last executing test programs: 2.438522395s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) nanosleep(&(0x7f0000000200)={0x0, 0x1000000}, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04013a0c00"], 0x7) nanosleep(&(0x7f0000000200)={0x0, 0x1000000}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e04011a0c00"], 0x7) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) 2.242249269s ago: executing program 1 (id=2): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'/24]) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c80008000400010001030000"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c82008000400010001030000"], 0xd) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c8000c00080001000103000408000806"], 0x11) nanosleep(&(0x7f0000000200)={0x1}, 0x0) 2.004107865s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='100 0\x00', 0x6) 1.270328851s ago: executing program 1 (id=6): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c010310000000000060000000"], 0xf) sendto(r0, &(0x7f0000000100)="0d000000010001", 0x7, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e04016d0c00"], 0x7) sendto(r0, &(0x7f0000000200)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c01", 0x17, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000300)="59000000170000000000000000000000000000000000010402010600", 0x1d, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000400)='X\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000500)="59000000170000000000000000000000000000000000010402010600", 0x1d, 0x0, 0x0, 0x0) 1.130185494s ago: executing program 2 (id=7): bpf$PROG_LOAD(0x5, &(0x7f0000020100)={0x3, 0x7, &(0x7f00000201c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b7000000000000009500000000000000"], &(0x7f0000020200)='GPL\x00', 0x2, 0x20000, &(0x7f0000000100)=""/131072, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x3, &(0x7f0000000500)=""/2048, 0x800) 1.072993266s ago: executing program 0 (id=1): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @any, 0x40}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000300)={r1, 0x0, 0x0, 'bnep0\x00'}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82008000400400001030000"], 0xd) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) 971.769198ms ago: executing program 1 (id=8): syz_init_net_socket$bt_sco(0x1f, 0x1, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x2, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 689.975095ms ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='2\n\x00', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e0100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000600190001000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x9}]}, 0x44}}, 0x0) 517.506068ms ago: executing program 1 (id=10): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1a85, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='legacy\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) read(r2, &(0x7f0000000800)=""/145, 0x91) write(r2, &(0x7f0000000900)='ceph v027', 0x9) write(r2, &(0x7f0000000980)='\x00'/272, 0x110) read(r2, &(0x7f0000000a00)=""/33, 0x21) write(r2, &(0x7f0000000b00)="01ffffffffffffffff000000000100"/26, 0x1a) close(r1) close(r2) close(r0) 461.10771ms ago: executing program 2 (id=11): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000054000106010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="0100000001005e01010100"/24], 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000500)="01005e0101010011223344558888aabbccdd", 0x12, 0x0, &(0x7f0000000600)={0x11, 0x8888, r1, 0x1, 0x0, 0x6, @random="01005e010101"}, 0x14) 333.928452ms ago: executing program 0 (id=12): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980), 0x100}], 0x1}, 0x40) 208.911656ms ago: executing program 2 (id=13): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000400)='\b', 0x1}, {0x0}, {&(0x7f0000000040)="cfc3590e0f4b521a5fd885570a1cb092ce33ad6a6a05f2ea7a36db2baf749a34961d47d876a2f624411c2d38a61bf0", 0x2f}, {&(0x7f0000000440)="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", 0x1000}], 0x4, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_retopts={{0x38, 0x0, 0x7, {[@generic={0x89, 0x5, "e63ad7"}, @timestamp={0x44, 0x10, 0xb6, 0x0, 0x4, [0x5, 0x40000000, 0x0]}, @timestamp={0x44, 0x8, 0xa5, 0x0, 0xe, [0x81]}, @cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @end, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4ceb}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xea, 0x3, 0x3, [{@multicast1, 0x3}, {@local, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x35}}]}, @end, @cipso={0x86, 0x6}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xc0}, 0x0) 113.729357ms ago: executing program 0 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='legacy\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000800)=""/145, 0x91) write(r2, &(0x7f0000000900)="636570682076303237000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/281, 0x119) read(r2, &(0x7f0000000a00)=""/33, 0x21) write(r2, &(0x7f0000000b00)="01ffffffffffffffff000000000100"/26, 0x1a) read(r2, &(0x7f0000000c00)=""/1, 0x1) close(r1) close(r2) close(r0) 97.743738ms ago: executing program 2 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_fastopen\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1027\n\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x2, 0x0) write(r1, &(0x7f0000000120)='0\n\x00', 0x2) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000200)='hello\x00', 0x5, 0x20000000, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) accept$inet(r2, 0x0, 0x0) 0s ago: executing program 2 (id=16): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x101701) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r2 = gettid() syz_usb_connect(0x0, 0x42, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000280)=0x800000) syz_open_dev$usbmon(&(0x7f0000000180), 0x9, 0x400002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 82.272336][ T5762] cgroup: Unknown subsys name 'net' [ 82.409455][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.111297][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.314922][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.341631][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.349499][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.358049][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.366508][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.374208][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.444415][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.452981][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.460667][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.472445][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.480833][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.492364][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.500355][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.508201][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.517382][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.525296][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.532837][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.581461][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.591967][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.601895][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.610027][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.619121][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.627429][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.634933][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.059730][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.258425][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.289547][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.301568][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.333676][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.341356][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.348666][ T5779] bridge_slave_0: entered allmulticast mode [ 87.364548][ T5779] bridge_slave_0: entered promiscuous mode [ 87.440496][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.450371][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.460134][ T5779] bridge_slave_1: entered allmulticast mode [ 87.470060][ T5779] bridge_slave_1: entered promiscuous mode [ 87.606628][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.684882][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.736582][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.743860][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.751952][ T5774] bridge_slave_0: entered allmulticast mode [ 87.759166][ T5774] bridge_slave_0: entered promiscuous mode [ 87.795647][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.803812][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.811144][ T5774] bridge_slave_1: entered allmulticast mode [ 87.818514][ T5774] bridge_slave_1: entered promiscuous mode [ 87.840165][ T5779] team0: Port device team_slave_0 added [ 87.881253][ T5779] team0: Port device team_slave_1 added [ 87.887434][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.896238][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.905106][ T5778] bridge_slave_0: entered allmulticast mode [ 87.912604][ T5778] bridge_slave_0: entered promiscuous mode [ 87.930841][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.938530][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.945992][ T5778] bridge_slave_1: entered allmulticast mode [ 87.953974][ T5778] bridge_slave_1: entered promiscuous mode [ 87.964174][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.977090][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.997478][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.004746][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.012505][ T5783] bridge_slave_0: entered allmulticast mode [ 88.019918][ T5783] bridge_slave_0: entered promiscuous mode [ 88.076653][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.083924][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.091636][ T5783] bridge_slave_1: entered allmulticast mode [ 88.099088][ T5783] bridge_slave_1: entered promiscuous mode [ 88.123895][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.137354][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.144479][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.171281][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.184856][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.192063][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.218179][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.247414][ T5774] team0: Port device team_slave_0 added [ 88.256307][ T5774] team0: Port device team_slave_1 added [ 88.265992][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.317492][ T5778] team0: Port device team_slave_0 added [ 88.336789][ T5778] team0: Port device team_slave_1 added [ 88.360085][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.390006][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.397159][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.423236][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.440302][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.450224][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.457819][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.484250][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.496133][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.503628][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.530650][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.534633][ T5085] Bluetooth: hci0: command tx timeout [ 88.559949][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.567017][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.591760][ T5085] Bluetooth: hci2: command tx timeout [ 88.597212][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.643796][ T5783] team0: Port device team_slave_0 added [ 88.671900][ T5783] team0: Port device team_slave_1 added [ 88.684762][ T5779] hsr_slave_0: entered promiscuous mode [ 88.687338][ T5085] Bluetooth: hci3: command tx timeout [ 88.690401][ T5784] Bluetooth: hci1: command tx timeout [ 88.705296][ T5779] hsr_slave_1: entered promiscuous mode [ 88.795311][ T5778] hsr_slave_0: entered promiscuous mode [ 88.804849][ T5778] hsr_slave_1: entered promiscuous mode [ 88.811024][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.819357][ T5778] Cannot create hsr debugfs directory [ 88.847227][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.854377][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.880757][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.898476][ T5774] hsr_slave_0: entered promiscuous mode [ 88.905897][ T5774] hsr_slave_1: entered promiscuous mode [ 88.912950][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.920546][ T5774] Cannot create hsr debugfs directory [ 88.956616][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.963751][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.990160][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.124564][ T5783] hsr_slave_0: entered promiscuous mode [ 89.131827][ T5783] hsr_slave_1: entered promiscuous mode [ 89.138758][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.146578][ T5783] Cannot create hsr debugfs directory [ 89.496743][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.517013][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.527245][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.538898][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.611718][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.629143][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.640920][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.656835][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.737355][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.761626][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.773266][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.798710][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.874533][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.885705][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.896825][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.917517][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.974691][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.033280][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.047715][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.076559][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.083935][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.120817][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.128029][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.157526][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.198189][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.205427][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.243238][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.250419][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.335282][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.445892][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.495428][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.535945][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.543193][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.568547][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.593929][ T5784] Bluetooth: hci0: command tx timeout [ 90.623081][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.630292][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.669523][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.676796][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.684421][ T5784] Bluetooth: hci2: command tx timeout [ 90.752001][ T5784] Bluetooth: hci3: command tx timeout [ 90.753024][ T5085] Bluetooth: hci1: command tx timeout [ 90.795226][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.802552][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.907514][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.958517][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.066579][ T5779] veth0_vlan: entered promiscuous mode [ 91.117799][ T5779] veth1_vlan: entered promiscuous mode [ 91.130596][ T5778] veth0_vlan: entered promiscuous mode [ 91.192533][ T5778] veth1_vlan: entered promiscuous mode [ 91.238782][ T5779] veth0_macvtap: entered promiscuous mode [ 91.296885][ T5779] veth1_macvtap: entered promiscuous mode [ 91.399280][ T5778] veth0_macvtap: entered promiscuous mode [ 91.414734][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.436078][ T5778] veth1_macvtap: entered promiscuous mode [ 91.454252][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.479869][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.499965][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.511553][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.524123][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.544412][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.553879][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564735][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.573777][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610495][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.624774][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.636253][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.648387][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.658155][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.667628][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.676516][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.700229][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.820458][ T5774] veth0_vlan: entered promiscuous mode [ 91.867916][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.881040][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.893838][ T5774] veth1_vlan: entered promiscuous mode [ 91.957729][ T5783] veth0_vlan: entered promiscuous mode [ 91.965721][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.978411][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.017808][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.026774][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.044981][ T5783] veth1_vlan: entered promiscuous mode [ 92.067346][ T5774] veth0_macvtap: entered promiscuous mode [ 92.079832][ T5774] veth1_macvtap: entered promiscuous mode [ 92.142092][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.149974][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.170117][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.180777][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.191630][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.205777][ T23] cfg80211: failed to load regulatory.db [ 92.212659][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.225368][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.266820][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.295493][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.321123][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.341731][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.356957][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.385552][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.401764][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.410586][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.420137][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423397][ T5842] Bluetooth: MGMT ver 1.22 [ 92.522814][ T5783] veth0_macvtap: entered promiscuous mode [ 92.569108][ T5783] veth1_macvtap: entered promiscuous mode [ 92.627271][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.645139][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.657889][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.671621][ T5784] Bluetooth: hci0: command tx timeout [ 92.678667][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.690354][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.705689][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.720880][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.803847][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.815209][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.826704][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.839480][ T5784] Bluetooth: hci1: command tx timeout [ 92.844944][ T5777] Bluetooth: hci3: command tx timeout [ 92.861993][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.876352][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.887385][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.899164][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.926164][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.950974][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.019131][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.031550][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.046884][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057301][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100032][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.121386][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.286018][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.312858][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.440521][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.479440][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.479236][ T5845] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_CONNECT_MSG) [ 94.519590][ T5085] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 94.751750][ T5085] Bluetooth: hci0: command 0x0419 tx timeout [ 94.772896][ T5845] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 94.820941][ T5840] ------------[ cut here ]------------ [ 94.826677][ T5840] WARNING: CPU: 1 PID: 5840 at include/linux/ceph/decode.h:238 ceph_con_v1_try_read+0x5c08/0x6400 [ 94.837921][ T5840] Modules linked in: [ 94.841979][ T5840] CPU: 1 PID: 5840 Comm: kworker/1:5 Not tainted syzkaller #0 [ 94.849494][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.859681][ T5840] Workqueue: ceph-msgr ceph_con_workfn [ 94.865289][ T5840] RIP: 0010:ceph_con_v1_try_read+0x5c08/0x6400 [ 94.871617][ T5840] Code: c4 08 49 8d 5d 30 48 89 d8 48 c1 e8 03 42 80 3c 38 00 0f 84 95 01 00 00 48 89 df e8 c2 ba 90 f7 e9 88 01 00 00 e8 98 38 38 f7 <0f> 0b e9 65 f4 ff ff e8 8c 38 38 f7 48 c7 c7 40 46 e6 8b 44 89 fe [ 94.892605][ T5840] RSP: 0018:ffffc900048871c0 EFLAGS: 00010293 [ 94.898743][ T5840] RAX: ffffffff8a4f49d8 RBX: dffffc0000000000 RCX: ffff88802962da00 [ 94.907037][ T5840] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 94.915879][ T5840] RBP: ffffc90004887b38 R08: ffffc9000488700f R09: 0000000000000000 [ 94.923979][ T5840] R10: ffffc90004887000 R11: fffff52000910e02 R12: 0000000000000002 [ 94.932159][ T5085] Bluetooth: hci3: command tx timeout [ 94.932168][ T5840] R13: 0000000000000200 R14: fffff52000910e74 R15: ffff888025c3477a [ 94.945828][ T5840] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 94.955011][ T5840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.961904][ T5840] CR2: 000000110c2e6fdf CR3: 00000000770e2000 CR4: 00000000003506e0 [ 94.969897][ T5840] Call Trace: [ 94.973369][ T5840] [ 94.976339][ T5840] ? __ieee80211_subif_start_xmit+0x782/0x1540 [ 94.982624][ T5840] ? ieee80211_multicast_to_unicast+0x19c/0x310 [ 94.990085][ T5840] ? ceph_strings_empty+0x20/0x20 [ 94.995375][ T5840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 95.001647][ T5840] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 95.007079][ T5840] ? lock_chain_count+0x20/0x20 [ 95.012043][ T5840] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.017476][ T5840] ? lockdep_hardirqs_on+0x98/0x150 [ 95.022881][ T5840] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.028316][ T5840] ? _local_bh_enable+0xa0/0xa0 [ 95.033295][ T5840] ? __dev_queue_xmit+0x272/0x37e0 [ 95.038461][ T5840] ? __dev_queue_xmit+0x1329/0x37e0 [ 95.043819][ T5840] ? __dev_queue_xmit+0x272/0x37e0 [ 95.049019][ T5840] ? mark_lock+0x94/0x320 [ 95.053503][ T5840] ? __lock_acquire+0x1336/0x7d80 [ 95.058602][ T5840] ? register_lock_class+0xc4/0x8a0 [ 95.063952][ T5840] ? verify_lock_unused+0x140/0x140 [ 95.069208][ T5840] ? is_dynamic_key+0x260/0x260 [ 95.074684][ T5840] ? mark_lock+0x94/0x320 [ 95.079079][ T5840] ? __lock_acquire+0x1336/0x7d80 [ 95.084250][ T5840] ? __mutex_trylock_common+0x160/0x270 [ 95.089858][ T5840] ? trace_raw_output_contention_end+0xd0/0xd0 [ 95.097247][ T5840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 95.103560][ T5840] ? __lock_acquire+0x7d80/0x7d80 [ 95.108654][ T5840] ceph_con_workfn+0x205/0x1250 [ 95.113651][ T5840] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.118902][ T5840] ? process_scheduled_works+0x975/0x1600 [ 95.124744][ T5840] ? process_scheduled_works+0x975/0x1600 [ 95.130535][ T5840] process_scheduled_works+0xa60/0x1600 [ 95.136238][ T5840] ? worker_attach_to_pool+0x370/0x370 [ 95.141866][ T5840] ? assign_work+0x3cc/0x5d0 [ 95.146526][ T5840] worker_thread+0xa5e/0xfe0 [ 95.152253][ T5840] ? _raw_spin_unlock+0x40/0x40 [ 95.157172][ T5840] ? __kthread_parkme+0x71/0x1c0 [ 95.162276][ T5840] kthread+0x2fa/0x390 [ 95.166400][ T5840] ? pr_cont_work+0x550/0x550 [ 95.171213][ T5840] ? kthread_blkcg+0xd0/0xd0 [ 95.175866][ T5840] ret_from_fork+0x48/0x80 [ 95.180341][ T5840] ? kthread_blkcg+0xd0/0xd0 [ 95.185092][ T5840] ret_from_fork_asm+0x11/0x20 [ 95.189951][ T5840] [ 95.194182][ T5840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.201521][ T5840] CPU: 1 PID: 5840 Comm: kworker/1:5 Not tainted syzkaller #0 [ 95.209002][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.219078][ T5840] Workqueue: ceph-msgr ceph_con_workfn [ 95.224574][ T5840] Call Trace: [ 95.227884][ T5840] [ 95.230848][ T5840] dump_stack_lvl+0x18c/0x250 [ 95.235559][ T5840] ? show_regs_print_info+0x20/0x20 [ 95.240781][ T5840] ? load_image+0x420/0x420 [ 95.245324][ T5840] panic+0x2ca/0x720 [ 95.249261][ T5840] ? bpf_jit_dump+0xd0/0xd0 [ 95.253811][ T5840] ? ret_from_fork_asm+0x11/0x20 [ 95.258784][ T5840] __warn+0x2e0/0x470 [ 95.262813][ T5840] ? ceph_con_v1_try_read+0x5c08/0x6400 [ 95.268390][ T5840] ? ceph_con_v1_try_read+0x5c08/0x6400 [ 95.273967][ T5840] report_bug+0x2be/0x4f0 [ 95.278324][ T5840] ? ceph_con_v1_try_read+0x5c08/0x6400 [ 95.283897][ T5840] ? ceph_con_v1_try_read+0x5c08/0x6400 [ 95.289464][ T5840] ? ceph_con_v1_try_read+0x5c0a/0x6400 [ 95.295043][ T5840] handle_bug+0xcf/0x120 [ 95.299326][ T5840] exc_invalid_op+0x1a/0x50 [ 95.303858][ T5840] asm_exc_invalid_op+0x1a/0x20 [ 95.308738][ T5840] RIP: 0010:ceph_con_v1_try_read+0x5c08/0x6400 [ 95.314920][ T5840] Code: c4 08 49 8d 5d 30 48 89 d8 48 c1 e8 03 42 80 3c 38 00 0f 84 95 01 00 00 48 89 df e8 c2 ba 90 f7 e9 88 01 00 00 e8 98 38 38 f7 <0f> 0b e9 65 f4 ff ff e8 8c 38 38 f7 48 c7 c7 40 46 e6 8b 44 89 fe [ 95.334570][ T5840] RSP: 0018:ffffc900048871c0 EFLAGS: 00010293 [ 95.340661][ T5840] RAX: ffffffff8a4f49d8 RBX: dffffc0000000000 RCX: ffff88802962da00 [ 95.348665][ T5840] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 95.356664][ T5840] RBP: ffffc90004887b38 R08: ffffc9000488700f R09: 0000000000000000 [ 95.364662][ T5840] R10: ffffc90004887000 R11: fffff52000910e02 R12: 0000000000000002 [ 95.372676][ T5840] R13: 0000000000000200 R14: fffff52000910e74 R15: ffff888025c3477a [ 95.380701][ T5840] ? ceph_con_v1_try_read+0x5c08/0x6400 [ 95.386304][ T5840] ? __ieee80211_subif_start_xmit+0x782/0x1540 [ 95.392524][ T5840] ? ieee80211_multicast_to_unicast+0x19c/0x310 [ 95.398820][ T5840] ? ceph_strings_empty+0x20/0x20 [ 95.403886][ T5840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 95.409907][ T5840] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 95.415312][ T5840] ? lock_chain_count+0x20/0x20 [ 95.420200][ T5840] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.425613][ T5840] ? lockdep_hardirqs_on+0x98/0x150 [ 95.430855][ T5840] ? __local_bh_enable_ip+0x13a/0x1c0 [ 95.436256][ T5840] ? _local_bh_enable+0xa0/0xa0 [ 95.441144][ T5840] ? __dev_queue_xmit+0x272/0x37e0 [ 95.446292][ T5840] ? __dev_queue_xmit+0x1329/0x37e0 [ 95.451527][ T5840] ? __dev_queue_xmit+0x272/0x37e0 [ 95.456678][ T5840] ? mark_lock+0x94/0x320 [ 95.461037][ T5840] ? __lock_acquire+0x1336/0x7d80 [ 95.466112][ T5840] ? register_lock_class+0xc4/0x8a0 [ 95.471340][ T5840] ? verify_lock_unused+0x140/0x140 [ 95.476561][ T5840] ? is_dynamic_key+0x260/0x260 [ 95.481438][ T5840] ? mark_lock+0x94/0x320 [ 95.485797][ T5840] ? __lock_acquire+0x1336/0x7d80 [ 95.490869][ T5840] ? __mutex_trylock_common+0x160/0x270 [ 95.496457][ T5840] ? trace_raw_output_contention_end+0xd0/0xd0 [ 95.502713][ T5840] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 95.508739][ T5840] ? __lock_acquire+0x7d80/0x7d80 [ 95.513889][ T5840] ceph_con_workfn+0x205/0x1250 [ 95.518781][ T5840] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.524010][ T5840] ? process_scheduled_works+0x975/0x1600 [ 95.529760][ T5840] ? process_scheduled_works+0x975/0x1600 [ 95.535519][ T5840] process_scheduled_works+0xa60/0x1600 [ 95.541121][ T5840] ? worker_attach_to_pool+0x370/0x370 [ 95.546617][ T5840] ? assign_work+0x3cc/0x5d0 [ 95.551242][ T5840] worker_thread+0xa5e/0xfe0 [ 95.555883][ T5840] ? _raw_spin_unlock+0x40/0x40 [ 95.560787][ T5840] ? __kthread_parkme+0x71/0x1c0 [ 95.565771][ T5840] kthread+0x2fa/0x390 [ 95.569866][ T5840] ? pr_cont_work+0x550/0x550 [ 95.574584][ T5840] ? kthread_blkcg+0xd0/0xd0 [ 95.579197][ T5840] ret_from_fork+0x48/0x80 [ 95.583645][ T5840] ? kthread_blkcg+0xd0/0xd0 [ 95.588268][ T5840] ret_from_fork_asm+0x11/0x20 [ 95.593082][ T5840] [ 95.596705][ T5840] Kernel Offset: disabled [ 95.601108][ T5840] Rebooting in 86400 seconds..