ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor323622177 <...> Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor323622177", ["ci-upstream-rust-kasan-gce/syz-executor323622177"], 0x7ffebd9f1620 /* 10 vars */) = 0 brk(NULL) = 0x5555812ef000 brk(0x5555812efd80) = 0x5555812efd80 arch_prctl(ARCH_SET_FS, 0x5555812ef400) = 0 set_tid_address(0x5555812ef6d0) = 5616 set_robust_list(0x5555812ef6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor323622177", 4096) = 54 getrandom("\x54\x37\x3f\xf3\x1c\xf4\x9b\xe9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555812efd80 brk(0x555581310d80) = 0x555581310d80 brk(0x555581311000) = 0x555581311000 mprotect(0x7f436cefd000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5617 attached , child_tidptr=0x5555812ef6d0) = 5617 [pid 5617] set_robust_list(0x5555812ef6e0, 24 [pid 5616] rt_sigprocmask(SIG_SETMASK, [] [pid 5617] <... set_robust_list resumed>) = 0 [pid 5616] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 executing program [pid 5617] write(1, "executing program\n", 18) = 18 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] rt_sigaction(SIGRT_1, {sa_handler=0x7f436ce65fd0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f436ce582a0}, NULL, 8) = 0 [pid 5617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f436ce0b000 [pid 5617] mprotect(0x7f436ce0c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f436ce2b990, parent_tid=0x7f436ce2b990, exit_signal=0, stack=0x7f436ce0b000, stack_size=0x202c0, tls=0x7f436ce2b6c0}ci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5618 attached => {parent_tid=[5618]}, 88) = 5618 [pid 5618] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5617] rt_sigprocmask(SIG_SETMASK, [] [pid 5618] set_robust_list(0x7f436ce2b9a0, 24 [pid 5617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5618] <... set_robust_list resumed>) = 0 [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5618] rt_sigprocmask(SIG_SETMASK, [] [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5618] socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3 [pid 5618] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7f436cf03b48, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] bind(3, {sa_family=AF_INET, sin_port=htons(6789), sin_addr=inet_addr("127.0.0.1")}, 16 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] <... bind resumed>) = 0 [pid 5618] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = 0 [pid 5618] <... futex resumed>) = 1 [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] listen(3, 5 [pid 5617] <... futex resumed>) = 0 [pid 5618] <... listen resumed>) = 0 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5618] <... futex resumed>) = 0 [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] fsopen("ceph", 0 [pid 5617] <... futex resumed>) = 0 [pid 5618] <... fsopen resumed>) = 4 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... futex resumed>) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] fsconfig(4, FSCONFIG_SET_STRING, "source", "127.0.0.1:6789:/", 0 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] <... fsconfig resumed>) = 0 [pid 5618] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7f436cf03b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5618] fsconfig(4, FSCONFIG_SET_STRING, "ms_mode", "crc", 0 [pid 5617] <... futex resumed>) = 0 [pid 5618] <... fsconfig resumed>) = 0 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] futex(0x7f436cf03b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7f436cf03b48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7f436cf03b48, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5618] <... futex resumed>) = 0 [pid 5617] futex(0x7f436cf03b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] fsconfig(4, FSCONFIG_CMD_CREATE, NULL, NULL, 0 [pid 5617] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5617] futex(0x7f436cf03b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f436cdea000 [pid 5617] mprotect(0x7f436cdeb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f436ce0a990, parent_tid=0x7f436ce0a990, exit_signal=0, stack=0x7f436cdea000, stack_size=0x202c0, tls=0x7f436ce0a6c0}ci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5622 attached => {parent_tid=[5622]}, 88) = 5622 [pid 5622] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5617] rt_sigprocmask(SIG_SETMASK, [] [pid 5622] <... rseq resumed>) = 0 [pid 5617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5617] futex(0x7f436cf03b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] set_robust_list(0x7f436ce0a9a0, 24 [pid 5617] <... futex resumed>) = 0 [pid 5622] <... set_robust_list resumed>) = 0 [pid 5622] rt_sigprocmask(SIG_SETMASK, [] [pid 5617] futex(0x7f436cf03b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5622] accept(3, NULL, NULL) = 5 [pid 5622] futex(0x7f436cf03b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5622] futex(0x7f436cf03b58, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5617] futex(0x7f436cf03b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] write(5, "\x63\x65\x70\x68\x20\x76\x32\x0a\x00\x00\x00", 11 [pid 5617] <... futex resumed>) = 0 [ 98.535707][ T10] ------------[ cut here ]------------ [ 98.535718][ T10] !iov_iter_count(&con->v2.in_iter) [ 98.535733][ T10] WARNING: net/ceph/messenger_v2.c:3129 at ceph_con_v2_try_read+0x6634/0x6810, CPU#0: kworker/0:1/10 [ 98.535766][ T10] Modules linked in: [ 98.535794][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.535810][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.535819][ T10] Workqueue: ceph-msgr ceph_con_workfn [ 98.535837][ T10] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810 [ 98.535859][ T10] Code: 8d 3d 60 8d cd 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 cd f7 b0 f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 b9 f7 b0 f6 90 0f 0b [ 98.535871][ T10] RSP: 0018:ffffc900000f7500 EFLAGS: 00010293 [ 98.535882][ T10] RAX: ffffffff8b14abe3 RBX: 0000000000000000 RCX: ffff88801dad3e80 [ 98.535892][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.535900][ T10] RBP: ffffc900000f7ad8 R08: 0000000000000000 R09: 0000000000000000 [ 98.535909][ T10] R10: ffff88801165c703 R11: ffffed10022cb8e2 R12: fffff5200001eef0 [ 98.535920][ T10] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 98.535929][ T10] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 98.535940][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.535950][ T10] CR2: 00007f436ce0ad58 CR3: 0000000046630000 CR4: 00000000003526f0 [ 98.535962][ T10] Call Trace: [ 98.535991][ T10] [ 98.536029][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.536057][ T10] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 98.536077][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.536099][ T10] ? lock_acquire+0x115/0x350 [ 98.536128][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.536146][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.536160][ T10] ? look_up_lock_class+0x57/0x110 [ 98.536176][ T10] ? register_lock_class+0x31/0x2e0 [ 98.536204][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.536233][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.536247][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.536263][ T10] ? mutex_lock_nested+0x152/0x1d0 [ 98.536282][ T10] ? ceph_con_workfn+0x3b/0x14a0 [ 98.536300][ T10] ceph_con_workfn+0x1f5/0x14a0 [ 98.536317][ T10] ? rcu_is_watching+0x15/0xb0 [ 98.536336][ T10] ? process_one_work+0x7fd/0x1480 [ 98.536653][ T10] process_one_work+0xaaf/0x1480 [ 98.536689][ T10] ? __pfx_process_one_work+0x10/0x10 [ 98.536703][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.536730][ T10] ? assign_work+0x3cf/0x5d0 [ 98.536749][ T10] worker_thread+0xb05/0x10d0 [ 98.536774][ T10] ? __kthread_parkme+0x71/0x1f0 [ 98.536799][ T10] kthread+0x388/0x470 [ 98.536820][ T10] ? __pfx_worker_thread+0x10/0x10 [ 98.536836][ T10] ? __pfx_kthread+0x10/0x10 [ 98.536857][ T10] ret_from_fork+0x514/0xb70 [ 98.536881][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 98.536903][ T10] ? __switch_to+0xc89/0x1420 [ 98.536923][ T10] ? __pfx_kthread+0x10/0x10 [ 98.536945][ T10] ret_from_fork_asm+0x1a/0x30 [ 98.536985][ T10] [ 98.536993][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.537004][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.537022][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.537031][ T10] Workqueue: ceph-msgr ceph_con_workfn [ 98.537046][ T10] Call Trace: [ 98.537052][ T10] [ 98.537057][ T10] vpanic+0x56c/0xa60 [ 98.537073][ T10] ? __pfx__printk+0x10/0x10 [ 98.537092][ T10] ? __pfx_vpanic+0x10/0x10 [ 98.537105][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 98.537123][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 98.537147][ T10] panic+0xc5/0xd0 [ 98.537161][ T10] ? __pfx_panic+0x10/0x10 [ 98.537183][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 98.537208][ T10] __warn+0x315/0x4c0 [ 98.537222][ T10] ? ceph_con_v2_try_read+0x6634/0x6810 [ 98.537245][ T10] ? ceph_con_v2_try_read+0x6634/0x6810 [ 98.537264][ T10] __report_bug+0x276/0x570 [ 98.537283][ T10] ? ceph_con_v2_try_read+0x6634/0x6810 [ 98.537305][ T10] ? __pfx___report_bug+0x10/0x10 [ 98.537319][ T10] ? __local_bh_enable+0x1e1/0x2f0 [ 98.537339][ T10] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 98.537355][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.537375][ T10] ? ceph_con_v2_try_read+0x6634/0x6810 [ 98.537395][ T10] report_bug+0x16a/0x220 [ 98.537410][ T10] ? ceph_con_v2_try_read+0x6634/0x6810 [ 98.537429][ T10] ? ceph_con_v2_try_read+0x6636/0x6810 [ 98.537447][ T10] handle_bug+0x9c/0x200 [ 98.537466][ T10] exc_invalid_op+0x1a/0x50 [ 98.537484][ T10] asm_exc_invalid_op+0x1a/0x20 [ 98.537499][ T10] RIP: 0010:ceph_con_v2_try_read+0x6634/0x6810 [ 98.537519][ T10] Code: 8d 3d 60 8d cd 04 43 0f b6 04 3e 84 c0 48 8b 54 24 38 0f 85 85 00 00 00 8b 32 67 48 0f b9 3a e9 40 ff ff ff e8 cd f7 b0 f6 90 <0f> 0b 90 41 bd c3 ff ff ff e9 32 ff ff ff e8 b9 f7 b0 f6 90 0f 0b [ 98.537531][ T10] RSP: 0018:ffffc900000f7500 EFLAGS: 00010293 [ 98.537543][ T10] RAX: ffffffff8b14abe3 RBX: 0000000000000000 RCX: ffff88801dad3e80 [ 98.537554][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.537563][ T10] RBP: ffffc900000f7ad8 R08: 0000000000000000 R09: 0000000000000000 [ 98.537572][ T10] R10: ffff88801165c703 R11: ffffed10022cb8e2 R12: fffff5200001eef0 [ 98.537583][ T10] R13: 0000000000000000 R14: 0000000000000010 R15: dffffc0000000000 [ 98.537598][ T10] ? ceph_con_v2_try_read+0x6633/0x6810 [ 98.537653][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.537680][ T10] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 98.537699][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.537721][ T10] ? lock_acquire+0x115/0x350 [ 98.537750][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.537768][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.537782][ T10] ? look_up_lock_class+0x57/0x110 [ 98.537798][ T10] ? register_lock_class+0x31/0x2e0 [ 98.537825][ T10] ? __lock_acquire+0x6df/0x2e40 [ 98.537854][ T10] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.537868][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.537884][ T10] ? mutex_lock_nested+0x152/0x1d0 [ 98.537903][ T10] ? ceph_con_workfn+0x3b/0x14a0 [ 98.537921][ T10] ceph_con_workfn+0x1f5/0x14a0 [ 98.537938][ T10] ? rcu_is_watching+0x15/0xb0 [ 98.537956][ T10] ? process_one_work+0x7fd/0x1480 [ 98.537977][ T10] process_one_work+0xaaf/0x1480 [ 98.538008][ T10] ? __pfx_process_one_work+0x10/0x10 [ 98.538022][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.538048][ T10] ? assign_work+0x3cf/0x5d0 [ 98.538068][ T10] worker_thread+0xb05/0x10d0 [ 98.538091][ T10] ? __kthread_parkme+0x71/0x1f0 [ 98.538117][ T10] kthread+0x388/0x470 [ 98.538137][ T10] ? __pfx_worker_thread+0x10/0x10 [ 98.538153][ T10] ? __pfx_kthread+0x10/0x10 [ 98.538175][ T10] ret_from_fork+0x514/0xb70 [ 98.538198][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 98.538219][ T10] ? __switch_to+0xc89/0x1420 [ 98.538239][ T10] ? __pfx_kthread+0x10/0x10 [ 98.538261][ T10] ret_from_fork_asm+0x1a/0x30 [ 98.538294][ T10] [ 98.538916][ T10] Kernel Offset: disabled