program:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
write(r2, &(0x7f0000000800)="01ffffffffffffffff00"/27, 0x1a)
nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0)
write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
[ 95.712722][ T4651] Bluetooth: hci0: command tx timeout
[ 95.837035][ T10] ------------[ cut here ]------------
[ 95.839660][ T10] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq)
[ 95.839675][ T10] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:1/10
[ 95.848726][ T10] Modules linked in:
[ 95.850707][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 95.854477][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.858658][ T10] Workqueue: ceph-msgr ceph_con_workfn
[ 95.861065][ T10] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[ 95.863625][ T10] Code: 45 31 e4 e9 3f d1 ff ff e8 68 d0 30 f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a d0 30 f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c d0 30 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[ 95.871656][ T10] RSP: 0018:ffffc9000023f180 EFLAGS: 00010293
[ 95.874205][ T10] RAX: ffffffff8b9654e4 RBX: 0000000000000001 RCX: ffff88801bf0a540
[ 95.877473][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 95.881282][ T10] RBP: ffffc9000023fa78 R08: ffff88801bf0a540 R09: 0000000000000009
[ 95.884744][ T10] R10: 000000000000000d R11: 0000000000000000 R12: ffff888033774418
[ 95.888233][ T10] R13: fffff52000047e70 R14: dffffc0000000000 R15: 0000000000000000
[ 95.891735][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 95.895631][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.898345][ T10] CR2: 00007faa281f36b8 CR3: 0000000043837000 CR4: 0000000000352ef0
[ 95.902043][ T10] Call Trace:
[ 95.903562][ T10]
[ 95.904815][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 95.907249][ T10] ? dev_hard_start_xmit+0x7c7/0x830
[ 95.909614][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 95.911777][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 95.913767][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 95.916044][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.918296][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 95.921155][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 95.923858][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 95.926518][ T10] ? __dev_queue_xmit+0x1edc/0x3820
[ 95.929436][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 95.932085][ T10] ? __pfx_mroute6_is_socket+0x10/0x10
[ 95.934579][ T10] ? ipv6_chk_mcast_addr+0x2e/0x860
[ 95.936779][ T10] ? __pfx___dev_queue_xmit+0x10/0x10
[ 95.939353][ T10] ? ip6_finish_output+0x292/0x770
[ 95.941495][ T10] ? ip6_finish_output+0x292/0x770
[ 95.943452][ T10] ? ip6_finish_output2+0xb02/0x13c0
[ 95.945596][ T10] ? __asan_memcpy+0x40/0x70
[ 95.947628][ T10] ? __lock_acquire+0x683/0x2cf0
[ 95.949844][ T10] ? __lock_acquire+0x683/0x2cf0
[ 95.951965][ T10] ? __mutex_trylock_common+0x15f/0x270
[ 95.954267][ T10] ? __pfx___mutex_trylock_common+0x10/0x10
[ 95.956717][ T10] ? rcu_is_watching+0x15/0xb0
[ 95.958904][ T10] ? trace_contention_end+0x3d/0x140
[ 95.961234][ T10] ? __mutex_lock+0x30d/0x1550
[ 95.963286][ T10] ? __lock_acquire+0x683/0x2cf0
[ 95.965473][ T10] ? rcu_is_watching+0x15/0xb0
[ 95.967519][ T10] ? ceph_con_workfn+0x3b/0x14a0
[ 95.969686][ T10] ? __pfx___mutex_lock+0x10/0x10
[ 95.971819][ T10] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.973937][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 95.976152][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 95.978477][ T10] ceph_con_workfn+0x208/0x14a0
[ 95.980606][ T10] ? rcu_is_watching+0x15/0xb0
[ 95.982748][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 95.985100][ T10] process_scheduled_works+0xa8e/0x14e0
[ 95.987380][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.989898][ T10] ? assign_work+0x3cf/0x5d0
[ 95.991873][ T10] worker_thread+0xa47/0xfb0
[ 95.993821][ T10] ? __kthread_parkme+0x71/0x1f0
[ 95.996290][ T10] kthread+0x388/0x470
[ 95.998190][ T10] ? __pfx_worker_thread+0x10/0x10
[ 96.000740][ T10] ? __pfx_kthread+0x10/0x10
[ 96.002774][ T10] ret_from_fork+0x514/0xb70
[ 96.004775][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 96.006827][ T10] ? __switch_to+0xc89/0x1420
[ 96.008818][ T10] ? __pfx_kthread+0x10/0x10
[ 96.010953][ T10] ret_from_fork_asm+0x1a/0x30
[ 96.013031][ T10]
[ 96.014355][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 96.017390][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 96.021133][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 96.025229][ T10] Workqueue: ceph-msgr ceph_con_workfn
[ 96.027458][ T10] Call Trace:
[ 96.028917][ T10]
[ 96.030195][ T10] vpanic+0x56c/0xa60
[ 96.031868][ T10] ? __pfx__printk+0x10/0x10
[ 96.033806][ T10] ? __pfx_vpanic+0x10/0x10
[ 96.035740][ T10] ? is_bpf_text_address+0x292/0x2b0
[ 96.037964][ T10] ? is_bpf_text_address+0x26/0x2b0
[ 96.040121][ T10] panic+0xc5/0xd0
[ 96.041731][ T10] ? __pfx_panic+0x10/0x10
[ 96.043657][ T10] ? ret_from_fork_asm+0x1a/0x30
[ 96.045704][ T10] __warn+0x315/0x4c0
[ 96.047360][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 96.049562][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 96.051778][ T10] __report_bug+0x276/0x570
[ 96.053612][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 96.055860][ T10] ? __pfx___report_bug+0x10/0x10
[ 96.057895][ T10] ? tcp_recvmsg+0x213/0x7f0
[ 96.060039][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 96.062434][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 96.064639][ T10] ? tcp_recvmsg+0x213/0x7f0
[ 96.066592][ T10] ? tcp_recvmsg+0x288/0x7f0
[ 96.068797][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 96.071156][ T10] report_bug+0x16a/0x220
[ 96.073105][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 96.075416][ T10] ? ceph_con_v1_try_read+0x3337/0x6eb0
[ 96.077668][ T10] handle_bug+0x9c/0x200
[ 96.079431][ T10] exc_invalid_op+0x1a/0x50
[ 96.081333][ T10] asm_exc_invalid_op+0x1a/0x20
[ 96.083311][ T10] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[ 96.085916][ T10] Code: 45 31 e4 e9 3f d1 ff ff e8 68 d0 30 f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a d0 30 f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c d0 30 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[ 96.093674][ T10] RSP: 0018:ffffc9000023f180 EFLAGS: 00010293
[ 96.096133][ T10] RAX: ffffffff8b9654e4 RBX: 0000000000000001 RCX: ffff88801bf0a540
[ 96.099409][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 96.102670][ T10] RBP: ffffc9000023fa78 R08: ffff88801bf0a540 R09: 0000000000000009
[ 96.105941][ T10] R10: 000000000000000d R11: 0000000000000000 R12: ffff888033774418
[ 96.109316][ T10] R13: fffff52000047e70 R14: dffffc0000000000 R15: 0000000000000000
[ 96.112614][ T10] ? ceph_con_v1_try_read+0x3334/0x6eb0
[ 96.114929][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 96.117323][ T10] ? dev_hard_start_xmit+0x7c7/0x830
[ 96.119686][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 96.121874][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 96.124013][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 96.126245][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 96.128374][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 96.130493][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 96.132686][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 96.134883][ T10] ? __dev_queue_xmit+0x1edc/0x3820
[ 96.137088][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 96.139391][ T10] ? __pfx_mroute6_is_socket+0x10/0x10
[ 96.141672][ T10] ? ipv6_chk_mcast_addr+0x2e/0x860
[ 96.143847][ T10] ? __pfx___dev_queue_xmit+0x10/0x10
[ 96.145975][ T10] ? ip6_finish_output+0x292/0x770
[ 96.148189][ T10] ? ip6_finish_output+0x292/0x770
[ 96.150314][ T10] ? ip6_finish_output2+0xb02/0x13c0
[ 96.152554][ T10] ? __asan_memcpy+0x40/0x70
[ 96.154611][ T10] ? __lock_acquire+0x683/0x2cf0
[ 96.156733][ T10] ? __lock_acquire+0x683/0x2cf0
[ 96.159176][ T10] ? __mutex_trylock_common+0x15f/0x270
[ 96.161708][ T10] ? __pfx___mutex_trylock_common+0x10/0x10
[ 96.164178][ T10] ? rcu_is_watching+0x15/0xb0
[ 96.166086][ T10] ? trace_contention_end+0x3d/0x140
[ 96.168273][ T10] ? __mutex_lock+0x30d/0x1550
[ 96.170195][ T10] ? __lock_acquire+0x683/0x2cf0
[ 96.172304][ T10] ? rcu_is_watching+0x15/0xb0
[ 96.174247][ T10] ? ceph_con_workfn+0x3b/0x14a0
[ 96.176304][ T10] ? __pfx___mutex_lock+0x10/0x10
[ 96.178424][ T10] ? do_raw_spin_lock+0x12b/0x2f0
[ 96.180562][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 96.182769][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 96.185133][ T10] ceph_con_workfn+0x208/0x14a0
[ 96.187209][ T10] ? rcu_is_watching+0x15/0xb0
[ 96.189263][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 96.191601][ T10] process_scheduled_works+0xa8e/0x14e0
[ 96.193872][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 96.196369][ T10] ? assign_work+0x3cf/0x5d0
[ 96.198375][ T10] worker_thread+0xa47/0xfb0
[ 96.200351][ T10] ? __kthread_parkme+0x71/0x1f0
[ 96.202403][ T10] kthread+0x388/0x470
[ 96.204471][ T10] ? __pfx_worker_thread+0x10/0x10
[ 96.207053][ T10] ? __pfx_kthread+0x10/0x10
[ 96.209341][ T10] ret_from_fork+0x514/0xb70
[ 96.211603][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 96.213772][ T10] ? __switch_to+0xc89/0x1420
[ 96.215689][ T10] ? __pfx_kthread+0x10/0x10
[ 96.217759][ T10] ret_from_fork_asm+0x1a/0x30
[ 96.219797][ T10]
[ 96.221472][ T10] Kernel Offset: disabled
[ 96.223287][ T10] Rebooting in 86400 seconds..