program:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, &(0x7f0000000200), &(0x7f0000000210)=0x10)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write(r2, &(0x7f0000000300)='ceph v027\x00'/278, 0x119)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write(r2, &(0x7f0000000800)="01ffffffffffffffffffffffffffffffff00"/30, 0x1e)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
write(r2, &(0x7f0000000c00)="070100000000000000000000000000000030000000000000000000000000000000000000000100000000000000000000000000000028d7b3ad00"/74, 0x48)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
[ 77.474969][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 77.485131][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.753055][ T10] ------------[ cut here ]------------
[ 77.756470][ T10] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq)
[ 77.756485][ T10] WARNING: net/ceph/messenger_v1.c:902 at ceph_con_v1_try_read+0x3335/0x6eb0, CPU#0: kworker/0:1/10
[ 77.765832][ T10] Modules linked in:
[ 77.768104][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 77.771999][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.776395][ T10] Workqueue: ceph-msgr ceph_con_workfn
[ 77.778729][ T10] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[ 77.781597][ T10] Code: 45 31 e4 e9 3f d1 ff ff e8 68 d0 30 f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a d0 30 f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c d0 30 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[ 77.789835][ T10] RSP: 0018:ffffc9000023f180 EFLAGS: 00010293
[ 77.792441][ T10] RAX: ffffffff8b9654e4 RBX: 0000000000000001 RCX: ffff88801bf0a540
[ 77.795856][ T10] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001
[ 77.800273][ T10] RBP: ffffc9000023fa78 R08: ffff88801bf0a540 R09: 0000000000000009
[ 77.803702][ T10] R10: 000000000000000d R11: 0000000000000000 R12: ffff8880340cc418
[ 77.807616][ T10] R13: fffff52000047e70 R14: dffffc0000000000 R15: 00000000ffffffff
[ 77.811361][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 77.816572][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.820013][ T10] CR2: 000055deff1da168 CR3: 00000000408db000 CR4: 0000000000352ef0
[ 77.824220][ T10] Call Trace:
[ 77.825745][ T10]
[ 77.827088][ T10] ? veth_xmit+0xa57/0xe60
[ 77.829653][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 77.832077][ T10] ? dev_hard_start_xmit+0x7c7/0x830
[ 77.834361][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 77.836657][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 77.838774][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 77.840983][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.843134][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 77.845320][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 77.847821][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 77.850061][ T10] ? __dev_queue_xmit+0x1edc/0x3820
[ 77.852526][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 77.855068][ T10] ? __pfx_mroute6_is_socket+0x10/0x10
[ 77.857935][ T10] ? ipv6_chk_mcast_addr+0x2e/0x860
[ 77.860424][ T10] ? __pfx___dev_queue_xmit+0x10/0x10
[ 77.862965][ T10] ? ip6_finish_output+0x292/0x770
[ 77.865196][ T10] ? ip6_finish_output+0x292/0x770
[ 77.867430][ T10] ? ip6_finish_output2+0xb02/0x13c0
[ 77.869945][ T10] ? __asan_memcpy+0x40/0x70
[ 77.871930][ T10] ? __lock_acquire+0x683/0x2cf0
[ 77.874262][ T10] ? __lock_acquire+0x683/0x2cf0
[ 77.877945][ T10] ? __mutex_trylock_common+0x15f/0x270
[ 77.880357][ T10] ? __pfx___mutex_trylock_common+0x10/0x10
[ 77.882952][ T10] ? rcu_is_watching+0x15/0xb0
[ 77.884966][ T10] ? trace_contention_end+0x3d/0x140
[ 77.887353][ T10] ? __mutex_lock+0x30d/0x1550
[ 77.889512][ T10] ? __lock_acquire+0x683/0x2cf0
[ 77.891653][ T10] ? ceph_con_workfn+0x3b/0x14a0
[ 77.893787][ T10] ? __pfx___mutex_lock+0x10/0x10
[ 77.896024][ T10] ? do_raw_spin_lock+0x12b/0x2f0
[ 77.898338][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 77.900578][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 77.902943][ T10] ceph_con_workfn+0x208/0x14a0
[ 77.905021][ T10] ? rcu_is_watching+0x15/0xb0
[ 77.907248][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 77.909750][ T10] process_scheduled_works+0xa8e/0x14e0
[ 77.912697][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 77.915672][ T10] ? assign_work+0x3cf/0x5d0
[ 77.917930][ T10] worker_thread+0xa47/0xfb0
[ 77.919899][ T10] kthread+0x388/0x470
[ 77.921621][ T10] ? __pfx_worker_thread+0x10/0x10
[ 77.923775][ T10] ? __pfx_kthread+0x10/0x10
[ 77.925819][ T10] ret_from_fork+0x514/0xb70
[ 77.927907][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 77.930115][ T10] ? __switch_to+0xc89/0x1420
[ 77.932055][ T10] ? __pfx_kthread+0x10/0x10
[ 77.934218][ T10] ret_from_fork_asm+0x1a/0x30
[ 77.936424][ T10]
[ 77.937807][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.940952][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 77.944914][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.949518][ T10] Workqueue: ceph-msgr ceph_con_workfn
[ 77.952567][ T10] Call Trace:
[ 77.954593][ T10]
[ 77.956320][ T10] vpanic+0x56c/0xa60
[ 77.958672][ T10] ? __pfx__printk+0x10/0x10
[ 77.961148][ T10] ? __pfx_vpanic+0x10/0x10
[ 77.963226][ T10] ? is_bpf_text_address+0x292/0x2b0
[ 77.965640][ T10] ? is_bpf_text_address+0x26/0x2b0
[ 77.967873][ T10] panic+0xc5/0xd0
[ 77.969611][ T10] ? __pfx_panic+0x10/0x10
[ 77.971508][ T10] ? ret_from_fork_asm+0x1a/0x30
[ 77.973703][ T10] __warn+0x315/0x4c0
[ 77.975482][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 77.977707][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 77.979881][ T10] __report_bug+0x276/0x570
[ 77.981835][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 77.984428][ T10] ? __pfx___report_bug+0x10/0x10
[ 77.986770][ T10] ? tcp_recvmsg+0x213/0x7f0
[ 77.988683][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 77.991049][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.993574][ T10] ? tcp_recvmsg+0x213/0x7f0
[ 77.995798][ T10] ? tcp_recvmsg+0x288/0x7f0
[ 77.997777][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 78.000171][ T10] report_bug+0x16a/0x220
[ 78.002120][ T10] ? ceph_con_v1_try_read+0x3335/0x6eb0
[ 78.004658][ T10] ? ceph_con_v1_try_read+0x3337/0x6eb0
[ 78.007176][ T10] handle_bug+0x9c/0x200
[ 78.009304][ T10] exc_invalid_op+0x1a/0x50
[ 78.011395][ T10] asm_exc_invalid_op+0x1a/0x20
[ 78.013566][ T10] RIP: 0010:ceph_con_v1_try_read+0x3335/0x6eb0
[ 78.016296][ T10] Code: 45 31 e4 e9 3f d1 ff ff e8 68 d0 30 f6 90 0f 0b 90 e9 cd d3 ff ff e8 5a d0 30 f6 90 0f 0b 90 e9 dd e6 ff ff e8 4c d0 30 f6 90 <0f> 0b 90 e9 f4 e7 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 30 d1
[ 78.024623][ T10] RSP: 0018:ffffc9000023f180 EFLAGS: 00010293
[ 78.027232][ T10] RAX: ffffffff8b9654e4 RBX: 0000000000000001 RCX: ffff88801bf0a540
[ 78.030614][ T10] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001
[ 78.034255][ T10] RBP: ffffc9000023fa78 R08: ffff88801bf0a540 R09: 0000000000000009
[ 78.037765][ T10] R10: 000000000000000d R11: 0000000000000000 R12: ffff8880340cc418
[ 78.041350][ T10] R13: fffff52000047e70 R14: dffffc0000000000 R15: 00000000ffffffff
[ 78.044778][ T10] ? ceph_con_v1_try_read+0x3334/0x6eb0
[ 78.047031][ T10] ? veth_xmit+0xa57/0xe60
[ 78.048794][ T10] ? __pfx_ceph_con_v1_try_read+0x10/0x10
[ 78.051114][ T10] ? dev_hard_start_xmit+0x7c7/0x830
[ 78.053426][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 78.055671][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 78.057771][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 78.059992][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.062085][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 78.064235][ T10] ? __local_bh_enable_ip+0xd0/0x130
[ 78.066573][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 78.068857][ T10] ? __dev_queue_xmit+0x1edc/0x3820
[ 78.071147][ T10] ? __dev_queue_xmit+0x29b/0x3820
[ 78.073392][ T10] ? __pfx_mroute6_is_socket+0x10/0x10
[ 78.075760][ T10] ? ipv6_chk_mcast_addr+0x2e/0x860
[ 78.077876][ T10] ? __pfx___dev_queue_xmit+0x10/0x10
[ 78.080133][ T10] ? ip6_finish_output+0x292/0x770
[ 78.082367][ T10] ? ip6_finish_output+0x292/0x770
[ 78.084570][ T10] ? ip6_finish_output2+0xb02/0x13c0
[ 78.086885][ T10] ? __asan_memcpy+0x40/0x70
[ 78.088998][ T10] ? __lock_acquire+0x683/0x2cf0
[ 78.091279][ T10] ? __lock_acquire+0x683/0x2cf0
[ 78.093483][ T10] ? __mutex_trylock_common+0x15f/0x270
[ 78.096023][ T10] ? __pfx___mutex_trylock_common+0x10/0x10
[ 78.098518][ T10] ? rcu_is_watching+0x15/0xb0
[ 78.100562][ T10] ? trace_contention_end+0x3d/0x140
[ 78.102842][ T10] ? __mutex_lock+0x30d/0x1550
[ 78.104977][ T10] ? __lock_acquire+0x683/0x2cf0
[ 78.107125][ T10] ? ceph_con_workfn+0x3b/0x14a0
[ 78.109349][ T10] ? __pfx___mutex_lock+0x10/0x10
[ 78.111586][ T10] ? do_raw_spin_lock+0x12b/0x2f0
[ 78.113969][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 78.116324][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 78.118929][ T10] ceph_con_workfn+0x208/0x14a0
[ 78.121053][ T10] ? rcu_is_watching+0x15/0xb0
[ 78.123177][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 78.125713][ T10] process_scheduled_works+0xa8e/0x14e0
[ 78.128172][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.130850][ T10] ? assign_work+0x3cf/0x5d0
[ 78.133291][ T10] worker_thread+0xa47/0xfb0
[ 78.135314][ T10] kthread+0x388/0x470
[ 78.137186][ T10] ? __pfx_worker_thread+0x10/0x10
[ 78.139407][ T10] ? __pfx_kthread+0x10/0x10
[ 78.141512][ T10] ret_from_fork+0x514/0xb70
[ 78.143696][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 78.145871][ T10] ? __switch_to+0xc89/0x1420
[ 78.147797][ T10] ? __pfx_kthread+0x10/0x10
[ 78.149850][ T10] ret_from_fork_asm+0x1a/0x30
[ 78.151957][ T10]
[ 78.153648][ T10] Kernel Offset: disabled
[ 78.155654][ T10] Rebooting in 86400 seconds..