ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor2193853424 <...> syzkaller syzkaller login: [ 21.900562][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 21.900581][ T36] audit: type=1400 audit(1791395848.520:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.905571][ T36] audit: type=1400 audit(1791395848.520:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.908945][ T36] audit: type=1400 audit(1791395848.530:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[2891]" dev="pipefs" ino=2891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.912597][ T36] audit: type=1400 audit(1791395848.530:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.915718][ T36] audit: type=1400 audit(1791395848.530:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor2193853424", ["ci2-android-6-12-rust/syz-executor2193853424"], 0x7ffeb7217c20 /* 10 vars */) = 0 brk(NULL) = 0x5555688aa000 brk(0x5555688aad40) = 0x5555688aad40 arch_prctl(ARCH_SET_FS, 0x5555688aa3c0) = 0 set_tid_address(0x5555688aa690) = 312 set_robust_list(0x5555688aa6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor2193853424", 4096) = 50 getrandom("\xd2\xb6\x6f\x1f\x7e\xfb\x9f\xa6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555688aad40 brk(0x5555688cbd40) = 0x5555688cbd40 brk(0x5555688cc000) = 0x5555688cc000 mprotect(0x7f9b49339000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x5555688aa6a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] rt_sigaction(SIGRT_1, {sa_handler=0x7f9b492a1f90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9b49294260}, NULL, 8) = 0 [pid 313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 executing program [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9b4923b000 [pid 313] mprotect(0x7f9b4923c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9b4925b990, parent_tid=0x7f9b4925b990, exit_signal=0, stack=0x7f9b4923b000, stack_size=0x20300, tls=0x7f9b4925b6c0} => {parent_tid=[314]}, 88) = 314 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] futex(0x7f9b4933fb48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 312] <... clone resumed>, child_tidptr=0x5555688aa690) = 313 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x7f9b4925b9a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 [pid 314] futex(0x7f9b4933fb4c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 313] <... futex resumed>) = 0 [pid 314] futex(0x7f9b4933fb48, FUTEX_WAIT_PRIVATE, 0, NULL [pid 313] futex(0x7f9b4933fb48, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] bind(3, {sa_family=AF_INET6, sin6_port=htons(20002), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "::", &sin6_addr), sin6_scope_id=0}, 28) = 0 [pid 314] futex(0x7f9b4933fb4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 313] futex(0x7f9b4933fb48, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 314] <... futex resumed>) = 1 [pid 314] listen(3, 0) = 0 [pid 314] futex(0x7f9b4933fb4c, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 1 [pid 313] futex(0x7f9b4933fb48, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] mount("127.0.0.1", ".", "9p", MS_SYNCHRONOUS|MS_SILENT, "trans=tcp,port=0x0000000000004e22," [pid 313] <... futex resumed>) = 0 [ 137.302613][ T36] audit: type=1400 audit(1791395963.920:64): avc: denied { execmem } for pid=312 comm="syz-executor219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.327204][ T36] audit: type=1400 audit(1791395963.950:65): avc: denied { name_bind } for pid=313 comm="syz-executor219" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 313] futex(0x7f9b4933fb4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 313] futex(0x7f9b4933fb5c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9b4921a000 [pid 313] mprotect(0x7f9b4921b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f9b4923a990, parent_tid=0x7f9b4923a990, exit_signal=0, stack=0x7f9b4921a000, stack_size=0x20300, tls=0x7f9b4923a6c0} => {parent_tid=[315]}, 88) = 315 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] futex(0x7f9b4933fb58, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7f9b4933fb5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-12-rust/strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x7f9b4923a9a0, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=1, filter=0x200000000000}) = 0 [pid 315] futex(0x7f9b4933fb5c, FUTEX_WAKE_PRIVATE, 1000000) = 202 [ 137.349200][ T36] audit: type=1400 audit(1791395963.950:66): avc: denied { node_bind } for pid=313 comm="syz-executor219" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 137.370368][ T36] audit: type=1400 audit(1791395963.950:67): avc: denied { mounton } for pid=313 comm="syz-executor219" path="/root" dev="sda1" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1 [ 137.393648][ T36] audit: type=1326 audit(1791395964.010:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=313 comm="syz-executor219" exe="/root/ci2-android-6-12-rust/syz-executor2193853424" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4928f0a9 code=0x7fbf0000 [pid 312] kill(-313, SIGKILL) = 0 [pid 312] kill(313, SIGKILL) = 0 [pid 312] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 312] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 312] getdents64(3, 0x5555688ab760 /* 2 entries */, 32768) = 48 [pid 312] getdents64(3, 0x5555688ab760 /* 0 entries */, 32768) = 0 [pid 312] close(3) = 0 [ 367.573291][ T37] INFO: task syz-executor219:315 blocked for more than 122 seconds. [ 367.582059][ T37] Not tainted syzkaller #0 [ 367.587104][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.595922][ T37] task:syz-executor219 state:D stack:0 pid:315 tgid:313 ppid:312 flags:0x00004004 [ 367.606437][ T37] Call Trace: [ 367.609742][ T37] [ 367.612687][ T37] __schedule+0x1496/0x20b0 [ 367.617661][ T37] ? __sched_text_start+0x10/0x10 [ 367.622748][ T37] ? _raw_spin_unlock+0x45/0x60 [ 367.627908][ T37] ? finish_task_switch+0x139/0x770 [ 367.633280][ T37] ? __schedule+0x149e/0x20b0 [ 367.637977][ T37] schedule+0xc5/0x240 [ 367.642070][ T37] schedule_timeout+0xc7/0x3b0 [ 367.646972][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 367.652373][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 367.657982][ T37] ? activate_task+0x43b/0x480 [ 367.662789][ T37] wait_for_common+0x368/0x650 [ 367.667705][ T37] ? wait_for_completion+0x40/0x40 [ 367.672929][ T37] ? preempt_schedule_thunk+0x1a/0x40 [ 367.678546][ T37] wait_for_completion_state+0x19/0x40 [ 367.684287][ T37] do_coredump+0x885/0x3050 [ 367.689025][ T37] ? stack_depot_save_flags+0x399/0x800 [ 367.694962][ T37] ? kasan_save_track+0x4f/0x80 [ 367.700156][ T37] ? kasan_save_track+0x3e/0x80 [ 367.705186][ T37] ? kasan_save_free_info+0x44/0x50 [ 367.710564][ T37] ? __kasan_slab_free+0x5f/0x80 [ 367.715579][ T37] ? __cfi_do_coredump+0x10/0x10 [ 367.720561][ T37] ? __kasan_slab_free+0x6a/0x80 [ 367.725646][ T37] ? get_signal+0xa2a/0x1490 [ 367.730375][ T37] get_signal+0x11bf/0x1490 [ 367.735027][ T37] arch_do_signal_or_restart+0xbc/0x700 [ 367.740936][ T37] ? __cfi_ptrace_notify+0x10/0x10 [ 367.746233][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 367.752593][ T37] ? syscall_exit_work+0x84/0x150 [ 367.757851][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 367.763490][ T37] do_syscall_64+0x63/0xf0 [ 367.767939][ T37] ? clear_bhb_loop+0x50/0xa0 [ 367.772728][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 367.778848][ T37] RIP: 0033:0x7f9b4928f0a9 [ 367.783399][ T37] RSP: 002b:00007f9b4923a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.791956][ T37] RAX: 00000000000000ca RBX: 00007f9b4933fb58 RCX: 00007f9b4928f0a9 [ 367.800287][ T37] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b4933fb5c [ 367.808435][ T37] RBP: 00007f9b4933fb50 R08: 33203a6b63617473 R09: 33203a6b63617473 [ 367.816516][ T37] R10: 00007f9b4923a6c0 R11: 0000000000000246 R12: 00007f9b49311378 [ 367.824551][ T37] R13: 0000200000000000 R14: 0000200000000088 R15: 0000200000000080 [ 367.832537][ T37] [ 367.835662][ T37] NMI backtrace for cpu 1 [ 367.835698][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 3f424599d4802b62f20079dc0d4853db74227763 [ 367.835755][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 367.835767][ T37] Call Trace: [ 367.835774][ T37] [ 367.835782][ T37] __dump_stack+0x21/0x30 [ 367.835845][ T37] dump_stack_lvl+0x140/0x1c0 [ 367.835873][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 367.835902][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 367.835928][ T37] dump_stack+0x19/0x20 [ 367.835956][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 367.836032][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 367.836053][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 367.836130][ T37] ? sched_show_task+0x371/0x530 [ 367.836178][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.836275][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.836304][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 367.836328][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 367.836357][ T37] cpumask_backtrace+0x1f/0x30 [ 367.836378][ T37] watchdog+0xe45/0xf90 [ 367.836454][ T37] ? __kasan_check_write+0x18/0x20 [ 367.836492][ T37] ? __cfi_watchdog+0x10/0x10 [ 367.836514][ T37] ? __kasan_check_read+0x15/0x20 [ 367.836534][ T37] ? __kthread_parkme+0x12f/0x180 [ 367.836586][ T37] ? schedule+0xc5/0x240 [ 367.836610][ T37] kthread+0x2c7/0x360 [ 367.836632][ T37] ? __cfi_watchdog+0x10/0x10 [ 367.836654][ T37] ? __cfi_kthread+0x10/0x10 [ 367.836676][ T37] ret_from_fork+0x67/0xa0 [ 367.836744][ T37] ? __cfi_kthread+0x10/0x10 [ 367.836768][ T37] ret_from_fork_asm+0x1a/0x30 [ 367.836790][ T37] [ 367.836799][ T37] Sending NMI from CPU 1 to CPUs 0: [ 368.009298][ C0] NMI backtrace for cpu 0 [ 368.009346][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 3f424599d4802b62f20079dc0d4853db74227763 [ 368.009368][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 368.009378][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 368.009417][ C0] Code: cc cc cc cc cc cc cc b8 67 e7 89 d8 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 c7 41 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 368.009431][ C0] RSP: 0018:ffffffff87407da0 EFLAGS: 000002c2 [ 368.009448][ C0] RAX: ffff8881f6e00000 RBX: ffffffff874156c0 RCX: ffffffff85a5953d [ 368.009461][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000026c94 [ 368.009473][ C0] RBP: ffffffff87407da0 R08: ffff8881f6e395eb R09: 1ffff1103edc72bd [ 368.009485][ C0] R10: dffffc0000000000 R11: ffffed103edc72be R12: 0000000000000000 [ 368.009497][ C0] R13: 1ffffffff0e82ad8 R14: dffffc0000000000 R15: ffffffff87ed0928 [ 368.009510][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 368.009524][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.009536][ C0] CR2: 00005555688aa390 CR3: 000000010cb78000 CR4: 00000000003526b0 [ 368.009553][ C0] Call Trace: [ 368.009559][ C0] [ 368.009567][ C0] default_idle+0x17/0x30 [ 368.009584][ C0] arch_cpu_idle+0xd/0x20 [ 368.009599][ C0] default_idle_call+0x3e/0x80 [ 368.009613][ C0] do_idle+0x1df/0x570 [ 368.009659][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 368.009677][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 368.009695][ C0] ? radix_tree_lookup+0x250/0x2a0 [ 368.009714][ C0] cpu_startup_entry+0x47/0x60 [ 368.009731][ C0] rest_init+0x10b/0x130 [ 368.009747][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 368.009848][ C0] start_kernel+0x462/0x4bb [ 368.009873][ C0] x86_64_start_reservations+0x2e/0x30 [ 368.009895][ C0] x86_64_start_kernel+0x6a/0x7b [ 368.009916][ C0] common_startup_64+0x13b/0x157 [ 368.009962][ C0]