last executing test programs:
0s ago: executing program 1 (id=2):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='mount_timeout\x00', &(0x7f0000000700)='5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, 0x0, 0x0)
write(r2, &(0x7f0000000800)='ceph v2\n\x00'/20, 0x1c)
shutdown(r2, 0x2)
close(r2)
close(r0)
nanosleep(&(0x7f0000000800)={0x2}, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts.
[ 82.481576][ T5757] cgroup: Unknown subsys name 'net'
[ 82.617389][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 84.366029][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 85.995171][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 86.003642][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 86.011426][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 86.029498][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 86.037749][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 86.045734][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 86.111729][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 86.120371][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 86.128049][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 86.139049][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 86.146845][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 86.154304][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 86.192168][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 86.201670][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 86.210319][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 86.219119][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 86.227660][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 86.235503][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 86.244069][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 86.252264][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 86.260230][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 86.262693][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 86.275264][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 86.283219][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 86.570967][ T5768] chnl_net:caif_netlink_parms(): no params data found
[ 86.723431][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.732209][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.740195][ T5768] bridge_slave_0: entered allmulticast mode
[ 86.747427][ T5768] bridge_slave_0: entered promiscuous mode
[ 86.757408][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[ 86.764724][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.772968][ T5768] bridge_slave_1: entered allmulticast mode
[ 86.780243][ T5768] bridge_slave_1: entered promiscuous mode
[ 86.851915][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 86.872767][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 86.887001][ T5775] chnl_net:caif_netlink_parms(): no params data found
[ 86.962923][ T5772] chnl_net:caif_netlink_parms(): no params data found
[ 86.977765][ T5768] team0: Port device team_slave_0 added
[ 86.987368][ T5768] team0: Port device team_slave_1 added
[ 87.072839][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.080730][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.107289][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.196108][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.208180][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.239738][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.304936][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.315803][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.323325][ T5775] bridge_slave_0: entered allmulticast mode
[ 87.331066][ T5775] bridge_slave_0: entered promiscuous mode
[ 87.344452][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.351745][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.362633][ T5775] bridge_slave_1: entered allmulticast mode
[ 87.370395][ T5775] bridge_slave_1: entered promiscuous mode
[ 87.392396][ T5776] chnl_net:caif_netlink_parms(): no params data found
[ 87.489628][ T5768] hsr_slave_0: entered promiscuous mode
[ 87.496982][ T5768] hsr_slave_1: entered promiscuous mode
[ 87.538432][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.545720][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.553370][ T5772] bridge_slave_0: entered allmulticast mode
[ 87.561158][ T5772] bridge_slave_0: entered promiscuous mode
[ 87.570192][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.577379][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.584885][ T5772] bridge_slave_1: entered allmulticast mode
[ 87.592458][ T5772] bridge_slave_1: entered promiscuous mode
[ 87.700802][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.756042][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.769944][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.782632][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.871181][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.878542][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.885787][ T5776] bridge_slave_0: entered allmulticast mode
[ 87.894370][ T5776] bridge_slave_0: entered promiscuous mode
[ 87.916689][ T5775] team0: Port device team_slave_0 added
[ 87.932147][ T5775] team0: Port device team_slave_1 added
[ 87.940132][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.947274][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.957825][ T5776] bridge_slave_1: entered allmulticast mode
[ 87.965633][ T5776] bridge_slave_1: entered promiscuous mode
[ 87.986279][ T5772] team0: Port device team_slave_0 added
[ 87.995850][ T5772] team0: Port device team_slave_1 added
[ 88.035303][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.073882][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.080963][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.106988][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.119301][ T5774] Bluetooth: hci0: command tx timeout
[ 88.124046][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.182491][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.189633][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.216048][ T5774] Bluetooth: hci1: command tx timeout
[ 88.221947][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.235304][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.242774][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.268837][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.281992][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.289101][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.315248][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.330648][ T5776] team0: Port device team_slave_0 added
[ 88.358566][ T5774] Bluetooth: hci3: command tx timeout
[ 88.358650][ T5779] Bluetooth: hci2: command tx timeout
[ 88.380203][ T5776] team0: Port device team_slave_1 added
[ 88.466997][ T5775] hsr_slave_0: entered promiscuous mode
[ 88.473906][ T5775] hsr_slave_1: entered promiscuous mode
[ 88.480965][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.489114][ T5775] Cannot create hsr debugfs directory
[ 88.495400][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.502818][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.528832][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.542226][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.549359][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 88.575385][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 88.647897][ T5772] hsr_slave_0: entered promiscuous mode
[ 88.654474][ T5772] hsr_slave_1: entered promiscuous mode
[ 88.661112][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.668825][ T5772] Cannot create hsr debugfs directory
[ 88.685823][ T5776] hsr_slave_0: entered promiscuous mode
[ 88.693655][ T5776] hsr_slave_1: entered promiscuous mode
[ 88.700126][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 88.707709][ T5776] Cannot create hsr debugfs directory
[ 88.887547][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 88.906247][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 88.937551][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 88.950867][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 89.217186][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 89.249985][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 89.261957][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 89.273120][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 89.377055][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 89.392155][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 89.411895][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 89.422989][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 89.474040][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.533498][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.562036][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.573307][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.605856][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.630654][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.674823][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.682300][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.706797][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.734536][ T42] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.741790][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.794745][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.832101][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.839320][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.860779][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.868005][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.921063][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.040415][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.060566][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[ 90.104318][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.111572][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.137210][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.144497][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.165675][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[ 90.199442][ T5779] Bluetooth: hci0: command tx timeout
[ 90.230739][ T5772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 90.245344][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 90.278753][ T5779] Bluetooth: hci1: command tx timeout
[ 90.295722][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 90.303053][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 90.320822][ T59] bridge0: port 2(bridge_slave_1) entered blocking state
[ 90.328196][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 90.439319][ T5779] Bluetooth: hci2: command tx timeout
[ 90.439486][ T5774] Bluetooth: hci3: command tx timeout
[ 90.541189][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 90.614421][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.731473][ T5768] veth0_vlan: entered promiscuous mode
[ 90.782518][ T5768] veth1_vlan: entered promiscuous mode
[ 90.831189][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.957007][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.967894][ T5768] veth0_macvtap: entered promiscuous mode
[ 90.993436][ T5768] veth1_macvtap: entered promiscuous mode
[ 91.016182][ T5775] veth0_vlan: entered promiscuous mode
[ 91.051238][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.067906][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.093892][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.103381][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.114045][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.123462][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.149455][ T5775] veth1_vlan: entered promiscuous mode
[ 91.186241][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 91.301983][ T5775] veth0_macvtap: entered promiscuous mode
[ 91.313290][ T5775] veth1_macvtap: entered promiscuous mode
[ 91.336507][ T5772] veth0_vlan: entered promiscuous mode
[ 91.354224][ T5772] veth1_vlan: entered promiscuous mode
[ 91.360594][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.369914][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.444288][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 91.459844][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 91.473415][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.495331][ T5776] veth0_vlan: entered promiscuous mode
[ 91.510358][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.528388][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.574437][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 91.586249][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 91.603719][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 91.632853][ T5772] veth0_macvtap: entered promiscuous mode
[ 91.647674][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.658071][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.668092][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.678641][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 91.692657][ T5776] veth1_vlan: entered promiscuous mode
[ 91.704085][ T5772] veth1_macvtap: entered promiscuous mode
[ 91.853041][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 91.877671][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 91.893081][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 91.904104][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 91.919848][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 91.941183][ T5808] ------------[ cut here ]------------
[ 91.946915][ T5808] WARNING: CPU: 1 PID: 5808 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 91.957442][ T5808] Modules linked in:
[ 91.962169][ T5808] CPU: 1 PID: 5808 Comm: kworker/1:5 Not tainted syzkaller #0
[ 91.969800][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 91.980125][ T5808] Workqueue: ceph-msgr ceph_con_workfn
[ 91.985695][ T5808] RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 91.992057][ T5808] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 0f dd 03 f7 0f 0b e9 57 ff ff ff e8 b3 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 a1 12 3a f7 0f 0b 41 bd
[ 92.011952][ T5808] RSP: 0018:ffffc900048ef560 EFLAGS: 00010293
[ 92.018337][ T5808] RAX: ffffffff8a4d621d RBX: ffff888025c6c6c8 RCX: ffff88806109bc00
[ 92.026401][ T5808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 92.034670][ T5808] RBP: ffffc900048efb38 R08: 0000000000000004 R09: 0000000000000004
[ 92.042883][ T5808] R10: ffff888025c6c6b4 R11: ffffed1004b8d8d8 R12: fffff5200091defc
[ 92.051079][ T5808] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[ 92.059286][ T5808] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 92.068796][ T5808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 92.075469][ T5808] CR2: 000000110c41f9b9 CR3: 000000002eb2c000 CR4: 00000000003506e0
[ 92.083645][ T5808] Call Trace:
[ 92.086985][ T5808]
[ 92.090063][ T5808] ? __lock_acquire+0x1336/0x7d80
[ 92.095235][ T5808] ? prepare_write_message_footer+0x4b0/0x4b0
[ 92.101568][ T5808] ? __lock_acquire+0x1336/0x7d80
[ 92.106707][ T5808] ? __mutex_trylock_common+0x160/0x270
[ 92.112412][ T5808] ? trace_raw_output_contention_end+0xd0/0xd0
[ 92.118797][ T5808] ? rcu_is_watching+0x15/0xb0
[ 92.123645][ T5808] ? trace_contention_end+0x39/0xe0
[ 92.129342][ T5808] ? __mutex_lock+0x30d/0xc80
[ 92.134126][ T5808] ? ceph_con_workfn+0x39/0x1250
[ 92.139239][ T5808] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 92.145306][ T5808] ? __lock_acquire+0x7d80/0x7d80
[ 92.150627][ T5808] ceph_con_workfn+0x1f1/0x1250
[ 92.155573][ T5808] ? _raw_spin_unlock_irq+0x23/0x50
[ 92.160914][ T5808] ? process_scheduled_works+0x975/0x1600
[ 92.166726][ T5808] ? process_scheduled_works+0x975/0x1600
[ 92.172635][ T5808] process_scheduled_works+0xa60/0x1600
[ 92.178531][ T5808] ? worker_attach_to_pool+0x370/0x370
[ 92.184089][ T5808] ? assign_work+0x3cc/0x5d0
[ 92.188896][ T5808] worker_thread+0xa5e/0xfe0
[ 92.193716][ T5808] ? _raw_spin_unlock+0x40/0x40
[ 92.199421][ T5808] ? __kthread_parkme+0x71/0x1c0
[ 92.204452][ T5808] kthread+0x2fa/0x390
[ 92.208645][ T5808] ? pr_cont_work+0x550/0x550
[ 92.213401][ T5808] ? kthread_blkcg+0xd0/0xd0
[ 92.218059][ T5808] ret_from_fork+0x48/0x80
[ 92.222623][ T5808] ? kthread_blkcg+0xd0/0xd0
[ 92.227277][ T5808] ret_from_fork_asm+0x11/0x20
[ 92.232438][ T5808]
[ 92.235522][ T5808] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.242843][ T5808] CPU: 1 PID: 5808 Comm: kworker/1:5 Not tainted syzkaller #0
[ 92.250359][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 92.260476][ T5808] Workqueue: ceph-msgr ceph_con_workfn
[ 92.266007][ T5808] Call Trace:
[ 92.266615][ T5776] veth0_macvtap: entered promiscuous mode
[ 92.275088][ T5808]
[ 92.278074][ T5808] dump_stack_lvl+0x18c/0x250
[ 92.282822][ T5808] ? show_regs_print_info+0x20/0x20
[ 92.287185][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 92.287238][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.287270][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 92.287302][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 92.307794][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.336475][ T5808] ? load_image+0x420/0x420
[ 92.341031][ T5808] panic+0x2ca/0x720
[ 92.344974][ T5808] ? bpf_jit_dump+0xd0/0xd0
[ 92.349523][ T5808] ? ret_from_fork_asm+0x11/0x20
[ 92.354505][ T5808] __warn+0x2e0/0x470
[ 92.358566][ T5808] ? ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 92.364256][ T5808] ? ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 92.369834][ T5808] report_bug+0x2be/0x4f0
[ 92.374195][ T5808] ? ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 92.379808][ T5808] ? ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 92.385402][ T5808] ? ceph_con_v2_try_read+0x7d1f/0x7ea0
[ 92.390984][ T5808] handle_bug+0xcf/0x120
[ 92.395260][ T5808] exc_invalid_op+0x1a/0x50
[ 92.399795][ T5808] asm_exc_invalid_op+0x1a/0x20
[ 92.404701][ T5808] RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 92.411265][ T5808] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 0f dd 03 f7 0f 0b e9 57 ff ff ff e8 b3 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 a1 12 3a f7 0f 0b 41 bd
[ 92.431706][ T5808] RSP: 0018:ffffc900048ef560 EFLAGS: 00010293
[ 92.437807][ T5808] RAX: ffffffff8a4d621d RBX: ffff888025c6c6c8 RCX: ffff88806109bc00
[ 92.445816][ T5808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 92.453819][ T5808] RBP: ffffc900048efb38 R08: 0000000000000004 R09: 0000000000000004
[ 92.461822][ T5808] R10: ffff888025c6c6b4 R11: ffffed1004b8d8d8 R12: fffff5200091defc
[ 92.469829][ T5808] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[ 92.477851][ T5808] ? ceph_con_v2_try_read+0x7d1d/0x7ea0
[ 92.483639][ T5808] ? __lock_acquire+0x1336/0x7d80
[ 92.488773][ T5808] ? prepare_write_message_footer+0x4b0/0x4b0
[ 92.494890][ T5808] ? __lock_acquire+0x1336/0x7d80
[ 92.500000][ T5808] ? __mutex_trylock_common+0x160/0x270
[ 92.505588][ T5808] ? trace_raw_output_contention_end+0xd0/0xd0
[ 92.511779][ T5808] ? rcu_is_watching+0x15/0xb0
[ 92.516585][ T5808] ? trace_contention_end+0x39/0xe0
[ 92.521814][ T5808] ? __mutex_lock+0x30d/0xc80
[ 92.526536][ T5808] ? ceph_con_workfn+0x39/0x1250
[ 92.531545][ T5808] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 92.537758][ T5808] ? __lock_acquire+0x7d80/0x7d80
[ 92.543002][ T5808] ceph_con_workfn+0x1f1/0x1250
[ 92.547900][ T5808] ? _raw_spin_unlock_irq+0x23/0x50
[ 92.553334][ T5808] ? process_scheduled_works+0x975/0x1600
[ 92.559085][ T5808] ? process_scheduled_works+0x975/0x1600
[ 92.564840][ T5808] process_scheduled_works+0xa60/0x1600
[ 92.570445][ T5808] ? worker_attach_to_pool+0x370/0x370
[ 92.576033][ T5808] ? assign_work+0x3cc/0x5d0
[ 92.580660][ T5808] worker_thread+0xa5e/0xfe0
[ 92.585317][ T5808] ? _raw_spin_unlock+0x40/0x40
[ 92.590211][ T5808] ? __kthread_parkme+0x71/0x1c0
[ 92.595192][ T5808] kthread+0x2fa/0x390
[ 92.599291][ T5808] ? pr_cont_work+0x550/0x550
[ 92.604029][ T5808] ? kthread_blkcg+0xd0/0xd0
[ 92.608651][ T5808] ret_from_fork+0x48/0x80
[ 92.613106][ T5808] ? kthread_blkcg+0xd0/0xd0
[ 92.617809][ T5808] ret_from_fork_asm+0x11/0x20
[ 92.622645][ T5808]
[ 92.626273][ T5808] Kernel Offset: disabled
[ 92.630687][ T5808] Rebooting in 86400 seconds..