ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor1497865941 <...> Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor1497865941", ["ci-upstream-rust-kasan-gce/syz-executor1497865941"], 0x7fff4a431610 /* 10 vars */) = 0 brk(NULL) = 0x555577a99000 brk(0x555577a99d80) = 0x555577a99d80 arch_prctl(ARCH_SET_FS, 0x555577a99400) = 0 set_tid_address(0x555577a996d0) = 5603 set_robust_list(0x555577a996e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor1497865941", 4096) = 55 getrandom("\x08\xdc\xb1\xe6\x6b\x94\x59\x70", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555577a99d80 brk(0x555577abad80) = 0x555577abad80 brk(0x555577abb000) = 0x555577abb000 mprotect(0x7ff2e57f2000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5604 attached , child_tidptr=0x555577a996d0) = 5604 [pid 5604] set_robust_list(0x555577a996e0, 24) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "10000000000", 11) = 11 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "20", 2) = 2 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "1", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "0", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "0", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "1", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "100", 3) = 3 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "0", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "0", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "7 4 1 3", 7) = 7 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "1", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "1", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "Y", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "0", 1) = 1 [pid 5603] close(3) = 0 [pid 5603] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "5604", 4) = 4 [pid 5603] close(3) = 0 [pid 5603] kill(5604, SIGKILL) = 0 [pid 5604] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5604, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5603}, {cmd=CTRL_CMD_NEWFAMILY, version=2}, [[{nla_len=13, nla_type=CTRL_ATTR_FAMILY_NAME}, "\x6e\x6c\x38\x30\x32\x31\x35\x34\x00"...], [{nla_len=6, nla_type=CTRL_ATTR_FAMILY_ID}, 0x1e], [{nla_len=8, nla_type=CTRL_ATTR_VERSION}, 1], [{nla_len=8, nla_type=CTRL_ATTR_HDRSIZE}, 0], [{nla_len=8, nla_type=CTRL_ATTR_MAXATTR}, 48], [{nla_len=744, nla_type=CTRL_ATTR_OPS}, [[{nla_len=20, nla_type=0x1}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_NEWFAMILY], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DO|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x2}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_DELOPS], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DO|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x3}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_NEWMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x4}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_DELMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x5}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_GETMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x6}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xd /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x7}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xe /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x8}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xc /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x9}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x14 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xa}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_GETPOLICY], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xb}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xb /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xc}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x10 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xd}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x11 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xe}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xf /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xf}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x12 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x10}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x13 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x11}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x23 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x12}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x24 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x13}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x26 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x14}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x27 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x15}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x28 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x16}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x29 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x17}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x2a /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x18}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x2b /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x19}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x15 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1a}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x16 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1b}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x17 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1c}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x18 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1d}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x19 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1e}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1a /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1f}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1b /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x20}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1c /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x21}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1d /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x22}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1e /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x23}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1f /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x24}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x20 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x25}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x21 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]]]], [{nla_len=52, nla_type=CTRL_ATTR_MCAST_GROUPS}, [[{nla_len=24, nla_type=0x1}, [[{nla_len=8, nla_type=CTRL_ATTR_MCAST_GRP_ID}, 0xc], [{nla_len=11, nla_type=CTRL_ATTR_MCAST_GRP_NAME}, "\x63\x6f\x6e\x66\x69\x67\x00"...]]], [{nla_len=24, nla_type=0x2}, [[{nla_len=8, nla_type=CTRL_ATTR_MCAST_GRP_ID}, 0xd], [{nla_len=9, nla_type=CTRL_ATTR_MCAST_GRP_NAME}, "\x73\x63\x61\x6e\x00"...]]]]]]], 4096, 0, NULL, NULL) = 864 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5603}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {cmd=0xb, version=0}, [[{nla_len=8, nla_type=0x3}, "\x0b\x00\x00\x00"], [{nla_len=6, nla_type=0xa}, "\xa0\xaa"]]], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5603}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5603}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=84, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=8, nla_type=IFLA_NUM_TX_QUEUES}, 2], [{nla_len=8, nla_type=IFLA_NUM_RX_QUEUES}, 2], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 84, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 84 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5603}, {error=0, msg={nlmsg_len=84, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {cmd=0xb, version=0}, [[{nla_len=8, nla_type=0x3}, "\x0c\x00\x00\x00"], [{nla_len=6, nla_type=0xa}, "\xa1\xaa"]]], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5603}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5603}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 getrandom("\x38\x85\x5e\xeb\x28\xe5\x22\x86", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.oVe3H5", 0700) = 0 chmod("./syzkaller.oVe3H5", 0777) = 0 chdir("./syzkaller.oVe3H5") = 0 mkdir("./0", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5609 attached , child_tidptr=0x555577a996d0) = 5609 [pid 5609] set_robust_list(0x555577a996e0, 24) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] chdir("./0") = 0 [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5609] setpgid(0, 0) = 0 [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1000", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5609] write(1, "executing program\n", 18) = 18 executing program [pid 5609] futex(0x7ff2e57f8b6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] rt_sigaction(SIGRT_1, {sa_handler=0x7ff2e5774cb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7ff2e57664a0}, NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2e56fd000 [pid 5609] mprotect(0x7ff2e56fe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff2e571d990, parent_tid=0x7ff2e571d990, exit_signal=0, stack=0x7ff2e56fd000, stack_size=0x202c0, tls=0x7ff2e571d6c0}ci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5610 attached [pid 5610] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5609] <... clone3 resumed> => {parent_tid=[5610]}, 88) = 5610 [pid 5610] <... rseq resumed>) = 0 [pid 5610] set_robust_list(0x7ff2e571d9a0, 24) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] futex(0x7ff2e57f8b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] futex(0x7ff2e57f8b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = 1 [pid 5610] mkdirat(AT_FDCWD, "./mysys", 0777 [pid 5609] futex(0x7ff2e57f8b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... mkdirat resumed>) = 0 [pid 5610] futex(0x7ff2e57f8b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5610] futex(0x7ff2e57f8b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] futex(0x7ff2e57f8b68, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] futex(0x7ff2e57f8b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] mount(NULL, "./mysys", "sysfs", 0, NULL) = 0 [pid 5610] futex(0x7ff2e57f8b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5610] futex(0x7ff2e57f8b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] futex(0x7ff2e57f8b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... futex resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./mysys/bus/platform/drivers/dummy_hcd/unbind", O_WRONLY [pid 5609] futex(0x7ff2e57f8b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5610] <... openat resumed>) = 3 [pid 5610] futex(0x7ff2e57f8b6c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5610] futex(0x7ff2e57f8b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] futex(0x7ff2e57f8b68, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... futex resumed>) = 0 [pid 5610] write(3, "dummy_hcd.0", 11 [pid 5609] futex(0x7ff2e57f8b6c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [ 81.506423][ T5610] dummy_hcd dummy_hcd.0: remove, state 4 [ 81.506570][ T5610] usb usb1: USB disconnect, device number 1 [pid 5609] futex(0x7ff2e57f8b7c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff2e56dc000 [pid 5609] mprotect(0x7ff2e56dd000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ff2e56fc990, parent_tid=0x7ff2e56fc990, exit_signal=0, stack=0x7ff2e56dc000, stack_size=0x202c0, tls=0x7ff2e56fc6c0}ci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5611 attached => {parent_tid=[5611]}, 88) = 5611 [pid 5611] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5611] set_robust_list(0x7ff2e56fc9a0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] futex(0x7ff2e57f8b78, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 5609] futex(0x7ff2e57f8b7c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 5611] <... openat resumed>) = 4 [pid 5611] ioctl(4, USB_RAW_IOCTL_INIT, 0x7ff2e56fb190) = 0 [pid 5611] ioctl(4, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 5611] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ff2e56fb190) = 0 [ 81.599664][ T5610] dummy_hcd dummy_hcd.0: stopped [ 81.599685][ T5610] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [pid 5611] ioctl(4, USB_RAW_IOCTL_EVENT_FETCH, 0x7ff2e56fb190 [pid 5610] <... write resumed>) = 11 [pid 5610] futex(0x7ff2e57f8b6c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] futex(0x7ff2e57f8b68, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5609] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5609] exit_group(0 [pid 5611] <... ioctl resumed>) = ? [pid 5610] <... futex resumed>) = ? [pid 5609] <... exit_group resumed>) = ? [pid 5611] +++ exited with 0 +++ [pid 5610] +++ exited with 0 +++ [ 84.803665][ T5609] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 84.803680][ T5609] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 84.803700][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor149 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 84.803712][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.803719][ T5609] RIP: 0010:set_link_state+0x27/0x1200 [ 84.803738][ T5609] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 f0 02 8c fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 bb 59 f8 fa 4d 8b 26 4c 89 74 24 10 [ 84.803746][ T5609] RSP: 0018:ffffc90004b3f9b8 EFLAGS: 00010246 [ 84.803756][ T5609] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88803dbdbe80 [ 84.803763][ T5609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.803768][ T5609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.803774][ T5609] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: dffffc0000000000 [ 84.803780][ T5609] R13: ffff88802ad645e9 R14: 0000000000000000 R15: 0000000000000000 [ 84.803787][ T5609] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 84.803794][ T5609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.803801][ T5609] CR2: 00007ff2e57c23fc CR3: 0000000044d56000 CR4: 00000000003526f0 [ 84.803810][ T5609] Call Trace: [ 84.803814][ T5609] [ 84.803821][ T5609] dummy_pullup+0xbf/0x120 [ 84.803834][ T5609] ? __pfx_dummy_pullup+0x10/0x10 [ 84.803848][ T5609] usb_gadget_disconnect_locked+0x126/0x480 [ 84.803871][ T5609] gadget_unbind_driver+0xc2/0x410 [ 84.803882][ T5609] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 84.803891][ T5609] device_release_driver_internal+0x48b/0x880 [ 84.803904][ T5609] driver_detach+0x1f3/0x2d0 [ 84.803916][ T5609] bus_remove_driver+0x229/0x320 [ 84.803931][ T5609] usb_gadget_unregister_driver+0x4e/0x70 [ 84.803945][ T5609] raw_release+0xd2/0x260 [ 84.803957][ T5609] ? __pfx_raw_release+0x10/0x10 [ 84.803968][ T5609] __fput+0x42a/0xa80 [ 84.803979][ T5609] task_work_run+0x1d9/0x270 [ 84.803993][ T5609] ? __pfx_task_work_run+0x10/0x10 [ 84.804007][ T5609] ? rt_spin_unlock+0x163/0x200 [ 84.804021][ T5609] do_exit+0x73a/0x2360 [ 84.804034][ T5609] ? lockdep_hardirqs_on+0x7a/0x110 [ 84.804043][ T5609] ? __pfx_do_exit+0x10/0x10 [ 84.804055][ T5609] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 84.804073][ T5609] do_group_exit+0x22d/0x2f0 [ 84.804086][ T5609] __x64_sys_exit_group+0x3f/0x40 [ 84.804099][ T5609] x64_sys_call+0x18bf/0x18c0 [ 84.804112][ T5609] do_syscall_64+0x17b/0x530 [ 84.804122][ T5609] ? irqentry_exit+0x10f/0x8f0 [ 84.804130][ T5609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.804140][ T5609] ? clear_bhb_loop+0x40/0x90 [ 84.804150][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.804159][ T5609] RIP: 0033:0x7ff2e574ddc5 [ 84.804172][ T5609] Code: Unable to access opcode bytes at 0x7ff2e574dd9b. [ 84.804177][ T5609] RSP: 002b:00007ffdc0160b08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 84.804186][ T5609] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff2e574ddc5 [ 84.804193][ T5609] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000 [ 84.804199][ T5609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.804204][ T5609] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 84.804210][ T5609] R13: 00007ff2e57f7130 R14: 00007ff2e57fd808 R15: 00007ff2e57fd820 [ 84.804219][ T5609] [ 84.804223][ T5609] Modules linked in: [ 84.804235][ T5609] ---[ end trace 0000000000000000 ]--- [ 84.804243][ T5609] RIP: 0010:set_link_state+0x27/0x1200 [ 84.804256][ T5609] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 f0 02 8c fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 bb 59 f8 fa 4d 8b 26 4c 89 74 24 10 [ 84.804264][ T5609] RSP: 0018:ffffc90004b3f9b8 EFLAGS: 00010246 [ 84.804271][ T5609] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88803dbdbe80 [ 84.804278][ T5609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.804283][ T5609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.804288][ T5609] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: dffffc0000000000 [ 84.804295][ T5609] R13: ffff88802ad645e9 R14: 0000000000000000 R15: 0000000000000000 [ 84.804300][ T5609] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 84.804308][ T5609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.804314][ T5609] CR2: 00007ff2e57c23fc CR3: 0000000044d56000 CR4: 00000000003526f0 [ 84.804324][ T5609] Kernel panic - not syncing: Fatal exception [ 84.804598][ T5609] Kernel Offset: disabled