program:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/29, 0x1e)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
[ 124.668346][ T5293] Bluetooth: hci0: command tx timeout
[ 124.889408][ T4699] ------------[ cut here ]------------
[ 124.892336][ T4699] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq)
[ 124.892350][ T4699] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:4/4699
[ 124.900975][ T4699] Modules linked in:
[ 124.903571][ T4699] CPU: 0 UID: 0 PID: 4699 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 124.907593][ T4699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 124.912457][ T4699] Workqueue: ceph-msgr ceph_con_workfn
[ 124.914847][ T4699] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[ 124.917510][ T4699] Code: 45 31 e4 e9 3f d1 ff ff e8 68 d0 30 f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a d0 30 f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c d0 30 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[ 124.925634][ T4699] RSP: 0018:ffffc90002507180 EFLAGS: 00010293
[ 124.928223][ T4699] RAX: ffffffff8b9654e4 RBX: 0000000000000001 RCX: ffff88801fbb0000
[ 124.931872][ T4699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 124.935198][ T4699] RBP: ffffc90002507a78 R08: ffff88801fbb0000 R09: 0000000000000009
[ 124.938634][ T4699] R10: 000000000000000d R11: 0000000000000000 R12: ffff888012a44418
[ 124.942073][ T4699] R13: fffff520004a0e70 R14: dffffc0000000000 R15: 0000000000000000
[ 124.945527][ T4699] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 124.949290][ T4699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 124.952213][ T4699] CR2: 00007f9b6e6d2fe8 CR3: 0000000043990000 CR4: 0000000000352ef0
[ 124.955519][ T4699] Call Trace:
[ 124.957046][ T4699]
[ 124.958372][ T4699] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 124.960881][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.962980][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.965217][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.967391][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.969462][ T4699] ? do_raw_spin_lock+0x12b/0x2f0
[ 124.971735][ T4699] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 124.974023][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.976204][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.978531][ T4699] ? __free_object+0x432/0x5d0
[ 124.980779][ T4699] ? lockdep_hardirqs_on+0x7a/0x110
[ 124.983051][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.985172][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.987276][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 124.989352][ T4699] ? __mutex_trylock_common+0x15f/0x270
[ 124.991823][ T4699] ? __pfx___mutex_trylock_common+0x10/0x10
[ 124.994292][ T4699] ? rcu_is_watching+0x15/0xb0
[ 124.996694][ T4699] ? trace_contention_end+0x3d/0x140
[ 124.999280][ T4699] ? __mutex_lock+0x30d/0x1550
[ 125.001434][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.003561][ T4699] ? ceph_con_workfn+0x3b/0x14a0
[ 125.005702][ T4699] ? __pfx___mutex_lock+0x10/0x10
[ 125.007883][ T4699] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.010127][ T4699] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.012445][ T4699] ? process_scheduled_works+0xa20/0x14e0
[ 125.014862][ T4699] ceph_con_workfn+0x208/0x14a0
[ 125.016828][ T4699] ? rcu_is_watching+0x15/0xb0
[ 125.018720][ T4699] ? process_scheduled_works+0xa20/0x14e0
[ 125.021108][ T4699] process_scheduled_works+0xa8e/0x14e0
[ 125.023356][ T4699] ? __pfx_process_scheduled_works+0x10/0x10
[ 125.025889][ T4699] ? assign_work+0x3cf/0x5d0
[ 125.027843][ T4699] worker_thread+0xa47/0xfb0
[ 125.030063][ T4699] kthread+0x388/0x470
[ 125.031889][ T4699] ? __pfx_worker_thread+0x10/0x10
[ 125.034051][ T4699] ? __pfx_kthread+0x10/0x10
[ 125.036074][ T4699] ret_from_fork+0x514/0xb70
[ 125.038046][ T4699] ? __pfx_ret_from_fork+0x10/0x10
[ 125.040359][ T4699] ? __switch_to+0xc89/0x1420
[ 125.042383][ T4699] ? __pfx_kthread+0x10/0x10
[ 125.044447][ T4699] ret_from_fork_asm+0x1a/0x30
[ 125.046523][ T4699]
[ 125.047816][ T4699] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 125.050837][ T4699] CPU: 0 UID: 0 PID: 4699 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 125.054744][ T4699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 125.058898][ T4699] Workqueue: ceph-msgr ceph_con_workfn
[ 125.061185][ T4699] Call Trace:
[ 125.062586][ T4699]
[ 125.063848][ T4699] vpanic+0x56c/0xa60
[ 125.065574][ T4699] ? __pfx__printk+0x10/0x10
[ 125.067527][ T4699] ? __pfx_vpanic+0x10/0x10
[ 125.069446][ T4699] ? is_bpf_text_address+0x292/0x2b0
[ 125.071618][ T4699] ? is_bpf_text_address+0x26/0x2b0
[ 125.073881][ T4699] panic+0xc5/0xd0
[ 125.075482][ T4699] ? __pfx_panic+0x10/0x10
[ 125.077430][ T4699] ? ret_from_fork_asm+0x1a/0x30
[ 125.079509][ T4699] __warn+0x315/0x4c0
[ 125.081216][ T4699] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 125.083536][ T4699] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 125.085908][ T4699] __report_bug+0x276/0x570
[ 125.087857][ T4699] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 125.090149][ T4699] ? __pfx___report_bug+0x10/0x10
[ 125.092350][ T4699] ? tcp_recvmsg+0x213/0x7f0
[ 125.094353][ T4699] ? __local_bh_enable_ip+0xd0/0x130
[ 125.096615][ T4699] ? lockdep_hardirqs_on+0x7a/0x110
[ 125.098885][ T4699] ? tcp_recvmsg+0x213/0x7f0
[ 125.100865][ T4699] ? tcp_recvmsg+0x288/0x7f0
[ 125.102804][ T4699] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 125.105206][ T4699] report_bug+0x16a/0x220
[ 125.107090][ T4699] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 125.109437][ T4699] ? ceph_con_v1_try_read+0x3337/0x6eb0
[ 125.111788][ T4699] handle_bug+0x9c/0x200
[ 125.113635][ T4699] exc_invalid_op+0x1a/0x50
[ 125.115524][ T4699] asm_exc_invalid_op+0x1a/0x20
[ 125.117843][ T4699] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[ 125.120499][ T4699] Code: 45 31 e4 e9 3f d1 ff ff e8 68 d0 30 f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a d0 30 f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c d0 30 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[ 125.128613][ T4699] RSP: 0018:ffffc90002507180 EFLAGS: 00010293
[ 125.131171][ T4699] RAX: ffffffff8b9654e4 RBX: 0000000000000001 RCX: ffff88801fbb0000
[ 125.134462][ T4699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 125.137853][ T4699] RBP: ffffc90002507a78 R08: ffff88801fbb0000 R09: 0000000000000009
[ 125.141224][ T4699] R10: 000000000000000d R11: 0000000000000000 R12: ffff888012a44418
[ 125.144515][ T4699] R13: fffff520004a0e70 R14: dffffc0000000000 R15: 0000000000000000
[ 125.147875][ T4699] ? ceph_con_v1_try_read+0x3334/0x6eb0
[ 125.150213][ T4699] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 125.152606][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.154697][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.156864][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.158966][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.161095][ T4699] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.163193][ T4699] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.165405][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.167527][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.169593][ T4699] ? __free_object+0x432/0x5d0
[ 125.171633][ T4699] ? lockdep_hardirqs_on+0x7a/0x110
[ 125.173858][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.175996][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.178071][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.180139][ T4699] ? __mutex_trylock_common+0x15f/0x270
[ 125.182519][ T4699] ? __pfx___mutex_trylock_common+0x10/0x10
[ 125.185009][ T4699] ? rcu_is_watching+0x15/0xb0
[ 125.187157][ T4699] ? trace_contention_end+0x3d/0x140
[ 125.189471][ T4699] ? __mutex_lock+0x30d/0x1550
[ 125.191600][ T4699] ? __lock_acquire+0x683/0x2cf0
[ 125.193729][ T4699] ? ceph_con_workfn+0x3b/0x14a0
[ 125.195879][ T4699] ? __pfx___mutex_lock+0x10/0x10
[ 125.198015][ T4699] ? do_raw_spin_lock+0x12b/0x2f0
[ 125.200240][ T4699] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 125.202557][ T4699] ? process_scheduled_works+0xa20/0x14e0
[ 125.204943][ T4699] ceph_con_workfn+0x208/0x14a0
[ 125.206987][ T4699] ? rcu_is_watching+0x15/0xb0
[ 125.209134][ T4699] ? process_scheduled_works+0xa20/0x14e0
[ 125.211552][ T4699] process_scheduled_works+0xa8e/0x14e0
[ 125.213949][ T4699] ? __pfx_process_scheduled_works+0x10/0x10
[ 125.216554][ T4699] ? assign_work+0x3cf/0x5d0
[ 125.218931][ T4699] worker_thread+0xa47/0xfb0
[ 125.220920][ T4699] kthread+0x388/0x470
[ 125.222682][ T4699] ? __pfx_worker_thread+0x10/0x10
[ 125.224860][ T4699] ? __pfx_kthread+0x10/0x10
[ 125.226893][ T4699] ret_from_fork+0x514/0xb70
[ 125.228857][ T4699] ? __pfx_ret_from_fork+0x10/0x10
[ 125.230986][ T4699] ? __switch_to+0xc89/0x1420
[ 125.233014][ T4699] ? __pfx_kthread+0x10/0x10
[ 125.234926][ T4699] ret_from_fork_asm+0x1a/0x30
[ 125.237017][ T4699]
[ 125.238722][ T4699] Kernel Offset: disabled
[ 125.240550][ T4699] Rebooting in 86400 seconds..