last executing test programs: 130.692119ms ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01020304"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x5}}}, 0x140}}, 0x0) 111.855235ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0 1 1\x00', 0x6) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x7117}]}}}]}}}, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 67.658852ms ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x20, 0x20, 0x1, 0x1, 0x0, {0x1}, [@generic="000000000b0001006f76732d73797374656d0000"]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x18, 0x20, 0x301, 0x1, 0x0, {0x3}, [@generic='\x00\x00\x00\x00']}, 0x18}}, 0x0) 205.023µs ago: executing program 1 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='127.0.0.1:6789:/\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x0, &(0x7f0000000400)='ms_mode=legacy\x00') (async) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)='ceph v027\x00'/153, 0x99) write(r1, &(0x7f0000000080)="01ffffffffffffffff0000000000000000000000000000000001000000", 0x1d) write(r1, &(0x7f00000000c0)="0100000000000000000000000000000000290000000400000000000000100000000000010000000000000000000000572b1fb2", 0x33) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) 0s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): [ 37.972420][ T42] audit: type=1400 audit(1785768036.471:120): avc: denied { rlimitinh } for pid=5661 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:32871' (ED25519) to the list of known hosts. [ 42.012150][ T5720] cgroup: Unknown subsys name 'net' [ 42.140676][ T5720] cgroup: Unknown subsys name 'cpuset' [ 42.145020][ T5720] cgroup: Unknown subsys name 'rlimit' [ 42.332061][ T5730] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.034562][ T5720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.449718][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 46.449732][ T42] audit: type=1400 audit(1785768044.971:158): avc: denied { execmem } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.604625][ T42] audit: type=1400 audit(1785768045.121:159): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.612507][ T42] audit: type=1400 audit(1785768045.121:160): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.619721][ T42] audit: type=1400 audit(1785768045.121:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.626678][ T42] audit: type=1400 audit(1785768045.131:162): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="socket:[5938]" dev="sockfs" ino=5938 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.632073][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.634730][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.637144][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.640642][ T5755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.642163][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.644545][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.646317][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.647379][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.648859][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.648885][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.650710][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.651125][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.651389][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.652160][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.652831][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.656168][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.656744][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.657563][ T42] audit: type=1400 audit(1785768045.171:163): avc: denied { read } for pid=5740 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.660615][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.660839][ T42] audit: type=1400 audit(1785768045.181:164): avc: denied { open } for pid=5740 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.662160][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.663382][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.664842][ T42] audit: type=1400 audit(1785768045.181:165): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.698077][ T42] audit: type=1400 audit(1785768045.181:166): avc: denied { module_request } for pid=5740 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.704280][ T42] audit: type=1400 audit(1785768045.201:167): avc: denied { sys_module } for pid=5740 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.169385][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.172465][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.175192][ T5740] bridge_slave_0: entered allmulticast mode [ 47.178272][ T5740] bridge_slave_0: entered promiscuous mode [ 47.206086][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.208478][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.211065][ T5740] bridge_slave_1: entered allmulticast mode [ 47.213556][ T5740] bridge_slave_1: entered promiscuous mode [ 47.279431][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.294185][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.296454][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.299388][ T5738] bridge_slave_0: entered allmulticast mode [ 47.303293][ T5738] bridge_slave_0: entered promiscuous mode [ 47.307766][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.310601][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.314401][ T5738] bridge_slave_1: entered allmulticast mode [ 47.316945][ T5738] bridge_slave_1: entered promiscuous mode [ 47.320786][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.357377][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.359718][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.361860][ T5748] bridge_slave_0: entered allmulticast mode [ 47.364334][ T5748] bridge_slave_0: entered promiscuous mode [ 47.368032][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.370241][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.372359][ T5748] bridge_slave_1: entered allmulticast mode [ 47.374822][ T5748] bridge_slave_1: entered promiscuous mode [ 47.378884][ T5740] team0: Port device team_slave_0 added [ 47.397200][ T5740] team0: Port device team_slave_1 added [ 47.412262][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.439390][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.443351][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.446090][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.448327][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.450524][ T5739] bridge_slave_0: entered allmulticast mode [ 47.453013][ T5739] bridge_slave_0: entered promiscuous mode [ 47.456110][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.458355][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.460633][ T5739] bridge_slave_1: entered allmulticast mode [ 47.463171][ T5739] bridge_slave_1: entered promiscuous mode [ 47.466000][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.468613][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.477380][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.482753][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.485299][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.492912][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.503281][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.534243][ T5738] team0: Port device team_slave_0 added [ 47.544316][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.549478][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.554180][ T5748] team0: Port device team_slave_0 added [ 47.557763][ T5748] team0: Port device team_slave_1 added [ 47.560786][ T5738] team0: Port device team_slave_1 added [ 47.593318][ T5739] team0: Port device team_slave_0 added [ 47.612793][ T5739] team0: Port device team_slave_1 added [ 47.614826][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.617015][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.625830][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.630297][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.632845][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.640972][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.647743][ T5740] hsr_slave_0: entered promiscuous mode [ 47.650133][ T5740] hsr_slave_1: entered promiscuous mode [ 47.664238][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.666376][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.673956][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.677738][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.679933][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.687299][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.695132][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.697178][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.704657][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.720700][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.722818][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.730423][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.793251][ T5748] hsr_slave_0: entered promiscuous mode [ 47.796162][ T5748] hsr_slave_1: entered promiscuous mode [ 47.798691][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 47.800792][ T5748] Cannot create hsr debugfs directory [ 47.805927][ T5738] hsr_slave_0: entered promiscuous mode [ 47.808141][ T5738] hsr_slave_1: entered promiscuous mode [ 47.810495][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 47.812233][ T5738] Cannot create hsr debugfs directory [ 47.842342][ T5739] hsr_slave_0: entered promiscuous mode [ 47.844880][ T5739] hsr_slave_1: entered promiscuous mode [ 47.846875][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 47.848744][ T5739] Cannot create hsr debugfs directory [ 48.141775][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.150848][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.155209][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.159097][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.161841][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.165675][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.178659][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.183236][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.219270][ T5738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.223776][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.229203][ T5738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.233131][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.235967][ T5738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.240618][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.243319][ T5738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.246849][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.295537][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.300735][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.303253][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.306729][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.310426][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.313989][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.316839][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.320929][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.375878][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.381638][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.384915][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.389636][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.397420][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.401949][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.404796][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.409026][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.437018][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.459329][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.469189][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.472678][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.483355][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.497691][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.499680][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.515081][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.522116][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.538617][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.541007][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.556568][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.561877][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.563902][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.580877][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.582939][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.586991][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.588983][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.620323][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.654995][ T5748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.661281][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.672440][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.674825][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.684605][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.686941][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.728948][ T5752] Bluetooth: hci2: command tx timeout [ 48.738619][ T5752] Bluetooth: hci1: command tx timeout [ 48.740340][ T5098] Bluetooth: hci0: command tx timeout [ 48.741495][ T64] Bluetooth: hci3: command tx timeout [ 48.847950][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.860955][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.889623][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.896943][ T5740] veth0_vlan: entered promiscuous mode [ 48.924239][ T5738] veth0_vlan: entered promiscuous mode [ 48.926520][ T5740] veth1_vlan: entered promiscuous mode [ 48.944261][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.948518][ T5738] veth1_vlan: entered promiscuous mode [ 48.959570][ T5748] veth0_vlan: entered promiscuous mode [ 48.969338][ T5748] veth1_vlan: entered promiscuous mode [ 48.991307][ T5740] veth0_macvtap: entered promiscuous mode [ 48.999940][ T5740] veth1_macvtap: entered promiscuous mode [ 49.007406][ T5738] veth0_macvtap: entered promiscuous mode [ 49.019069][ T5738] veth1_macvtap: entered promiscuous mode [ 49.036660][ T5739] veth0_vlan: entered promiscuous mode [ 49.044985][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.052584][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.056770][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.059980][ T5748] veth0_macvtap: entered promiscuous mode [ 49.073230][ T5739] veth1_vlan: entered promiscuous mode [ 49.075985][ T5748] veth1_macvtap: entered promiscuous mode [ 49.083154][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.115290][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.118712][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.163229][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.182734][ T5739] veth0_macvtap: entered promiscuous mode [ 49.191623][ T5739] veth1_macvtap: entered promiscuous mode [ 49.192042][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.197671][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.232051][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.234681][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.248450][ T5587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.252752][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.258090][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.260169][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.260572][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.281153][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.284368][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.303962][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.306548][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.318608][ T5587] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.322442][ T5587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.322635][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.339195][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.341924][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.356208][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.360364][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.384711][ T183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.388866][ T183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.398181][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.405445][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.427406][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.433245][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.438292][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.444356][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.468312][ T5587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.473291][ T5587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.476217][ T5587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.480985][ T5587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.483637][ T5899] Zero length message leads to an empty skb [ 49.498102][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.502057][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.551411][ T29] ------------[ cut here ]------------ [ 49.553540][ T29] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 49.553551][ T29] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#1: kworker/1:0/29 [ 49.559507][ T29] Modules linked in: [ 49.561404][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 49.564635][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.568177][ T29] Workqueue: ceph-msgr ceph_con_workfn [ 49.569811][ T29] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 49.572189][ T29] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 49.577727][ T29] RSP: 0018:ffffc90000687a08 EFLAGS: 00010293 [ 49.579810][ T29] RAX: 0000000000000000 RBX: ffff88805a44888b RCX: ffffffff8b7fbff0 [ 49.582218][ T29] RDX: ffff88801f69a540 RSI: ffffffff8b7fda6c RDI: ffff88801f69a540 [ 49.584577][ T29] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 49.586971][ T29] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 49.589627][ T29] R13: ffff88805a448950 R14: ffff88805a448418 R15: dffffc0000000000 [ 49.591989][ T29] FS: 0000000000000000(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 49.594707][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.596636][ T29] CR2: 00007f4485103ff8 CR3: 000000005936d000 CR4: 0000000000352ef0 [ 49.599022][ T29] Call Trace: [ 49.600030][ T29] [ 49.600910][ T29] ? ceph_con_workfn+0x48/0x13e0 [ 49.602415][ T29] ? register_lock_class+0x40/0x560 [ 49.603988][ T29] ? do_raw_spin_lock+0x128/0x260 [ 49.605542][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 49.607099][ T29] ? __lock_acquire+0x49f/0x1a40 [ 49.608936][ T29] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 49.610629][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 49.612342][ T29] ceph_con_workfn+0x9a5/0x13e0 [ 49.613806][ T29] process_one_work+0xa23/0x1940 [ 49.615279][ T29] ? __pfx_process_one_work+0x10/0x10 [ 49.616827][ T29] ? __pfx_ceph_con_workfn+0x10/0x10 [ 49.618504][ T29] worker_thread+0x5ef/0xe50 [ 49.619871][ T29] ? kthread+0x13a/0x450 [ 49.621130][ T29] ? __pfx_worker_thread+0x10/0x10 [ 49.622643][ T29] kthread+0x370/0x450 [ 49.623865][ T29] ? __pfx_kthread+0x10/0x10 [ 49.625291][ T29] ret_from_fork+0x72b/0xd50 [ 49.626673][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 49.628276][ T29] ? __switch_to+0x800/0x10f0 [ 49.629669][ T29] ? __pfx_kthread+0x10/0x10 [ 49.631053][ T29] ret_from_fork_asm+0x1a/0x30 [ 49.632485][ T29] [ 49.633480][ T29] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 49.635593][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 49.638282][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.641192][ T29] Workqueue: ceph-msgr ceph_con_workfn [ 49.642811][ T29] Call Trace: [ 49.643821][ T29] [ 49.644731][ T29] dump_stack_lvl+0x100/0x190 [ 49.646174][ T29] vpanic+0x552/0x970 [ 49.647381][ T29] ? __pfx_vpanic+0x10/0x10 [ 49.648709][ T29] panic+0xd1/0xe0 [ 49.649841][ T29] ? __pfx_panic+0x10/0x10 [ 49.651178][ T29] ? check_panic_on_warn+0x1f/0x90 [ 49.652705][ T29] check_panic_on_warn.cold+0x19/0x34 [ 49.654318][ T29] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 49.655954][ T29] __warn.cold+0x191/0x318 [ 49.657286][ T29] __report_bug+0x30f/0x440 [ 49.658634][ T29] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 49.660215][ T29] ? __pfx___report_bug+0x10/0x10 [ 49.661742][ T29] ? __pfx_tcp_recvmsg+0x10/0x10 [ 49.663225][ T29] ? inet_recvmsg+0xdc/0x4c0 [ 49.664617][ T29] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 49.666195][ T29] ? rcu_is_watching+0x12/0xc0 [ 49.667795][ T29] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 49.669557][ T29] report_bug+0xb2/0x220 [ 49.670884][ T29] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 49.672613][ T29] handle_bug+0x16a/0x2a0 [ 49.673998][ T29] exc_invalid_op+0x17/0x50 [ 49.675415][ T29] asm_exc_invalid_op+0x1a/0x20 [ 49.676928][ T29] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 49.678773][ T29] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 49.684406][ T29] RSP: 0018:ffffc90000687a08 EFLAGS: 00010293 [ 49.686199][ T29] RAX: 0000000000000000 RBX: ffff88805a44888b RCX: ffffffff8b7fbff0 [ 49.688526][ T29] RDX: ffff88801f69a540 RSI: ffffffff8b7fda6c RDI: ffff88801f69a540 [ 49.690935][ T29] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000 [ 49.693299][ T29] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 49.695622][ T29] R13: ffff88805a448950 R14: ffff88805a448418 R15: dffffc0000000000 [ 49.697920][ T29] ? ceph_con_v1_try_read+0x2a00/0x6ca0 [ 49.699635][ T29] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 49.701334][ T29] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 49.702948][ T29] ? ceph_con_workfn+0x48/0x13e0 [ 49.704417][ T29] ? register_lock_class+0x40/0x560 [ 49.705978][ T29] ? do_raw_spin_lock+0x128/0x260 [ 49.707474][ T29] ? __pfx___mutex_lock+0x10/0x10 [ 49.708970][ T29] ? __lock_acquire+0x49f/0x1a40 [ 49.710503][ T29] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 49.712217][ T29] ? debug_object_deactivate+0x2e4/0x3b0 [ 49.713982][ T29] ceph_con_workfn+0x9a5/0x13e0 [ 49.715468][ T29] process_one_work+0xa23/0x1940 [ 49.716982][ T29] ? __pfx_process_one_work+0x10/0x10 [ 49.718598][ T29] ? __pfx_ceph_con_workfn+0x10/0x10 [ 49.720156][ T29] worker_thread+0x5ef/0xe50 [ 49.721602][ T29] ? kthread+0x13a/0x450 [ 49.722962][ T29] ? __pfx_worker_thread+0x10/0x10 [ 49.724572][ T29] kthread+0x370/0x450 [ 49.725869][ T29] ? __pfx_kthread+0x10/0x10 [ 49.727332][ T29] ret_from_fork+0x72b/0xd50 [ 49.728764][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 49.730327][ T29] ? __switch_to+0x800/0x10f0 [ 49.731782][ T29] ? __pfx_kthread+0x10/0x10 [ 49.733173][ T29] ret_from_fork_asm+0x1a/0x30 [ 49.734638][ T29] [ 49.736329][ T29] Kernel Offset: disabled [ 49.737675][ T29] Rebooting in 86400 seconds..