[v6.1] WARNING in ceph_con_v2_try_read
3 views
Skip to first unread message
syzbot
Jul 27, 2026, 2:59:28 AM (9 days ago) Jul 27
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: dc5c83b7f5f8 Linux 6.1.178
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=126e7746580000
kernel config: https://syzkaller.appspot.com/x/.config?x=872c04466179833f
dashboard link: https://syzkaller.appspot.com/bug?extid=0dc33bac91300aa25c34
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/96393e4697a3/disk-dc5c83b7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/0d4afce44fab/vmlinux-dc5c83b7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/4787e310d875/Image-dc5c83b7.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0dc33b...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 24 at net/ceph/messenger_v2.c:2940 populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
WARNING: CPU: 1 PID: 24 at net/ceph/messenger_v2.c:2940 ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
Modules linked in:
CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
Workqueue: ceph-msgr ceph_con_workfn
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
pc : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
lr : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
lr : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
sp : ffff80001cc37780
x29: ffff80001cc37ad0 x28: dfff800000000000 x27: ffff80001cc37860
x26: 00000000000000f8 x25: ffff0000db094440 x24: ffff0000db094a10
x23: 0000000000000000 x22: 1fffe0001b6128d8 x21: ffff0000db0946c0
x20: ffff0000db094428 x19: ffff700003986f0c x18: 0000000000000000
x17: ffff80018a0de000 x16: ffff8000082dd244 x15: 0000000000000000
x14: 0000000000000006 x13: 0000000000000000 x12: 0a32762068706563
x11: ff008000117e877c x10: 0000000000000000 x9 : ffff8000117e877c
x8 : ffff0000c0a60000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : ffff0000db0946d8 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
ceph_con_workfn+0x16c/0xdcc net/ceph/messenger.c:1503
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 45680
hardirqs last enabled at (45679): [<ffff8000081ad57c>] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:426
hardirqs last disabled at (45680): [<ffff800011b8c77c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (45678): [<ffff80000fe7fe84>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last enabled at (45678): [<ffff80000fe7fe84>] release_sock+0x16c/0x1bc net/core/sock.c:3531
softirqs last disabled at (45676): [<ffff80000fe7fd4c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (45676): [<ffff80000fe7fd4c>] release_sock+0x34/0x1bc net/core/sock.c:3518
---[ end trace 0000000000000000 ]---
libceph: mon0 (2)127.0.0.1:6789 read processing error
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot found the following issue on:
HEAD commit: dc5c83b7f5f8 Linux 6.1.178
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=126e7746580000
kernel config: https://syzkaller.appspot.com/x/.config?x=872c04466179833f
dashboard link: https://syzkaller.appspot.com/bug?extid=0dc33bac91300aa25c34
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
userspace arch: arm64
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/96393e4697a3/disk-dc5c83b7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/0d4afce44fab/vmlinux-dc5c83b7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/4787e310d875/Image-dc5c83b7.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0dc33b...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 24 at net/ceph/messenger_v2.c:2940 populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
WARNING: CPU: 1 PID: 24 at net/ceph/messenger_v2.c:2940 ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
Modules linked in:
CPU: 1 PID: 24 Comm: kworker/1:1 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
Workqueue: ceph-msgr ceph_con_workfn
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
pc : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
lr : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
lr : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
sp : ffff80001cc37780
x29: ffff80001cc37ad0 x28: dfff800000000000 x27: ffff80001cc37860
x26: 00000000000000f8 x25: ffff0000db094440 x24: ffff0000db094a10
x23: 0000000000000000 x22: 1fffe0001b6128d8 x21: ffff0000db0946c0
x20: ffff0000db094428 x19: ffff700003986f0c x18: 0000000000000000
x17: ffff80018a0de000 x16: ffff8000082dd244 x15: 0000000000000000
x14: 0000000000000006 x13: 0000000000000000 x12: 0a32762068706563
x11: ff008000117e877c x10: 0000000000000000 x9 : ffff8000117e877c
x8 : ffff0000c0a60000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : ffff0000db0946d8 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
ceph_con_workfn+0x16c/0xdcc net/ceph/messenger.c:1503
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 45680
hardirqs last enabled at (45679): [<ffff8000081ad57c>] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:426
hardirqs last disabled at (45680): [<ffff800011b8c77c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (45678): [<ffff80000fe7fe84>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last enabled at (45678): [<ffff80000fe7fe84>] release_sock+0x16c/0x1bc net/core/sock.c:3531
softirqs last disabled at (45676): [<ffff80000fe7fd4c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (45676): [<ffff80000fe7fd4c>] release_sock+0x34/0x1bc net/core/sock.c:3518
---[ end trace 0000000000000000 ]---
libceph: mon0 (2)127.0.0.1:6789 read processing error
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
syzbot
Jul 27, 2026, 3:46:28 AM (9 days ago) Jul 27
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: dc5c83b7f5f8 Linux 6.1.178
git tree: linux-6.1.y
console output: https://syzkaller.appspot.com/x/log.txt?x=1044b88e580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=130dc6b9580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/96393e4697a3/disk-dc5c83b7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/0d4afce44fab/vmlinux-dc5c83b7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/4787e310d875/Image-dc5c83b7.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0dc33b...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4457 at net/ceph/messenger_v2.c:2940 populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
WARNING: CPU: 0 PID: 4457 at net/ceph/messenger_v2.c:2940 ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
Modules linked in:
CPU: 0 PID: 4457 Comm: kworker/0:7 Not tainted syzkaller #0
x29: ffff8000215e7ad0 x28: dfff800000000000 x27: ffff8000215e7860
x26: 00000000000000f8 x25: ffff0000df0a0440 x24: ffff0000df0a0a10
x23: 0000000000000000 x22: 1fffe0001be140d8 x21: ffff0000df0a06c0
x20: ffff0000df0a0428 x19: ffff7000042bcf0c x18: 1fffe00033e7277e
x17: ffff80001537d000 x16: ffff8000082dd244 x15: 0000000000000000
hardirqs last enabled at (8039): [<ffff8000081ad57c>] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:426
hardirqs last disabled at (8040): [<ffff800011b8c77c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8038): [<ffff80000fe7fe84>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last enabled at (8038): [<ffff80000fe7fe84>] release_sock+0x16c/0x1bc net/core/sock.c:3531
softirqs last disabled at (8036): [<ffff80000fe7fd4c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (8036): [<ffff80000fe7fd4c>] release_sock+0x34/0x1bc net/core/sock.c:3518
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
HEAD commit: dc5c83b7f5f8 Linux 6.1.178
git tree: linux-6.1.y
kernel config: https://syzkaller.appspot.com/x/.config?x=872c04466179833f
dashboard link: https://syzkaller.appspot.com/bug?extid=0dc33bac91300aa25c34
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
userspace arch: arm64
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1195bfde580000
dashboard link: https://syzkaller.appspot.com/bug?extid=0dc33bac91300aa25c34
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
userspace arch: arm64
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=130dc6b9580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/96393e4697a3/disk-dc5c83b7.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/0d4afce44fab/vmlinux-dc5c83b7.xz
kernel image: https://storage.googleapis.com/syzbot-assets/4787e310d875/Image-dc5c83b7.gz.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+0dc33b...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4457 at net/ceph/messenger_v2.c:2940 ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
Modules linked in:
CPU: 0 PID: 4457 Comm: kworker/0:7 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
Workqueue: ceph-msgr ceph_con_workfn
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
pc : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
lr : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
lr : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
sp : ffff8000215e7780
Workqueue: ceph-msgr ceph_con_workfn
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
pc : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
lr : populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
lr : ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
x29: ffff8000215e7ad0 x28: dfff800000000000 x27: ffff8000215e7860
x26: 00000000000000f8 x25: ffff0000df0a0440 x24: ffff0000df0a0a10
x23: 0000000000000000 x22: 1fffe0001be140d8 x21: ffff0000df0a06c0
x20: ffff0000df0a0428 x19: ffff7000042bcf0c x18: 1fffe00033e7277e
x17: ffff80001537d000 x16: ffff8000082dd244 x15: 0000000000000000
x14: 0000000000000006 x13: 0000000000000000 x12: 0a32762068706563
x11: ff008000117e877c x10: 0000000000000000 x9 : ffff8000117e877c
x8 : ffff0000ceaad400 x7 : 0000000000000000 x6 : 0000000000000000
x11: ff008000117e877c x10: 0000000000000000 x9 : ffff8000117e877c
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000
x2 : ffff0000df0a06d8 x1 : 0000000000000000 x0 : 0000000000000000
Call trace:
populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
ceph_con_workfn+0x16c/0xdcc net/ceph/messenger.c:1503
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
irq event stamp: 8040
populate_in_iter net/ceph/messenger_v2.c:2940 [inline]
ceph_con_v2_try_read+0x5c10/0x5d80 net/ceph/messenger_v2.c:2970
ceph_con_workfn+0x16c/0xdcc net/ceph/messenger.c:1503
process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292
worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439
kthread+0x254/0x2e0 kernel/kthread.c:376
ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
hardirqs last enabled at (8039): [<ffff8000081ad57c>] __local_bh_enable_ip+0x1f8/0x37c kernel/softirq.c:426
hardirqs last disabled at (8040): [<ffff800011b8c77c>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last enabled at (8038): [<ffff80000fe7fe84>] spin_unlock_bh include/linux/spinlock.h:396 [inline]
softirqs last enabled at (8038): [<ffff80000fe7fe84>] release_sock+0x16c/0x1bc net/core/sock.c:3531
softirqs last disabled at (8036): [<ffff80000fe7fd4c>] spin_lock_bh include/linux/spinlock.h:356 [inline]
softirqs last disabled at (8036): [<ffff80000fe7fd4c>] release_sock+0x34/0x1bc net/core/sock.c:3518
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
syzbot
Jul 27, 2026, 4:33:26 AM (9 days ago) Jul 27
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: 674f684f7c61 Linux 5.15.212
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12151632580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f161cbc9aef65db0
dashboard link: https://syzkaller.appspot.com/bug?extid=8d72882015436ebb4a2d
disk image: https://storage.googleapis.com/syzbot-assets/f55be2937b89/disk-674f684f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a19fb0ffc049/vmlinux-674f684f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/365d4529a007/bzImage-674f684f.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+8d7288...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4233 at net/ceph/messenger_v2.c:2839 populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
WARNING: CPU: 0 PID: 4233 at net/ceph/messenger_v2.c:2839 ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Modules linked in:
CPU: 0 PID: 4233 Comm: kworker/0:6 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
RIP: 0010:ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 f7 ea f7 48 c7 c7 40 f5 3f 8b 89 de e8 47 1f 27 00 0f 0b e9 29 ff ff ff e8 eb f6 ea f7 <0f> 0b 41 bf c3 ff ff ff e9 1d ff ff ff e8 d9 f6 ea f7 0f 0b 41 bf
RSP: 0018:ffffc900031df760 EFLAGS: 00010293
RAX: ffffffff898e0a95 RBX: 0000000000000000 RCX: ffff888029a75940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900031dfbb8 R08: ffff88802ba046b7 R09: ffff88802ba046ab
R10: dffffc0000000000 R11: ffffed10057408d7 R12: ffff88802ba04808
R13: dffffc0000000000 R14: ffff88802ba046b8 R15: 1ffff1100574095b
FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbaa21be580 CR3: 0000000063eaa000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ceph_con_workfn+0x1ed/0x1110 net/ceph/messenger.c:1528
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
</TASK>
syzbot found the following issue on:
HEAD commit: 674f684f7c61 Linux 5.15.212
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=12151632580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f161cbc9aef65db0
dashboard link: https://syzkaller.appspot.com/bug?extid=8d72882015436ebb4a2d
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/f55be2937b89/disk-674f684f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a19fb0ffc049/vmlinux-674f684f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/365d4529a007/bzImage-674f684f.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
------------[ cut here ]------------
WARNING: CPU: 0 PID: 4233 at net/ceph/messenger_v2.c:2839 populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
WARNING: CPU: 0 PID: 4233 at net/ceph/messenger_v2.c:2839 ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Modules linked in:
CPU: 0 PID: 4233 Comm: kworker/0:6 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
RIP: 0010:ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 f7 ea f7 48 c7 c7 40 f5 3f 8b 89 de e8 47 1f 27 00 0f 0b e9 29 ff ff ff e8 eb f6 ea f7 <0f> 0b 41 bf c3 ff ff ff e9 1d ff ff ff e8 d9 f6 ea f7 0f 0b 41 bf
RSP: 0018:ffffc900031df760 EFLAGS: 00010293
RAX: ffffffff898e0a95 RBX: 0000000000000000 RCX: ffff888029a75940
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900031dfbb8 R08: ffff88802ba046b7 R09: ffff88802ba046ab
R10: dffffc0000000000 R11: ffffed10057408d7 R12: ffff88802ba04808
R13: dffffc0000000000 R14: ffff88802ba046b8 R15: 1ffff1100574095b
FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbaa21be580 CR3: 0000000063eaa000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ceph_con_workfn+0x1ed/0x1110 net/ceph/messenger.c:1528
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
</TASK>
syzbot
Jul 27, 2026, 5:37:36 AM (9 days ago) Jul 27
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: 674f684f7c61 Linux 5.15.212
git tree: linux-5.15.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13f96499580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1513bfde580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/f55be2937b89/disk-674f684f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a19fb0ffc049/vmlinux-674f684f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/365d4529a007/bzImage-674f684f.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+8d7288...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1325 at net/ceph/messenger_v2.c:2839 populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
WARNING: CPU: 1 PID: 1325 at net/ceph/messenger_v2.c:2839 ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Modules linked in:
CPU: 1 PID: 1325 Comm: kworker/1:2 Not tainted syzkaller #0
RAX: ffffffff898e0a95 RBX: 0000000000000000 RCX: ffff888023031dc0
R10: dffffc0000000000 R11: ffffed100f5948d7 R12: ffff88807aca4808
R13: dffffc0000000000 R14: ffff88807aca46b8 R15: 1ffff1100f59495b
FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
HEAD commit: 674f684f7c61 Linux 5.15.212
git tree: linux-5.15.y
kernel config: https://syzkaller.appspot.com/x/.config?x=f161cbc9aef65db0
dashboard link: https://syzkaller.appspot.com/bug?extid=8d72882015436ebb4a2d
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=163af2ea580000
dashboard link: https://syzkaller.appspot.com/bug?extid=8d72882015436ebb4a2d
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=1513bfde580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/f55be2937b89/disk-674f684f.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a19fb0ffc049/vmlinux-674f684f.xz
kernel image: https://storage.googleapis.com/syzbot-assets/365d4529a007/bzImage-674f684f.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+8d7288...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 1325 at net/ceph/messenger_v2.c:2839 ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Modules linked in:
CPU: 1 PID: 1325 Comm: kworker/1:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
RIP: 0010:ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 f7 ea f7 48 c7 c7 40 f5 3f 8b 89 de e8 47 1f 27 00 0f 0b e9 29 ff ff ff e8 eb f6 ea f7 <0f> 0b 41 bf c3 ff ff ff e9 1d ff ff ff e8 d9 f6 ea f7 0f 0b 41 bf
RSP: 0018:ffffc900051c7760 EFLAGS: 00010293
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:2839 [inline]
RIP: 0010:ceph_con_v2_try_read+0x6e45/0x6fc0 net/ceph/messenger_v2.c:2869
Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 f7 ea f7 48 c7 c7 40 f5 3f 8b 89 de e8 47 1f 27 00 0f 0b e9 29 ff ff ff e8 eb f6 ea f7 <0f> 0b 41 bf c3 ff ff ff e9 1d ff ff ff e8 d9 f6 ea f7 0f 0b 41 bf
RAX: ffffffff898e0a95 RBX: 0000000000000000 RCX: ffff888023031dc0
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900051c7bb8 R08: ffff88807aca46b7 R09: ffff88807aca46ab
R10: dffffc0000000000 R11: ffffed100f5948d7 R12: ffff88807aca4808
R13: dffffc0000000000 R14: ffff88807aca46b8 R15: 1ffff1100f59495b
FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0f918a1ff8 CR3: 0000000024e60000 CR4: 00000000003506e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ceph_con_workfn+0x1ed/0x1110 net/ceph/messenger.c:1528
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
</TASK>
---
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
ceph_con_workfn+0x1ed/0x1110 net/ceph/messenger.c:1528
process_one_work+0x867/0xff0 kernel/workqueue.c:2310
worker_thread+0xad7/0x12a0 kernel/workqueue.c:2457
kthread+0x42e/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
</TASK>
---
syzbot
Jul 27, 2026, 6:59:35 PM (8 days ago) Jul 27
to syzkaller...@googlegroups.com
Hello,
syzbot found the following issue on:
HEAD commit: c5596480c50e Linux 6.6.145
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13b7c49e580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f0bc3d90c30838b5
dashboard link: https://syzkaller.appspot.com/bug?extid=7bec276b8b8889ad21ab
disk image: https://storage.googleapis.com/syzbot-assets/eb5cda0a8020/disk-c5596480.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/ca05ff2fc502/vmlinux-c5596480.xz
kernel image: https://storage.googleapis.com/syzbot-assets/6daf3255b985/bzImage-c5596480.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7bec27...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6660 at net/ceph/messenger_v2.c:3168 populate_in_iter net/ceph/messenger_v2.c:3168 [inline]
WARNING: CPU: 1 PID: 6660 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Modules linked in:
CPU: 1 PID: 6660 Comm: kworker/1:5 Not tainted syzkaller #0
RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 0f dd 03 f7 0f 0b e9 57 ff ff ff e8 b3 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 a1 12 3a f7 0f 0b 41 bd
RSP: 0018:ffffc90004d37560 EFLAGS: 00010293
RAX: ffffffff8a4d621d RBX: ffff8880567886c8 RCX: ffff888024a18000
R10: ffff8880567886b4 R11: ffffed100acf10d8 R12: fffff520009a6efc
R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
Call Trace:
<TASK>
ceph_con_workfn+0x1f1/0x1250 net/ceph/messenger.c:1574
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
syzbot found the following issue on:
HEAD commit: c5596480c50e Linux 6.6.145
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=13b7c49e580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f0bc3d90c30838b5
dashboard link: https://syzkaller.appspot.com/bug?extid=7bec276b8b8889ad21ab
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
Unfortunately, I don't have any reproducer for this issue yet.
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/eb5cda0a8020/disk-c5596480.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/ca05ff2fc502/vmlinux-c5596480.xz
kernel image: https://storage.googleapis.com/syzbot-assets/6daf3255b985/bzImage-c5596480.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6660 at net/ceph/messenger_v2.c:3168 populate_in_iter net/ceph/messenger_v2.c:3168 [inline]
WARNING: CPU: 1 PID: 6660 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Modules linked in:
CPU: 1 PID: 6660 Comm: kworker/1:5 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:3168 [inline]
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ce 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 0f dd 03 f7 0f 0b e9 57 ff ff ff e8 b3 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 a1 12 3a f7 0f 0b 41 bd
RSP: 0018:ffffc90004d37560 EFLAGS: 00010293
RAX: ffffffff8a4d621d RBX: ffff8880567886c8 RCX: ffff888024a18000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90004d37b38 R08: 0000000000000004 R09: 0000000000000004
R10: ffff8880567886b4 R11: ffffed100acf10d8 R12: fffff520009a6efc
R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c42b9b9 CR3: 0000000046a37000 CR4: 00000000003506e0
Call Trace:
<TASK>
ceph_con_workfn+0x1f1/0x1250 net/ceph/messenger.c:1574
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
syzbot
Aug 2, 2026, 9:24:25 PM (2 days ago) Aug 2
to syzkaller...@googlegroups.com
syzbot has found a reproducer for the following issue on:
HEAD commit: a1153c0deb44 Linux 6.6.147
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=11490cc6580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15a36c9e580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9f646bfa1b52/disk-a1153c0d.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a2aec2e8f0fd/vmlinux-a1153c0d.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a7abe1f87405/bzImage-a1153c0d.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7bec27...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 178 at net/ceph/messenger_v2.c:3168 populate_in_iter net/ceph/messenger_v2.c:3168 [inline]
WARNING: CPU: 0 PID: 178 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Modules linked in:
CPU: 0 PID: 178 Comm: kworker/0:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
RSP: 0018:ffffc90002e97560 EFLAGS: 00010293
RAX: ffffffff8a4d5c9d RBX: ffff8880241186c8 RCX: ffff88801b3b3c00
R10: ffff8880241186b4 R11: ffffed10048230d8 R12: fffff520005d2efc
HEAD commit: a1153c0deb44 Linux 6.6.147
git tree: linux-6.6.y
console output: https://syzkaller.appspot.com/x/log.txt?x=11490cc6580000
kernel config: https://syzkaller.appspot.com/x/.config?x=f0bc3d90c30838b5
dashboard link: https://syzkaller.appspot.com/bug?extid=7bec276b8b8889ad21ab
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=13e85e32580000
dashboard link: https://syzkaller.appspot.com/bug?extid=7bec276b8b8889ad21ab
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=15a36c9e580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/9f646bfa1b52/disk-a1153c0d.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/a2aec2e8f0fd/vmlinux-a1153c0d.xz
kernel image: https://storage.googleapis.com/syzbot-assets/a7abe1f87405/bzImage-a1153c0d.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7bec27...@syzkaller.appspotmail.com
------------[ cut here ]------------
WARNING: CPU: 0 PID: 178 at net/ceph/messenger_v2.c:3168 ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Modules linked in:
CPU: 0 PID: 178 Comm: kworker/0:2 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
Workqueue: ceph-msgr ceph_con_workfn
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:3168 [inline]
RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9e 12 3a f7 48 c7 c7 40 23 e6 8b 44 89 f6 e8 9f e2 03 f7 0f 0b e9 57 ff ff ff e8 83 12 3a f7 <0f> 0b 41 bd c3 ff ff ff e9 4b ff ff ff e8 71 12 3a f7 0f 0b 41 bd
RIP: 0010:populate_in_iter net/ceph/messenger_v2.c:3168 [inline]
RIP: 0010:ceph_con_v2_try_read+0x7d1d/0x7ea0 net/ceph/messenger_v2.c:3198
RSP: 0018:ffffc90002e97560 EFLAGS: 00010293
RAX: ffffffff8a4d5c9d RBX: ffff8880241186c8 RCX: ffff88801b3b3c00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90002e97b38 R08: 0000000000000004 R09: 0000000000000004
R10: ffff8880241186b4 R11: ffffed10048230d8 R12: fffff520005d2efc
R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f5f235eb700 CR3: 0000000073623000 CR4: 00000000003506f0
Call Trace:
<TASK>
ceph_con_workfn+0x1f1/0x1250 net/ceph/messenger.c:1574
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
---
<TASK>
ceph_con_workfn+0x1f1/0x1250 net/ceph/messenger.c:1574
process_one_work kernel/workqueue.c:2653 [inline]
process_scheduled_works+0xa60/0x1600 kernel/workqueue.c:2730
worker_thread+0xa5e/0xfe0 kernel/workqueue.c:2811
kthread+0x2fa/0x390 kernel/kthread.c:388
ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152
ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293
</TASK>
---
Reply all
Reply to author
Forward
0 new messages