program:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @loopback}, 0x10)
listen(r0, 0x5)
r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = accept$inet(r0, 0x0, 0x0)
write(r2, &(0x7f0000000800)='ceph v2\n\x00\x00\x00', 0xb)
close(r2)
close(r0)
[ 101.949432][ T5295] Bluetooth: hci0: command tx timeout
[ 102.069848][ T804] ------------[ cut here ]------------
[ 102.072349][ T804] !iov_iter_count(&con->v2.in_iter)
[ 102.072363][ T804] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x6634/0x6810, CPU#0: kworker/0:2/804
[ 102.080216][ T804] Modules linked in:
[ 102.082408][ T804] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 102.087025][ T804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.091298][ T804] Workqueue: ceph-msgr ceph_con_workfn
[ 102.093735][ T804] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810
[ 102.096683][ T804] Code: 8d 3d 80 51 d3 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 9d d7 2f f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 89 d7 2f f6 90 0f 0b
[ 102.106621][ T804] RSP: 0018:ffffc90003c8f4a0 EFLAGS: 00010293
[ 102.109769][ T804] RAX: ffffffff8b973cb3 RBX: 0000000000000000 RCX: ffff88801d358000
[ 102.113534][ T804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 102.116839][ T804] RBP: ffffc90003c8fa78 R08: 0000000000000005 R09: 0000000000000003
[ 102.119753][ T804] R10: ffff88801280069b R11: ffffed10025000d5 R12: fffff52000791ee4
[ 102.122981][ T804] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000
[ 102.126314][ T804] FS: 0000000000000000(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000
[ 102.130109][ T804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 102.132896][ T804] CR2: 00007ffa640c37f0 CR3: 000000004feb6000 CR4: 0000000000352ef0
[ 102.136354][ T804] Call Trace:
[ 102.137814][ T804]
[ 102.139185][ T804] ? __pfx_ceph_con_v2_try_read+0x10/0x10
[ 102.141648][ T804] ? __lock_acquire+0x683/0x2cf0
[ 102.143884][ T804] ? ceph_con_v2_try_write+0xfda/0x1540
[ 102.146069][ T804] ? __mutex_trylock_common+0x15f/0x270
[ 102.148437][ T804] ? __pfx___mutex_trylock_common+0x10/0x10
[ 102.151098][ T804] ? rcu_is_watching+0x15/0xb0
[ 102.153256][ T804] ? trace_contention_end+0x3d/0x140
[ 102.155893][ T804] ? __mutex_lock+0x30d/0x1550
[ 102.158225][ T804] ? __lock_acquire+0x683/0x2cf0
[ 102.160415][ T804] ? ceph_con_workfn+0x3b/0x14a0
[ 102.162528][ T804] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.164915][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 102.167231][ T804] ceph_con_workfn+0x1f5/0x14a0
[ 102.169163][ T804] ? rcu_is_watching+0x15/0xb0
[ 102.170994][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 102.173297][ T804] process_scheduled_works+0xa8e/0x14e0
[ 102.175693][ T804] ? __pfx_process_scheduled_works+0x10/0x10
[ 102.178159][ T804] ? assign_work+0x3cf/0x5d0
[ 102.179978][ T804] worker_thread+0xa47/0xfb0
[ 102.182006][ T804] kthread+0x388/0x470
[ 102.183804][ T804] ? __pfx_worker_thread+0x10/0x10
[ 102.185887][ T804] ? __pfx_kthread+0x10/0x10
[ 102.187787][ T804] ret_from_fork+0x514/0xb70
[ 102.189643][ T804] ? __pfx_ret_from_fork+0x10/0x10
[ 102.191724][ T804] ? __switch_to+0xc89/0x1420
[ 102.193570][ T804] ? __pfx_kthread+0x10/0x10
[ 102.195566][ T804] ret_from_fork_asm+0x1a/0x30
[ 102.197675][ T804]
[ 102.198800][ T804] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 102.202052][ T804] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 102.206397][ T804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 102.210646][ T804] Workqueue: ceph-msgr ceph_con_workfn
[ 102.213010][ T804] Call Trace:
[ 102.214584][ T804]
[ 102.215936][ T804] vpanic+0x56c/0xa60
[ 102.217723][ T804] ? __pfx__printk+0x10/0x10
[ 102.219725][ T804] ? __pfx_vpanic+0x10/0x10
[ 102.221707][ T804] ? is_bpf_text_address+0x292/0x2b0
[ 102.223942][ T804] ? is_bpf_text_address+0x26/0x2b0
[ 102.226047][ T804] panic+0xc5/0xd0
[ 102.227689][ T804] ? __pfx_panic+0x10/0x10
[ 102.229562][ T804] ? ret_from_fork_asm+0x1a/0x30
[ 102.231623][ T804] __warn+0x315/0x4c0
[ 102.233343][ T804] ? ceph_con_v2_try_read+0x6634/0x6810
[ 102.235663][ T804] ? ceph_con_v2_try_read+0x6634/0x6810
[ 102.237977][ T804] __report_bug+0x276/0x570
[ 102.239921][ T804] ? ceph_con_v2_try_read+0x6634/0x6810
[ 102.242237][ T804] ? __pfx___report_bug+0x10/0x10
[ 102.244460][ T804] ? tcp_recvmsg+0x213/0x7f0
[ 102.246435][ T804] ? __local_bh_enable_ip+0xd0/0x130
[ 102.248622][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 102.250836][ T804] ? tcp_recvmsg+0x213/0x7f0
[ 102.252812][ T804] ? tcp_recvmsg+0x288/0x7f0
[ 102.254745][ T804] ? ceph_con_v2_try_read+0x6634/0x6810
[ 102.257060][ T804] report_bug+0x16a/0x220
[ 102.258910][ T804] ? ceph_con_v2_try_read+0x6634/0x6810
[ 102.261250][ T804] ? ceph_con_v2_try_read+0x6636/0x6810
[ 102.263631][ T804] handle_bug+0x9c/0x200
[ 102.265460][ T804] exc_invalid_op+0x1a/0x50
[ 102.267458][ T804] asm_exc_invalid_op+0x1a/0x20
[ 102.269540][ T804] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810
[ 102.272259][ T804] Code: 8d 3d 80 51 d3 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 9d d7 2f f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 89 d7 2f f6 90 0f 0b
[ 102.280342][ T804] RSP: 0018:ffffc90003c8f4a0 EFLAGS: 00010293
[ 102.282905][ T804] RAX: ffffffff8b973cb3 RBX: 0000000000000000 RCX: ffff88801d358000
[ 102.285922][ T804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 102.288996][ T804] RBP: ffffc90003c8fa78 R08: 0000000000000005 R09: 0000000000000003
[ 102.292023][ T804] R10: ffff88801280069b R11: ffffed10025000d5 R12: fffff52000791ee4
[ 102.294962][ T804] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000
[ 102.297903][ T804] ? ceph_con_v2_try_read+0x6633/0x6810
[ 102.300308][ T804] ? __pfx_ceph_con_v2_try_read+0x10/0x10
[ 102.302738][ T804] ? __lock_acquire+0x683/0x2cf0
[ 102.304844][ T804] ? ceph_con_v2_try_write+0xfda/0x1540
[ 102.307104][ T804] ? __mutex_trylock_common+0x15f/0x270
[ 102.309449][ T804] ? __pfx___mutex_trylock_common+0x10/0x10
[ 102.311991][ T804] ? rcu_is_watching+0x15/0xb0
[ 102.313972][ T804] ? trace_contention_end+0x3d/0x140
[ 102.316115][ T804] ? __mutex_lock+0x30d/0x1550
[ 102.317922][ T804] ? __lock_acquire+0x683/0x2cf0
[ 102.320033][ T804] ? ceph_con_workfn+0x3b/0x14a0
[ 102.322145][ T804] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.324784][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 102.327102][ T804] ceph_con_workfn+0x1f5/0x14a0
[ 102.329442][ T804] ? rcu_is_watching+0x15/0xb0
[ 102.331794][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 102.334496][ T804] process_scheduled_works+0xa8e/0x14e0
[ 102.336856][ T804] ? __pfx_process_scheduled_works+0x10/0x10
[ 102.339444][ T804] ? assign_work+0x3cf/0x5d0
[ 102.341479][ T804] worker_thread+0xa47/0xfb0
[ 102.343504][ T804] kthread+0x388/0x470
[ 102.345231][ T804] ? __pfx_worker_thread+0x10/0x10
[ 102.347416][ T804] ? __pfx_kthread+0x10/0x10
[ 102.349353][ T804] ret_from_fork+0x514/0xb70
[ 102.351333][ T804] ? __pfx_ret_from_fork+0x10/0x10
[ 102.353542][ T804] ? __switch_to+0xc89/0x1420
[ 102.355552][ T804] ? __pfx_kthread+0x10/0x10
[ 102.357564][ T804] ret_from_fork_asm+0x1a/0x30
[ 102.359741][ T804]
[ 102.361700][ T804] Kernel Offset: disabled
[ 102.363811][ T804] Rebooting in 86400 seconds..