ci-upstream-kasan-gce-selinux-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-selinux-root/syz-executor2039783354 <...> Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-gce-selinux-root/syz-executor2039783354", ["ci-upstream-kasan-gce-selinux-root/syz-executor2039783354"], 0x7fff61824380 /* 10 vars */) = 0 brk(NULL) = 0x5555928d5000 brk(0x5555928d5d80) = 0x5555928d5d80 arch_prctl(ARCH_SET_FS, 0x5555928d5400) = 0 set_tid_address(0x5555928d56d0) = 5621 set_robust_list(0x5555928d56e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-selinux-root/syz-executor2039783354", 4096) = 63 getrandom("\xce\x49\x1a\xda\x04\x2f\xa9\x2b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555928d5d80 brk(0x5555928f6d80) = 0x5555928f6d80 brk(0x5555928f7000) = 0x5555928f7000 mprotect(0x7f3a9cc9d000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18) = 18 executing program futex(0x7f3a9cca3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f3a9cc070d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f3a9cbf99e0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3a9cbae000 mprotect(0x7f3a9cbaf000, 131072, PROT_READ|PROT_WRITE) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3a9cbce990, parent_tid=0x7f3a9cbce990, exit_signal=0, stack=0x7f3a9cbae000, stack_size=0x202c0, tls=0x7f3a9cbce6c0} => {parent_tid=[5622]}, 88) = 5622 ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5622 attached [pid 5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5621] futex(0x7f3a9cca3b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5621] <... futex resumed>) = 0 [pid 5622] set_robust_list(0x7f3a9cbce9a0, 24 [pid 5621] futex(0x7f3a9cca3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] <... set_robust_list resumed>) = 0 [pid 5622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5622] socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3 [pid 5622] futex(0x7f3a9cca3b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5622] <... futex resumed>) = 1 [pid 5621] futex(0x7f3a9cca3b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] futex(0x7f3a9cca3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] bind(3, {sa_family=AF_INET, sin_port=htons(6789), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 [ 63.487601][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 63.487612][ T29] audit: type=1400 audit(1785771416.963:129): avc: denied { execmem } for pid=5621 comm="syz-executor203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5622] futex(0x7f3a9cca3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5621] futex(0x7f3a9cca3b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] listen(3, 5 [pid 5621] futex(0x7f3a9cca3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] <... listen resumed>) = 0 [pid 5622] futex(0x7f3a9cca3b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5622] <... futex resumed>) = 1 [pid 5621] futex(0x7f3a9cca3b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] futex(0x7f3a9cca3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] fsopen("ceph", 0) = 4 [pid 5622] futex(0x7f3a9cca3b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5622] <... futex resumed>) = 1 [pid 5621] futex(0x7f3a9cca3b48, FUTEX_WAKE_PRIVATE, 1000000 [pid 5622] fsconfig(4, FSCONFIG_SET_STRING, "source", "127.0.0.1:6789:/", 0 [pid 5621] <... futex resumed>) = 0 [pid 5622] <... fsconfig resumed>) = 0 [pid 5621] futex(0x7f3a9cca3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5622] futex(0x7f3a9cca3b4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5621] futex(0x7f3a9cca3b48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] <... futex resumed>) = 0 [pid 5622] fsconfig(4, FSCONFIG_CMD_CREATE, NULL, NULL, 0 [ 63.547950][ T29] audit: type=1400 audit(1785771417.023:130): avc: denied { node_bind } for pid=5621 comm="syz-executor203" saddr=127.0.0.1 src=6789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [pid 5621] futex(0x7f3a9cca3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5621] futex(0x7f3a9cca3b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5621] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f3a9cb8d000 [pid 5621] mprotect(0x7f3a9cb8e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5621] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5621] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f3a9cbad990, parent_tid=0x7f3a9cbad990, exit_signal=0, stack=0x7f3a9cb8d000, stack_size=0x202c0, tls=0x7f3a9cbad6c0}ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5626 attached => {parent_tid=[5626]}, 88) = 5626 [pid 5626] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] <... rseq resumed>) = 0 [pid 5621] futex(0x7f3a9cca3b58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] set_robust_list(0x7f3a9cbad9a0, 24) = 0 [pid 5621] futex(0x7f3a9cca3b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] accept(3, NULL, NULL) = 5 [pid 5626] futex(0x7f3a9cca3b5c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5621] <... futex resumed>) = 0 [pid 5621] futex(0x7f3a9cca3b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] futex(0x7f3a9cca3b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] <... futex resumed>) = 0 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5621] futex(0x7f3a9cca3b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] write(5, "\x63\x65\x70\x68\x20\x76\x30\x32\x37\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 281) = 281 [pid 5626] futex(0x7f3a9cca3b5c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = 0 [pid 5626] <... futex resumed>) = 1 [pid 5621] futex(0x7f3a9cca3b58, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] write(5, "\x01\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 30 [pid 5621] <... futex resumed>) = 0 [pid 5626] <... write resumed>) = 30 [pid 5626] futex(0x7f3a9cca3b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7f3a9cca3b58, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5621] futex(0x7f3a9cca3b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [ 63.738997][ T42] ------------[ cut here ]------------ [ 63.744616][ T42] con->v1.connect_seq != le32_to_cpu(con->v1.in_reply.connect_seq) [ 63.744625][ T42] WARNING: net/ceph/messenger_v1.c:901 at ceph_con_v1_try_read+0x447d/0x6ca0, CPU#1: kworker/1:1/42 [ 63.763365][ T42] Modules linked in: [ 63.767279][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 63.776473][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 63.786621][ T42] Workqueue: ceph-msgr ceph_con_workfn [ 63.792163][ T42] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 63.798325][ T42] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 63.817936][ T42] RSP: 0018:ffffc90000b27a08 EFLAGS: 00010293 [ 63.824021][ T42] RAX: 0000000000000000 RBX: ffff88807ba0c88b RCX: ffffffff8b7fbff0 [ 63.832016][ T42] RDX: ffff88801f29a540 RSI: ffffffff8b7fda6c RDI: ffff88801f29a540 [ 63.840014][ T42] RBP: 00000000ffffffff R08: 0000000000000004 R09: 00000000ffffffff [ 63.847977][ T42] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 63.855965][ T42] R13: ffff88807ba0c950 R14: ffff88807ba0c418 R15: dffffc0000000000 [ 63.863957][ T42] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 63.872897][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.879487][ T42] CR2: 00007f3a9cbacff8 CR3: 0000000071384000 CR4: 00000000003526f0 [ 63.887447][ T42] Call Trace: [ 63.890735][ T42] [ 63.893656][ T42] ? ceph_con_workfn+0x48/0x13e0 [ 63.898596][ T42] ? register_lock_class+0x40/0x560 [ 63.903787][ T42] ? do_raw_spin_lock+0x128/0x260 [ 63.908814][ T42] ? __pfx___mutex_lock+0x10/0x10 [ 63.913833][ T42] ? __lock_acquire+0x49f/0x1a40 [ 63.918780][ T42] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 63.924497][ T42] ? debug_object_deactivate+0x2e4/0x3b0 [ 63.930153][ T42] ceph_con_workfn+0x9a5/0x13e0 [ 63.934996][ T42] process_one_work+0xa23/0x1940 [ 63.939948][ T42] ? __pfx_process_one_work+0x10/0x10 [ 63.945325][ T42] ? __pfx_ceph_con_workfn+0x10/0x10 [ 63.950619][ T42] worker_thread+0x5ef/0xe50 [ 63.955203][ T42] ? kthread+0x13a/0x450 [ 63.959443][ T42] ? __pfx_worker_thread+0x10/0x10 [ 63.964542][ T42] kthread+0x370/0x450 [ 63.968610][ T42] ? __pfx_kthread+0x10/0x10 [ 63.973191][ T42] ret_from_fork+0x72b/0xd50 [ 63.977770][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 63.982905][ T42] ? __switch_to+0x800/0x10f0 [ 63.987577][ T42] ? __pfx_kthread+0x10/0x10 [ 63.992181][ T42] ret_from_fork_asm+0x1a/0x30 [ 63.996957][ T42] [ 64.000006][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 64.007272][ T42] CPU: 1 UID: 0 PID: 42 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 64.016446][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 64.026478][ T42] Workqueue: ceph-msgr ceph_con_workfn [ 64.031921][ T42] Call Trace: [ 64.035179][ T42] [ 64.038090][ T42] dump_stack_lvl+0x100/0x190 [ 64.042748][ T42] vpanic+0x552/0x970 [ 64.046708][ T42] ? __pfx_vpanic+0x10/0x10 [ 64.051195][ T42] panic+0xd1/0xe0 [ 64.054905][ T42] ? __pfx_panic+0x10/0x10 [ 64.059320][ T42] ? check_panic_on_warn+0x1f/0x90 [ 64.064414][ T42] check_panic_on_warn.cold+0x19/0x34 [ 64.069773][ T42] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 64.075305][ T42] __warn.cold+0x191/0x318 [ 64.079703][ T42] __report_bug+0x30f/0x440 [ 64.084191][ T42] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 64.089724][ T42] ? __pfx___report_bug+0x10/0x10 [ 64.094750][ T42] ? __pfx_tcp_recvmsg+0x10/0x10 [ 64.099674][ T42] ? inet_recvmsg+0xdc/0x4c0 [ 64.104245][ T42] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 64.109519][ T42] ? rcu_is_watching+0x12/0xc0 [ 64.114271][ T42] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 64.119802][ T42] report_bug+0xb2/0x220 [ 64.124029][ T42] ? ceph_con_v1_try_read+0x447d/0x6ca0 [ 64.129562][ T42] handle_bug+0x16a/0x2a0 [ 64.133883][ T42] exc_invalid_op+0x17/0x50 [ 64.138376][ T42] asm_exc_invalid_op+0x1a/0x20 [ 64.143208][ T42] RIP: 0010:ceph_con_v1_try_read+0x447d/0x6ca0 [ 64.149349][ T42] Code: f6 84 db 0f 84 1b ee ff ff e9 d2 60 f4 f5 e8 ca 87 8a f6 90 0f 0b 90 e9 9f db ff ff e8 bc 87 8a f6 90 0f 0b e8 b4 87 8a f6 90 <0f> 0b 90 e9 84 e5 ff ff e8 a6 87 8a f6 90 0f 0b e8 9e 87 8a f6 90 [ 64.168937][ T42] RSP: 0018:ffffc90000b27a08 EFLAGS: 00010293 [ 64.174984][ T42] RAX: 0000000000000000 RBX: ffff88807ba0c88b RCX: ffffffff8b7fbff0 [ 64.182935][ T42] RDX: ffff88801f29a540 RSI: ffffffff8b7fda6c RDI: ffff88801f29a540 [ 64.190885][ T42] RBP: 00000000ffffffff R08: 0000000000000004 R09: 00000000ffffffff [ 64.198834][ T42] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 64.206785][ T42] R13: ffff88807ba0c950 R14: ffff88807ba0c418 R15: dffffc0000000000 [ 64.214745][ T42] ? ceph_con_v1_try_read+0x2a00/0x6ca0 [ 64.220276][ T42] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 64.225809][ T42] ? ceph_con_v1_try_read+0x447c/0x6ca0 [ 64.231353][ T42] ? ceph_con_workfn+0x48/0x13e0 [ 64.236272][ T42] ? register_lock_class+0x40/0x560 [ 64.241451][ T42] ? do_raw_spin_lock+0x128/0x260 [ 64.246462][ T42] ? __pfx___mutex_lock+0x10/0x10 [ 64.251470][ T42] ? __lock_acquire+0x49f/0x1a40 [ 64.256389][ T42] ? __pfx_ceph_con_v1_try_read+0x10/0x10 [ 64.262098][ T42] ? debug_object_deactivate+0x2e4/0x3b0 [ 64.267722][ T42] ceph_con_workfn+0x9a5/0x13e0 [ 64.272557][ T42] process_one_work+0xa23/0x1940 [ 64.277494][ T42] ? __pfx_process_one_work+0x10/0x10 [ 64.282850][ T42] ? __pfx_ceph_con_workfn+0x10/0x10 [ 64.288117][ T42] worker_thread+0x5ef/0xe50 [ 64.292696][ T42] ? kthread+0x13a/0x450 [ 64.296919][ T42] ? __pfx_worker_thread+0x10/0x10 [ 64.302009][ T42] kthread+0x370/0x450 [ 64.306058][ T42] ? __pfx_kthread+0x10/0x10 [ 64.310628][ T42] ret_from_fork+0x72b/0xd50 [ 64.315205][ T42] ? __pfx_ret_from_fork+0x10/0x10 [ 64.320318][ T42] ? __switch_to+0x800/0x10f0 [ 64.324975][ T42] ? __pfx_kthread+0x10/0x10 [ 64.329546][ T42] ret_from_fork_asm+0x1a/0x30 [ 64.334317][ T42] [ 64.337498][ T42] Kernel Offset: disabled [ 64.341794][ T42] Rebooting in 86400 seconds..