mutex_lock+0x10/0x10
[ 49.532299][ T10] ? __lock_acquire+0x49f/0x1a40
[ 49.533879][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 49.535647][ T10] ? debug_object_deactivate+0x2e4/0x3b0
[ 49.537366][ T10] ceph_con_workfn+0x9a5/0x13e0
[ 49.538925][ T10] process_one_work+0xa23/0x1940
[ 49.540499][ T10] ? __pfx_process_one_work+0x10/0x10
[ 49.542199][ T10] ? __pfx_ceph_con_workfn+0x10/0x10
[ 49.543915][ T10] worker_thread+0x5ef/0xe50
[ 49.545389][ T10] ? __pfx_worker_thread+0x10/0x10
[ 49.547020][ T10] ? kthread+0x13a/0x450
[ 49.548375][ T10] ? __pfx_worker_thread+0x10/0x10
[ 49.549999][ T10] kthread+0x370/0x450
[ 49.551298][ T10] ? __pfx_kthread+0x10/0x10
[ 49.552772][ T10] ret_from_fork+0x72b/0xd50
[ 49.554229][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 49.555832][ T10] ? __switch_to+0x800/0x10f0
[ 49.557282][ T10] ? __pfx_kthread+0x10/0x10
[ 49.558736][ T10] ret_from_fork_asm+0x1a/0x30
[ 49.560177][ T10]
[ 49.561889][ T10] Kernel Offset: disabled
[ 49.563270][ T10] Rebooting in 86400 seconds..