ci2-android-5-15/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-15/syz-executor2502570979
<...>
Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
execve("ci2-android-5-15/syz-executor2502570979", ["ci2-android-5-15/syz-executor2502570979"], 0x7ffe454b95c0 /* 10 vars */) = 0
brk(NULL) = 0x555593663000
brk(0x555593663d40) = 0x555593663d40
arch_prctl(ARCH_SET_FS, 0x5555936633c0) = 0
set_tid_address(0x555593663690) = 303
set_robust_list(0x5555936636a0, 24) = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-15/syz-executor2502570979", 4096) = 45
getrandom("\x91\x92\x9a\x1a\xc9\xb6\xb7\x83", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555593663d40
brk(0x555593684d40) = 0x555593684d40
brk(0x555593685000) = 0x555593685000
mprotect(0x7f1221f29000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18) = 18
executing program
add_key(NULL, NULL, "\x30\x82\x05\x55\x30\x82\x03\x3d\xa0\x03\x02\x01\x02\x02\x14\x73\x98\xea\x98\x2d\xd0\x2e\xa8\xb1\xcf\x57\xc7\xf2\x97\xb3\xe6\x1a\xfc\x8c\x0a\x30\x0d\x06\x09\x2a\x86\x48\x86\xf7\x0d\x01\x01\x0b\x05\x00\x30\x34\x31\x32\x30\x30\x06\x03\x55", 59, 0) = -1 EFAULT (Bad address)
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcf5364630) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364630) = 0
[ 23.810562][ T30] audit: type=1400 audit(1790013250.193:64): avc: denied { execmem } for pid=303 comm="syz-executor250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 23.830207][ T30] audit: type=1400 audit(1790013250.203:65): avc: denied { read write } for pid=303 comm="syz-executor250" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 23.854558][ T30] audit: type=1400 audit(1790013250.203:66): avc: denied { open } for pid=303 comm="syz-executor250" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 23.879680][ T30] audit: type=1400 audit(1790013250.203:67): avc: denied { ioctl } for pid=303 comm="syz-executor250" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364630) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363620) = 18
[ 24.082047][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364630) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363620) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364630) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363620) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364630) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363620) = 36
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364630) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1221f2fb4c) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcf5363620) = 0
[ 24.442126][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 24.453265][ T20] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 24.462450][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 24.471860][ T20] usb 1-1: config 0 descriptor??
close(3) = 0
[ 24.812102][ T20] usbhid 1-1:0.0: can't add hid device: -71
[ 24.818062][ T20] usbhid: probe of 1-1:0.0 failed with error -71
[ 24.826989][ T20] usb 1-1: USB disconnect, device number 2
openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcf5364640) = 0
ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364640) = 0
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364640) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363630) = 18
[ 25.282046][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364640) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363630) = 18
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364640) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363630) = 9
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364640) = 0
ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcf5363630) = 36
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364640) = 0
ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0
ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument)
ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f1221f2fb4c) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcf5363630) = 0
[ 25.642626][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 25.653647][ T20] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 25.663034][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 25.671588][ T20] usb 1-1: config 0 descriptor??
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364670) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcf5363660) = 3
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364670) = 0
ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcf5363660) = 3
ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcf5364670) = 0
ioctl(3, USB_RAW_IOCTL_EP0_STALL, 0) = 0
[ 26.612079][ T20] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[ 26.619621][ T20] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4
[ 27.422027][ C0] ================================================================================
[ 27.431461][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[ 27.440602][ C0] index 21762 is out of range for type 'const int[34]'
[ 27.447538][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[ 27.454650][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 27.464811][ C0] Call Trace:
[ 27.468092][ C0]
[ 27.470926][ C0] __dump_stack+0x21/0x30
[ 27.475264][ C0] dump_stack_lvl+0x110/0x170
[ 27.479921][ C0] ? show_regs_print_info+0x20/0x20
[ 27.485110][ C0] dump_stack+0x15/0x20
[ 27.489268][ C0] ubsan_epilogue+0xe/0x40
[ 27.493684][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 27.499381][ C0] aiptek_irq+0x2045/0x29b0
[ 27.503866][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 27.509647][ C0] ? kcov_remote_start+0xf3/0x350
[ 27.514649][ C0] ? usb_unanchor_urb+0xa1/0xc0
[ 27.519476][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0
[ 27.524826][ C0] usb_hcd_giveback_urb+0x11d/0x3f0
[ 27.530000][ C0] ? _raw_spin_unlock+0x4d/0x70
[ 27.535004][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[ 27.540888][ C0] dummy_timer+0xa3a/0x32d0
[ 27.545468][ C0] ? __raise_softirq_irqoff+0xd0/0xd0
[ 27.550853][ C0] ? dummy_free_streams+0x5c0/0x5c0
[ 27.556059][ C0] ? dummy_free_streams+0x5c0/0x5c0
[ 27.561504][ C0] call_timer_fn+0x38/0x290
[ 27.565992][ C0] ? dummy_free_streams+0x5c0/0x5c0
[ 27.571320][ C0] __run_timers+0x637/0x9a0
[ 27.575830][ C0] ? calc_index+0x200/0x200
[ 27.580488][ C0] ? sched_clock_cpu+0x18/0x3d0
[ 27.585363][ C0] run_timer_softirq+0x6a/0xf0
[ 27.590216][ C0] handle_softirqs+0x250/0x560
[ 27.594988][ C0] ? irqtime_account_irq+0xbe/0x390
[ 27.600384][ C0] __irq_exit_rcu+0x52/0xf0
[ 27.604916][ C0] irq_exit_rcu+0x9/0x10
[ 27.609277][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 27.614915][ C0]
[ 27.617828][ C0]
[ 27.620751][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 27.626738][ C0] RIP: 0010:default_idle+0xf/0x20
[ 27.632079][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 ce d1 f4 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d b3 f2 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41
[ 27.651688][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246
[ 27.657844][ C0] RAX: 0000000000004a7e RBX: ffffffff8661c400 RCX: 0000000000004a7e
[ 27.665812][ C0] RDX: 0000000000000001 RSI: ffffffff85638e60 RDI: ffffffff85638e20
[ 27.673767][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e
[ 27.681805][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000
[ 27.689758][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000
[ 27.697714][ C0] arch_cpu_idle+0xa/0x10
[ 27.702032][ C0] default_idle_call+0x71/0x1d0
[ 27.706864][ C0] do_idle+0x217/0x620
[ 27.710922][ C0] ? idle_inject_timer_fn+0x60/0x60
[ 27.716105][ C0] ? radix_tree_lookup+0x248/0x290
[ 27.721203][ C0] ? debug_smp_processor_id+0x17/0x20
[ 27.726565][ C0] cpu_startup_entry+0x18/0x20
[ 27.731311][ C0] rest_init+0x10a/0x130
[ 27.735534][ C0] ? time_init+0x40/0x40
[ 27.739974][ C0] arch_call_rest_init+0xe/0x10
[ 27.744866][ C0] start_kernel+0x46d/0x4e0
[ 27.749375][ C0] x86_64_start_reservations+0x2a/0x30
[ 27.754825][ C0] x86_64_start_kernel+0x5b/0x60
[ 27.759763][ C0] secondary_startup_64_no_verify+0xb1/0xbb
[ 27.765662][ C0]
[ 27.768681][ C0] ================================================================================
[ 27.778410][ C0] ================================================================================
[ 27.787709][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[ 27.796288][ C0] index 21763 is out of range for type 'const int[34]'
[ 27.803120][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[ 27.810130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 27.820159][ C0] Call Trace:
[ 27.823437][ C0]
[ 27.826279][ C0] __dump_stack+0x21/0x30
[ 27.830593][ C0] dump_stack_lvl+0x110/0x170
[ 27.835255][ C0] ? show_regs_print_info+0x20/0x20
[ 27.840436][ C0] dump_stack+0x15/0x20
[ 27.844567][ C0] ubsan_epilogue+0xe/0x40
[ 27.848955][ C0] __ubsan_handle_out_of_bounds+0xdf/0xf0
[ 27.854849][ C0] aiptek_irq+0x1f14/0x29b0
[ 27.859375][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80
[ 27.865182][ C0] ? kcov_remote_start+0xf3/0x350
[ 27.870203][ C0] __usb_hcd_giveback_urb+0x32f/0x4f0
[ 27.875561][ C0] usb_hcd_giveback_urb+0x11d/0x3f0
[ 27.880781][ C0] ? _raw_spin_unlock+0x4d/0x70
[ 27.885610][ C0] ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[ 27.891575][ C0] dummy_timer+0xa3a/0x32d0
[ 27.896110][ C0] ? __raise_softirq_irqoff+0xd0/0xd0
[ 27.901601][ C0] ? dummy_free_streams+0x5c0/0x5c0
[ 27.906900][ C0] ? dummy_free_streams+0x5c0/0x5c0
[ 27.912101][ C0] call_timer_fn+0x38/0x290
[ 27.916597][ C0] ? dummy_free_streams+0x5c0/0x5c0
[ 27.921923][ C0] __run_timers+0x637/0x9a0
[ 27.926564][ C0] ? calc_index+0x200/0x200
[ 27.931162][ C0] ? sched_clock_cpu+0x18/0x3d0
[ 27.936558][ C0] run_timer_softirq+0x6a/0xf0
[ 27.941531][ C0] handle_softirqs+0x250/0x560
[ 27.946428][ C0] ? irqtime_account_irq+0xbe/0x390
[ 27.951727][ C0] __irq_exit_rcu+0x52/0xf0
[ 27.956255][ C0] irq_exit_rcu+0x9/0x10
[ 27.960493][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 27.966134][ C0]
[ 27.969079][ C0]
[ 27.972171][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 27.978712][ C0] RIP: 0010:default_idle+0xf/0x20
[ 27.983740][ C0] Code: 8c 4b ff ff ff 4c 89 f7 e8 ce d1 f4 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d b3 f2 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41
[ 28.003332][ C0] RSP: 0018:ffffffff86607d78 EFLAGS: 00000246
[ 28.009383][ C0] RAX: 0000000000004a7e RBX: ffffffff8661c400 RCX: 0000000000004a7e
[ 28.017353][ C0] RDX: 0000000000000001 RSI: ffffffff85638e60 RDI: ffffffff85638e20
[ 28.025303][ C0] RBP: ffffffff86607d78 R08: ffff8881f7038c73 R09: 1ffff1103ee0718e
[ 28.033255][ C0] R10: dffffc0000000000 R11: ffffed103ee0718f R12: 0000000000000000
[ 28.041526][ C0] R13: 1ffffffff0cc3880 R14: dffffc0000000000 R15: dffffc0000000000
[ 28.049731][ C0] arch_cpu_idle+0xa/0x10
[ 28.054059][ C0] default_idle_call+0x71/0x1d0
[ 28.059062][ C0] do_idle+0x217/0x620
[ 28.063140][ C0] ? idle_inject_timer_fn+0x60/0x60
[ 28.068340][ C0] ? radix_tree_lookup+0x248/0x290
[ 28.073452][ C0] ? debug_smp_processor_id+0x17/0x20
[ 28.078821][ C0] cpu_startup_entry+0x18/0x20
[ 28.083582][ C0] rest_init+0x10a/0x130
[ 28.087828][ C0] ? time_init+0x40/0x40
[ 28.092060][ C0] arch_call_rest_init+0xe/0x10
[ 28.096906][ C0] start_kernel+0x46d/0x4e0
[ 28.101416][ C0] x86_64_start_reservations+0x2a/0x30
[ 28.106858][ C0] x86_64_start_kernel+0x5b/0x60
[ 28.111766][ C0] secondary_startup_64_no_verify+0xb1/0xbb
[ 28.117720][ C0]
[ 28.120738][ C0] ================================================================================