program: r0 = fsopen(&(0x7f0000000240)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='source\x00', &(0x7f00000005c0)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='mon_addr\x00', &(0x7f0000000000)='1s\xc627.0.\xff.!:678 \xd0\x1c\'\x1c\xcfs\xeatP\xb3i[0\x15\x10\xcf%i\x87\xbc7\xe1\xd9\x06\xd5\x8a\xefS\xed\x9a0\xe5\xd6{\t\xc4r\x87\x8eU\xa2\xf3\xe0\xc1\'\xd4\xaaA\x83S\xa4\x9db\x88\xaf\xa1\x13\xe1\xcc\x9fK\x00/v\x13\x1d\x01\x80V\x91M\xa1\x8dH\x18\x06\x1dZ\xe1\x9c\xfa\x1c\x01Pi\xf7\xb9M9\xf7\xf1\xack\x1f\x82\xb4\xc0\xc1@\xc9\xb1\xa8R\xd8xHa\xfc\x16\x12\x8e\xd3\xdbJ\v\xf1\x158O[\xb5\'hw\v\x84\xee\xc6C\xedf\xbd}\xb9\x18)\xf0\xc81\x8c\x13\xc4{\xfa\x7f\xb4^s;\xea\x1do\xd8\xb3\x81\x95\xa4Os\xfe<\'h{', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000100)={'das16m1\x00', [0x100, 0x3ff, 0x2, 0x2, 0x3, 0x100, 0x1, 0x20000000, 0x8, 0x200000a, 0x7, 0x7, 0x1, 0x3fe, 0x9, 0x0, 0x1, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x48, 0x5, 0x8, 0x0, 0x7f, 0x7, 0x8]}) r2 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000200)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) syz_usb_connect(0x0, 0x122, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002b8de5c404b062578b12d010203010902100101060000000904"], 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 88.926116][ T47] Bluetooth: hci0: command tx timeout [ 88.957398][ T1934] cfg80211: failed to load regulatory.db [ 89.324243][ T5335] libceph: resolve '1sĘ27.0.’.!' (ret=-3): failed [ 89.580735][ T1934] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.731735][ T1934] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=2d.b1 [ 89.733718][ T1934] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 89.736092][ T1934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.736106][ T1934] usb 5-1: Product: syz [ 89.736113][ T1934] usb 5-1: Manufacturer: syz [ 89.736119][ T1934] usb 5-1: SerialNumber: syz [ 89.781278][ T1934] upd78f0730 5-1:6.0: upd78f0730 converter detected [ 89.805052][ T1934] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 89.982289][ T5335] usb 5-1: USB disconnect, device number 2 [ 90.003256][ T5335] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 90.016385][ T5335] upd78f0730 5-1:6.0: device disconnected [ 90.074168][ T5336] ------------[ cut here ]------------ [ 90.074181][ T5336] kernel BUG at net/ceph/mon_client.c:211! [ 90.074198][ T5336] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 90.081698][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 90.085420][ T5336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.089600][ T5336] RIP: 0010:__open_session+0x799/0x940 [ 90.092329][ T5336] Code: ca fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c d0 fd ff ff be 04 00 00 00 4c 89 e7 e8 e2 df 94 f6 e9 be fd ff ff e8 38 5f 22 f6 90 <0f> 0b 4d 89 ee 48 8b 04 24 42 0f b6 04 38 84 c0 0f 85 2f 01 00 00 [ 90.100865][ T5336] RSP: 0018:ffffc9000e5b7ae8 EFLAGS: 00010287 [ 90.103500][ T5336] RAX: ffffffff8ba5c248 RBX: ffff888041da8290 RCX: 0000000000100000 [ 90.107064][ T5336] RDX: ffffc90020001000 RSI: 00000000000030a2 RDI: 00000000000030a3 [ 90.110306][ T5336] RBP: 00000000ffffffff R08: ffff888036e32580 R09: 0000000000000002 [ 90.113607][ T5336] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 90.116841][ T5336] R13: ffff888041da8400 R14: ffff888041da8298 R15: dffffc0000000000 [ 90.120041][ T5336] FS: 00007f445446f6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 90.123691][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.126418][ T5336] CR2: 00007f445446eff8 CR3: 0000000041a88000 CR4: 0000000000352ef0 [ 90.129611][ T5336] Call Trace: [ 90.131115][ T5336] [ 90.132414][ T5336] ceph_monc_open_session+0x56/0x1a0 [ 90.134753][ T5336] __ceph_open_session+0x16d/0x5e0 [ 90.137090][ T5336] ? bdi_register_va+0x58d/0x740 [ 90.139220][ T5336] ? ceph_get_tree+0x885/0x1a40 [ 90.141667][ T5336] ? __pfx___mutex_lock+0x10/0x10 [ 90.143959][ T5336] ? __pfx___ceph_open_session+0x10/0x10 [ 90.146510][ T5336] ? __pfx_woken_wake_function+0x10/0x10 [ 90.149289][ T5336] ? ceph_mdsc_init+0xce5/0xde0 [ 90.151499][ T5336] ceph_get_tree+0xaef/0x1a40 [ 90.153582][ T5336] vfs_get_tree+0x92/0x2a0 [ 90.155621][ T5336] vfs_cmd_create+0xa2/0x200 [ 90.157761][ T5336] __se_sys_fsconfig+0x6b9/0x810 [ 90.159916][ T5336] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 90.162214][ T5336] ? exc_page_fault+0x6a/0xc0 [ 90.164327][ T5336] ? do_user_addr_fault+0xc4c/0x1340 [ 90.166644][ T5336] ? __x64_sys_fsconfig+0x20/0xc0 [ 90.168869][ T5336] do_syscall_64+0x166/0x520 [ 90.170890][ T5336] ? trace_irq_disable+0x3b/0x140 [ 90.173071][ T5336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.175654][ T5336] ? clear_bhb_loop+0x70/0xc0 [ 90.177525][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.180038][ T5336] RIP: 0033:0x7f445359e559 [ 90.182008][ T5336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.190181][ T5336] RSP: 002b:00007f445446efe8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 90.193850][ T5336] RAX: ffffffffffffffda RBX: 00007f4453826090 RCX: 00007f445359e559 [ 90.197147][ T5336] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 90.200536][ T5336] RBP: 00007f44536358b0 R08: 0000000000000000 R09: 0000000000000000 [ 90.203866][ T5336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.207288][ T5336] R13: 00007f4453826128 R14: 00007f4453826090 R15: 00007ffeefca2608 [ 90.210606][ T5336] [ 90.212016][ T5336] Modules linked in: [ 90.214469][ T5336] ---[ end trace 0000000000000000 ]--- [ 90.227726][ T5336] RIP: 0010:__open_session+0x799/0x940 [ 90.227754][ T5336] Code: ca fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c d0 fd ff ff be 04 00 00 00 4c 89 e7 e8 e2 df 94 f6 e9 be fd ff ff e8 38 5f 22 f6 90 <0f> 0b 4d 89 ee 48 8b 04 24 42 0f b6 04 38 84 c0 0f 85 2f 01 00 00 [ 90.227765][ T5336] RSP: 0018:ffffc9000e5b7ae8 EFLAGS: 00010287 [ 90.227777][ T5336] RAX: ffffffff8ba5c248 RBX: ffff888041da8290 RCX: 0000000000100000 [ 90.227786][ T5336] RDX: ffffc90020001000 RSI: 00000000000030a2 RDI: 00000000000030a3 [ 90.227793][ T5336] RBP: 00000000ffffffff R08: ffff888036e32580 R09: 0000000000000002 [ 90.227801][ T5336] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 90.227808][ T5336] R13: ffff888041da8400 R14: ffff888041da8298 R15: dffffc0000000000 [ 90.227815][ T5336] FS: 00007f445446f6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 90.227823][ T5336] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.227830][ T5336] CR2: 00007f445446eff8 CR3: 0000000041a88000 CR4: 0000000000352ef0 [ 90.227870][ T5336] Kernel panic - not syncing: Fatal exception [ 90.275352][ T5336] Kernel Offset: disabled [ 90.277209][ T5336] Rebooting in 86400 seconds..