last executing test programs: 203.539ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x989680}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x1234, 0x4e22, r3, r2, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) 62.579126ms ago: executing program 1 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0xd457}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x28}}}}, 0x2d8) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) 62.420729ms ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10) read(r2, &(0x7f0000000500), 0x200) write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119) read(r2, &(0x7f0000000500), 0x200) write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/26, 0x1a) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7117}]}}}]}}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20806' (ED25519) to the list of known hosts. [ 41.088004][ T5704] cgroup: Unknown subsys name 'net' [ 41.243133][ T5704] cgroup: Unknown subsys name 'cpuset' [ 41.247448][ T5704] cgroup: Unknown subsys name 'rlimit' [ 41.473880][ T5726] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.144922][ T5704] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.222516][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 45.222531][ T42] audit: type=1400 audit(1785768105.466:158): avc: denied { execmem } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.389861][ T42] audit: type=1400 audit(1785768105.646:159): avc: denied { create } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.397522][ T42] audit: type=1400 audit(1785768105.646:160): avc: denied { read write } for pid=5736 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.407552][ T42] audit: type=1400 audit(1785768105.646:161): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.416533][ T42] audit: type=1400 audit(1785768105.646:162): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="socket:[5889]" dev="sockfs" ino=5889 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.426896][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.433114][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.437384][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.442067][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.442513][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.442556][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.443962][ T5750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.444473][ T5750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.445601][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.445889][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.446596][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.447445][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.447684][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.448407][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.448543][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.449760][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.450551][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.451294][ T5750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.453309][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.454884][ T42] audit: type=1400 audit(1785768105.706:163): avc: denied { read } for pid=5745 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.458610][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.459090][ T42] audit: type=1400 audit(1785768105.706:164): avc: denied { open } for pid=5745 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.502272][ T42] audit: type=1400 audit(1785768105.706:165): avc: denied { mounton } for pid=5745 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.509167][ T42] audit: type=1400 audit(1785768105.716:166): avc: denied { module_request } for pid=5745 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.516382][ T42] audit: type=1400 audit(1785768105.736:167): avc: denied { sys_module } for pid=5745 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.007804][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.010547][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.012885][ T5745] bridge_slave_0: entered allmulticast mode [ 46.015611][ T5745] bridge_slave_0: entered promiscuous mode [ 46.041883][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.044280][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.046586][ T5745] bridge_slave_1: entered allmulticast mode [ 46.049585][ T5745] bridge_slave_1: entered promiscuous mode [ 46.076395][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.078776][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.081179][ T5737] bridge_slave_0: entered allmulticast mode [ 46.083816][ T5737] bridge_slave_0: entered promiscuous mode [ 46.099260][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.102691][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.105667][ T5737] bridge_slave_1: entered allmulticast mode [ 46.109059][ T5737] bridge_slave_1: entered promiscuous mode [ 46.115426][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.123040][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.126023][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.129649][ T5736] bridge_slave_0: entered allmulticast mode [ 46.132807][ T5736] bridge_slave_0: entered promiscuous mode [ 46.136509][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.139421][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.143259][ T5736] bridge_slave_1: entered allmulticast mode [ 46.147145][ T5736] bridge_slave_1: entered promiscuous mode [ 46.162224][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.182447][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.188013][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.199336][ T5745] team0: Port device team_slave_0 added [ 46.236947][ T5745] team0: Port device team_slave_1 added [ 46.253644][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.278633][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.295307][ T5737] team0: Port device team_slave_0 added [ 46.298756][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.300989][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.308995][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.326302][ T5737] team0: Port device team_slave_1 added [ 46.328589][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.331008][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.339034][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.349060][ T5736] team0: Port device team_slave_0 added [ 46.352620][ T5736] team0: Port device team_slave_1 added [ 46.354532][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.356946][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.359612][ T5742] bridge_slave_0: entered allmulticast mode [ 46.362760][ T5742] bridge_slave_0: entered promiscuous mode [ 46.378897][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.381188][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.389583][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.405231][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.407774][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.410081][ T5742] bridge_slave_1: entered allmulticast mode [ 46.412706][ T5742] bridge_slave_1: entered promiscuous mode [ 46.421521][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.423701][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.432093][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.439542][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.442161][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.450178][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.473022][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.477374][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.479544][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.487520][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.495601][ T5745] hsr_slave_0: entered promiscuous mode [ 46.498050][ T5745] hsr_slave_1: entered promiscuous mode [ 46.501522][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.542563][ T5742] team0: Port device team_slave_0 added [ 46.564627][ T5737] hsr_slave_0: entered promiscuous mode [ 46.567479][ T5737] hsr_slave_1: entered promiscuous mode [ 46.570368][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 46.572535][ T5737] Cannot create hsr debugfs directory [ 46.575459][ T5742] team0: Port device team_slave_1 added [ 46.612122][ T5736] hsr_slave_0: entered promiscuous mode [ 46.614896][ T5736] hsr_slave_1: entered promiscuous mode [ 46.618009][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 46.620981][ T5736] Cannot create hsr debugfs directory [ 46.641912][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.644549][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.652696][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.663568][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.666290][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.675802][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.803237][ T5742] hsr_slave_0: entered promiscuous mode [ 46.807697][ T5742] hsr_slave_1: entered promiscuous mode [ 46.810510][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 46.812867][ T5742] Cannot create hsr debugfs directory [ 46.979168][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.986252][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.999652][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.003457][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.012185][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.018108][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.024704][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.029148][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.050304][ T5736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.054447][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.057228][ T5736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.061363][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.066800][ T5736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.072344][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.075112][ T5736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.080117][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.130480][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.134857][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.137596][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.141311][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.143910][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.148158][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.150764][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.154495][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.212664][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.216527][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.220158][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.224031][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.226752][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.230557][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.233435][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.237893][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.272505][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.295894][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.307480][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.310113][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.318103][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.321069][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.359878][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.383174][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.393368][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.414465][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.417349][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.425718][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.428815][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.439500][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.454673][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.457442][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.469068][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.476550][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.479331][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.508787][ T5749] Bluetooth: hci3: command tx timeout [ 47.515975][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.517342][ T5749] Bluetooth: hci1: command tx timeout [ 47.517569][ T64] Bluetooth: hci0: command tx timeout [ 47.517733][ T64] Bluetooth: hci2: command tx timeout [ 47.539425][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.541761][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.545797][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.548112][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.666062][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.694801][ T5745] veth0_vlan: entered promiscuous mode [ 47.705164][ T5745] veth1_vlan: entered promiscuous mode [ 47.727147][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.735639][ T5745] veth0_macvtap: entered promiscuous mode [ 47.742980][ T5745] veth1_macvtap: entered promiscuous mode [ 47.760730][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.770222][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.774606][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.781127][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.790946][ T5736] veth0_vlan: entered promiscuous mode [ 47.802928][ T5736] veth1_vlan: entered promiscuous mode [ 47.866096][ T5742] veth0_vlan: entered promiscuous mode [ 47.871852][ T5736] veth0_macvtap: entered promiscuous mode [ 47.878145][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.880376][ T5742] veth1_vlan: entered promiscuous mode [ 47.880696][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.884808][ T5736] veth1_macvtap: entered promiscuous mode [ 47.896779][ T5737] veth0_vlan: entered promiscuous mode [ 47.915077][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.916340][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.918151][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.921813][ T5737] veth1_vlan: entered promiscuous mode [ 47.931557][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.948029][ T5742] veth0_macvtap: entered promiscuous mode [ 47.964923][ T5742] veth1_macvtap: entered promiscuous mode [ 47.969658][ T5737] veth0_macvtap: entered promiscuous mode [ 47.981981][ T5737] veth1_macvtap: entered promiscuous mode [ 47.982394][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.998466][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.003001][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.021431][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.029818][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.032848][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.041609][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.044545][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.057944][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.060755][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.082545][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.085833][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.120114][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.124890][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.152274][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158904][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.161982][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.170666][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.173166][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.178688][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.182574][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.193820][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.196339][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.197305][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.201493][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.214761][ T10] ------------[ cut here ]------------ [ 48.217192][ T10] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 48.217202][ T10] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#0: kworker/0:1/10 [ 48.217687][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.220828][ T10] Modules linked in: [ 48.228243][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.229421][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 48.229444][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.240661][ T10] Workqueue: ceph-msgr ceph_con_workfn [ 48.241673][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.242807][ T10] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 48.248872][ T10] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 48.255464][ T10] RSP: 0018:ffffc900000d7a08 EFLAGS: 00010293 [ 48.257733][ T10] RAX: 0000000000000000 RBX: ffff88805a4ec88b RCX: ffffffff8b7fbff0 [ 48.260197][ T10] RDX: ffff88801eab2540 RSI: ffffffff8b7fda6c RDI: ffff88801eab2540 [ 48.262680][ T10] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 48.265116][ T10] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 48.267132][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.268129][ T10] R13: ffff88805a4ec950 R14: ffff88805a4ec418 R15: dffffc0000000000 [ 48.272938][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.274578][ T10] FS: 0000000000000000(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 48.274612][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.278231][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279534][ T5900] Zero length message leads to an empty skb [ 48.280892][ T10] CR2: 00007fef505acd58 CR3: 000000005aa30000 CR4: 0000000000352ef0 [ 48.280906][ T10] Call Trace: [ 48.280913][ T10] [ 48.280928][ T10] ? ceph_con_workfn+0x48/0x13e0 [ 48.283091][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.286333][ T10] ? register_lock_class+0x40/0x560 [ 48.286360][ T10] ? do_raw_spin_lock+0x128/0x260 [ 48.289301][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.291820][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 48.291851][ T10] ? __lock_acquire+0x49f/0x1a40 [ 48.291866][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 48.312074][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 48.314117][ T10] ceph_con_workfn+0x9a5/0x13e0 [ 48.315898][ T10] process_one_work+0xa23/0x1940 [ 48.317835][ T10] ? __pfx_process_one_work+0x10/0x10 [ 48.319893][ T10] ? __pfx_ceph_con_workfn+0x10/0x10 [ 48.321895][ T10] worker_thread+0x5ef/0xe50 [ 48.323663][ T10] ? kthread+0x13a/0x450 [ 48.325283][ T10] ? __pfx_worker_thread+0x10/0x10 [ 48.327144][ T10] kthread+0x370/0x450 [ 48.328675][ T10] ? __pfx_kthread+0x10/0x10 [ 48.330437][ T10] ret_from_fork+0x72b/0xd50 [ 48.332214][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 48.334124][ T10] ? __switch_to+0x800/0x10f0 [ 48.335985][ T10] ? __pfx_kthread+0x10/0x10 [ 48.338112][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.340042][ T10] [ 48.341264][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 48.344091][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 48.347636][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 48.351530][ T10] Workqueue: ceph-msgr ceph_con_workfn [ 48.353653][ T10] Call Trace: [ 48.354989][ T10] [ 48.356157][ T10] dump_stack_lvl+0x100/0x190 [ 48.357999][ T10] vpanic+0x552/0x970 [ 48.359577][ T10] ? __pfx_vpanic+0x10/0x10 [ 48.361388][ T10] panic+0xd1/0xe0 [ 48.362872][ T10] ? __pfx_panic+0x10/0x10 [ 48.364635][ T10] ? check_panic_on_warn+0x1f/0x90 [ 48.366650][ T10] check_panic_on_warn.cold+0x19/0x34 [ 48.368735][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 48.370887][ T10] __warn.cold+0x191/0x318 [ 48.372628][ T10] __report_bug+0x30f/0x440 [ 48.374414][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 48.376581][ T10] ? __pfx___report_bug+0x10/0x10 [ 48.378545][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 48.380837][ T10] ? debug_object_activate+0x343/0x4b0 [ 48.382968][ T10] ? __pfx_tcp_recvmsg+0x10/0x10 [ 48.384909][ T10] ? inet_recvmsg+0xdc/0x4c0 [ 48.386731][ T10] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 48.388788][ T10] ? rcu_is_watching+0x12/0xc0 [ 48.390685][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 48.392832][ T10] report_bug+0xb2/0x220 [ 48.394494][ T10] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 48.396656][ T10] handle_bug+0x16a/0x2a0 [ 48.398358][ T10] exc_invalid_op+0x17/0x50 [ 48.400123][ T10] asm_exc_invalid_op+0x1a/0x20 [ 48.401957][ T10] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 48.404266][ T10] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 48.411617][ T10] RSP: 0018:ffffc900000d7a08 EFLAGS: 00010293 [ 48.413978][ T10] RAX: 0000000000000000 RBX: ffff88805a4ec88b RCX: ffffffff8b7fbff0 [ 48.417028][ T10] RDX: ffff88801eab2540 RSI: ffffffff8b7fda6c RDI: ffff88801eab2540 [ 48.420099][ T10] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 48.423155][ T10] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 48.426233][ T10] R13: ffff88805a4ec950 R14: ffff88805a4ec418 R15: dffffc0000000000 [ 48.429315][ T10] ? ceph_con_v1_try_read+0x2a00/0x6ca0 [ 48.431482][ T10] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 48.433639][ T10] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 48.435744][ T10] ? ceph_con_workfn+0x48/0x13e0 [ 48.437657][ T10] ? register_lock_class+0x40/0x560 [ 48.439707][ T10] ? do_raw_spin_lock+0x128/0x260 [ 48.441689][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 48.443677][ T10] ? __lock_acquire+0x49f/0x1a40 [ 48.445635][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 48.447873][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 48.450078][ T10] ceph_con_workfn+0x9a5/0x13e0 [ 48.452002][ T10] process_one_work+0xa23/0x1940 [ 48.453952][ T10] ? __pfx_process_one_work+0x10/0x10 [ 48.456060][ T10] ? __pfx_ceph_con_workfn+0x10/0x10 [ 48.458131][ T10] worker_thread+0x5ef/0xe50 [ 48.459974][ T10] ? kthread+0x13a/0x450 [ 48.461623][ T10] ? __pfx_worker_thread+0x10/0x10 [ 48.463629][ T10] kthread+0x370/0x450 [ 48.465248][ T10] ? __pfx_kthread+0x10/0x10 [ 48.467069][ T10] ret_from_fork+0x72b/0xd50 [ 48.468890][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 48.470808][ T10] ? __switch_to+0x800/0x10f0 [ 48.472566][ T10] ? __pfx_kthread+0x10/0x10 [ 48.474386][ T10] ret_from_fork_asm+0x1a/0x30 [ 48.476299][ T10] [ 48.478178][ T10] Kernel Offset: disabled [ 48.479794][ T10] Rebooting in 86400 seconds..