ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor529051802 <...> Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor529051802", ["ci2-android-6-12-rust/syz-executor529051802"], 0x7ffc239c2f50 /* 10 vars */) = 0 brk(NULL) = 0x55557a850000 brk(0x55557a850d40) = 0x55557a850d40 arch_prctl(ARCH_SET_FS, 0x55557a8503c0) = 0 set_tid_address(0x55557a850690) = 312 set_robust_list(0x55557a8506a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor529051802", 4096) = 49 getrandom("\x16\x96\xba\x12\x85\xdb\xc0\xf2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557a850d40 brk(0x55557a871d40) = 0x55557a871d40 brk(0x55557a872000) = 0x55557a872000 mprotect(0x7f15975bd000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557a850690) = 313 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55557a8506a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 executing program [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 313] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffca1232830) = 0 [pid 313] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [ 106.541323][ T36] audit: type=1400 audit(1792325624.020:64): avc: denied { execmem } for pid=312 comm="syz-executor529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.561920][ T36] audit: type=1400 audit(1792325624.040:65): avc: denied { read write } for pid=313 comm="syz-executor529" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.590965][ T36] audit: type=1400 audit(1792325624.040:66): avc: denied { open } for pid=313 comm="syz-executor529" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.614637][ T36] audit: type=1400 audit(1792325624.040:67): avc: denied { ioctl } for pid=313 comm="syz-executor529" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffca1231820) = 18 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [ 106.809422][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffca1231820) = 18 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffca1231820) = 9 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffca1231820) = 32 [pid 313] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffca1232830) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x32) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f15975c3b4c) = 0 [pid 313] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f15975c3b5c) = 1 [pid 313] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffca1231820) = 0 [ 106.961951][ T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 106.971355][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.985387][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [pid 313] mkdir("./debug", 0767) = 0 [pid 313] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 313] openat(AT_FDCWD, "./debug/usb/devices", O_RDONLY) = 4 [ 107.186493][ T36] audit: type=1400 audit(1792325624.660:68): avc: denied { mounton } for pid=313 comm="syz-executor529" path="/root/debug" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 107.209332][ T36] audit: type=1400 audit(1792325624.660:69): avc: denied { mount } for pid=313 comm="syz-executor529" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [pid 313] read(4 [pid 312] kill(-313, SIGKILL) = 0 [pid 312] kill(313, SIGKILL) = 0 [pid 312] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 312] getdents64(3, 0x55557a851760 /* 2 entries */, 32768) = 48 [pid 312] getdents64(3, 0x55557a851760 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [ 249.859423][ T37] INFO: task syz-executor529:313 blocked for more than 122 seconds. [ 249.867497][ T37] Not tainted syzkaller #0 [ 249.872511][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.881241][ T37] task:syz-executor529 state:D stack:0 pid:313 tgid:313 ppid:312 flags:0x00004004 [ 249.891494][ T37] Call Trace: [ 249.894795][ T37] [ 249.897754][ T37] __schedule+0x16fe/0x23d0 [ 249.902342][ T37] ? __sched_text_start+0x10/0x10 [ 249.907414][ T37] ? update_load_avg+0x4f3/0x1980 [ 249.912514][ T37] ? __kasan_check_write+0x18/0x20 [ 249.917695][ T37] ? _raw_spin_lock+0x92/0x120 [ 249.922528][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 249.927783][ T37] schedule+0xc5/0x240 [ 249.931934][ T37] schedule_preempt_disabled+0x14/0x30 [ 249.937431][ T37] __mutex_lock+0x902/0x1b90 [ 249.942071][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 249.948879][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 249.955034][ T37] ? dequeue_task_fair+0x248/0x640 [ 249.960199][ T37] ? idr_get_next+0x284/0x350 [ 249.964917][ T37] __mutex_lock_slowpath+0xe/0x20 [ 249.970005][ T37] mutex_lock+0x113/0x1d0 [ 249.974363][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 249.979316][ T37] ? __kasan_check_write+0x18/0x20 [ 249.984466][ T37] usb_device_read+0x176/0x2d0 [ 249.989302][ T37] ? __kasan_check_write+0x18/0x20 [ 249.994467][ T37] ? __cfi_usb_device_read+0x10/0x10 [ 249.999824][ T37] full_proxy_read+0x128/0x1e0 [ 250.004619][ T37] ? __cfi_full_proxy_read+0x10/0x10 [ 250.009959][ T37] vfs_read+0x28b/0xc70 [ 250.014158][ T37] ? __kasan_check_write+0x18/0x20 [ 250.019359][ T37] ? __cfi_vfs_read+0x10/0x10 [ 250.024087][ T37] ? cgroup_update_frozen+0x160/0x980 [ 250.029514][ T37] ? __asan_memset+0x39/0x50 [ 250.034152][ T37] ? ptrace_stop+0x6d6/0x8f0 [ 250.038791][ T37] ? __kasan_check_read+0x15/0x20 [ 250.043872][ T37] ksys_read+0x145/0x260 [ 250.048163][ T37] ? __cfi_ksys_read+0x10/0x10 [ 250.052998][ T37] ? __kasan_check_write+0x18/0x20 [ 250.058153][ T37] __x64_sys_read+0x7f/0x90 [ 250.062717][ T37] x64_sys_call+0x2638/0x2ee0 [ 250.067420][ T37] do_syscall_64+0x57/0xf0 [ 250.071920][ T37] ? clear_bhb_loop+0x50/0xa0 [ 250.076639][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.082613][ T37] RIP: 0033:0x7f159752a009 [ 250.087070][ T37] RSP: 002b:00007ffca1233878 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.095542][ T37] RAX: ffffffffffffffda RBX: 0067756265642f2e RCX: 00007f159752a009 [ 250.103575][ T37] RDX: 0000000000002020 RSI: 00002000000010c0 RDI: 0000000000000004 [ 250.111601][ T37] RBP: 0000000000000001 R08: 0000000000000006 R09: 0000000000000006 [ 250.119626][ T37] R10: 0000000000000006 R11: 0000000000000246 R12: 00007ffca12339e8 [ 250.127632][ T37] R13: 431bde82d7b634db R14: 00007f15975bdc40 R15: 0000000000000002 [ 250.135679][ T37] [ 250.138770][ T37] NMI backtrace for cpu 1 [ 250.138788][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 250.138819][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.138836][ T37] Call Trace: [ 250.138841][ T37] [ 250.138847][ T37] __dump_stack+0x21/0x30 [ 250.138876][ T37] dump_stack_lvl+0x140/0x1c0 [ 250.138921][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 250.138954][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 250.138982][ T37] dump_stack+0x19/0x20 [ 250.139005][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 250.139029][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 250.139073][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 250.139098][ T37] ? sched_show_task+0x380/0x540 [ 250.139134][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.139157][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.139180][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 250.139226][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 250.139262][ T37] cpumask_backtrace+0x1f/0x30 [ 250.139293][ T37] watchdog+0xe45/0xf90 [ 250.139326][ T37] ? __kasan_check_write+0x18/0x20 [ 250.139377][ T37] ? __cfi_watchdog+0x10/0x10 [ 250.139406][ T37] ? __kasan_check_read+0x15/0x20 [ 250.139439][ T37] ? __kthread_parkme+0x12f/0x180 [ 250.139457][ T37] ? schedule+0xc5/0x240 [ 250.139473][ T37] kthread+0x2c7/0x360 [ 250.139506][ T37] ? __cfi_watchdog+0x10/0x10 [ 250.139536][ T37] ? __cfi_kthread+0x10/0x10 [ 250.139562][ T37] ret_from_fork+0x67/0xa0 [ 250.139588][ T37] ? __cfi_kthread+0x10/0x10 [ 250.139608][ T37] ret_from_fork_asm+0x1a/0x30 [ 250.139625][ T37] [ 250.303878][ T37] Sending NMI from CPU 1 to CPUs 0: [ 250.309134][ C0] NMI backtrace for cpu 0 [ 250.309148][ C0] CPU: 0 UID: 0 PID: 92 Comm: syslogd Not tainted syzkaller #0 bcd0852b9269e5a174a9e289c8567167f3c3d1d7 [ 250.309169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 250.309180][ C0] RIP: 0010:__kasan_check_write+0x5/0x20 [ 250.309210][ C0] Code: 8b 4d 08 31 d2 e8 bb e4 ff ff 5d c3 cc cc cc cc cc 0f 1f 40 00 b8 98 19 26 dd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 88 e4 ff ff 5d e9 82 [ 250.309229][ C0] RSP: 0018:ffffc90000dcf778 EFLAGS: 00000297 [ 250.309245][ C0] RAX: ffffffff847ccf00 RBX: ffff88810b778b7c RCX: ffff88810cbba780 [ 250.309260][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88810b778b7c [ 250.309277][ C0] RBP: ffffc90000dcf7d0 R08: ffff88810b778a67 R09: 1ffff110216ef14c [ 250.309290][ C0] R10: dffffc0000000000 R11: ffffed10216ef14d R12: 0000000000000300 [ 250.309301][ C0] R13: 00000000000002ff R14: 1ffff110216ef14c R15: 0000000000000000 [ 250.309312][ C0] FS: 00007f0777676c80(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 250.309327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.309338][ C0] CR2: 000055557a850398 CR3: 000000010cb7a000 CR4: 00000000003526b0 [ 250.309354][ C0] Call Trace: [ 250.309359][ C0] [ 250.309366][ C0] ? sock_wfree+0x1a4/0x550 [ 250.309386][ C0] ? __cfi_unix_write_space+0x10/0x10 [ 250.309408][ C0] unix_wfree+0x163/0x1b0 [ 250.309427][ C0] ? __cfi_unix_wfree+0x10/0x10 [ 250.309446][ C0] ? scm_recv_unix+0x63f/0x850 [ 250.309463][ C0] ? __unix_dgram_recvmsg+0xe00/0xe00 [ 250.309480][ C0] skb_release_head_state+0x115/0x260 [ 250.309499][ C0] ? skb_free_datagram+0x19/0x30 [ 250.309517][ C0] __kfree_skb+0x29/0x210 [ 250.309533][ C0] ? skb_free_datagram+0x19/0x30 [ 250.309550][ C0] consume_skb+0x65/0x1a0 [ 250.309566][ C0] skb_free_datagram+0x19/0x30 [ 250.309583][ C0] __unix_dgram_recvmsg+0xa05/0xe00 [ 250.309602][ C0] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 250.309621][ C0] ? avc_has_perm+0x155/0x240 [ 250.309637][ C0] ? __cfi_avc_has_perm+0x10/0x10 [ 250.309652][ C0] unix_dgram_recvmsg+0xce/0xf0 [ 250.309672][ C0] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 250.309692][ C0] sock_recvmsg+0x185/0x1e0 [ 250.309707][ C0] sock_read_iter+0x247/0x320 [ 250.309730][ C0] ? __cfi_sock_read_iter+0x10/0x10 [ 250.309754][ C0] ? __kasan_check_write+0x18/0x20 [ 250.309777][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 250.309792][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 250.309807][ C0] vfs_read+0x60e/0xc70 [ 250.309831][ C0] ? __cfi_vfs_read+0x10/0x10 [ 250.309851][ C0] ? sched_clock+0x44/0x60 [ 250.309877][ C0] ? __kasan_check_read+0x15/0x20 [ 250.309898][ C0] ksys_read+0x145/0x260 [ 250.309920][ C0] ? xfd_validate_state+0x68/0x140 [ 250.309944][ C0] ? __cfi_ksys_read+0x10/0x10 [ 250.309966][ C0] ? __kasan_check_write+0x18/0x20 [ 250.309986][ C0] ? fpregs_restore_userregs+0x11c/0x260 [ 250.310008][ C0] __x64_sys_read+0x7f/0x90 [ 250.310030][ C0] x64_sys_call+0x2638/0x2ee0 [ 250.310048][ C0] do_syscall_64+0x57/0xf0 [ 250.310062][ C0] ? clear_bhb_loop+0x50/0xa0 [ 250.310082][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.310101][ C0] RIP: 0033:0x7f07777c6407 [ 250.310114][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 250.310127][ C0] RSP: 002b:00007fff9baab590 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 250.310143][ C0] RAX: ffffffffffffffda RBX: 00007f0777676c80 RCX: 00007f07777c6407 [ 250.310155][ C0] RDX: 00000000000000ff RSI: 00005586dd9dc300 RDI: 0000000000000000 [ 250.310166][ C0] RBP: 00005586dd9dc2c0 R08: 0000000000000000 R09: 0000000000000000 [ 250.310176][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005586dd9dc346 [ 250.310186][ C0] R13: 0000000000000000 R14: 00005586dd9dc300 R15: 00005586a349ad98 [ 250.310200][ C0] [ 250.310215][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.073 msecs