ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor761601617
<...>
syzkaller
syzkaller login: [ 21.539931][ T36] kauditd_printk_skb: 31 callbacks suppressed
[ 21.539949][ T36] audit: type=1400 audit(1789752328.660:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 21.544894][ T36] audit: type=1400 audit(1789752328.660:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 21.549636][ T36] audit: type=1400 audit(1789752328.670:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[2808]" dev="pipefs" ino=2808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 21.553599][ T36] audit: type=1400 audit(1789752328.670:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 21.556661][ T36] audit: type=1400 audit(1789752328.670:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts.
execve("ci2-android-6-12-rust/syz-executor761601617", ["ci2-android-6-12-rust/syz-executor761601617"], 0x7fffd2dbd680 /* 10 vars */) = 0
brk(NULL) = 0x555562212000
brk(0x555562212d40) = 0x555562212d40
arch_prctl(ARCH_SET_FS, 0x5555622123c0) = 0
set_tid_address(0x555562212690) = 312
set_robust_list(0x5555622126a0, 24) = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor761601617", 4096) = 49
getrandom("\x1e\x57\x76\x97\xda\x75\x03\xf2", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555562212d40
brk(0x555562233d40) = 0x555562233d40
brk(0x555562234000) = 0x555562234000
mprotect(0x7fc09629f000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555562212690) = 313
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-12-rust/strace-static-x86_64: Process 313 attached
[pid 313] set_robust_list(0x5555622126a0, 24) = 0
[pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 313] setpgid(0, 0) = 0
[pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 313] write(3, "1000", 4) = 4
[pid 313] close(3) = 0
[pid 313] write(1, "executing program\n", 18) = 18
[pid 313] mkdirat(AT_FDCWD, "./sys", 0777) = 0
executing program
[pid 313] mount(NULL, "./sys", "sysfs", 0, NULL) = 0
[pid 313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid 313] openat(AT_FDCWD, "./sys/block/loop0/queue/scheduler", O_RDWR|O_CREAT, 0777) = 4
[pid 313] ioctl(3, LOOP_SET_FD, 4) = 0
[ 110.927225][ T36] audit: type=1400 audit(1789752418.040:64): avc: denied { execmem } for pid=312 comm="syz-executor761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 110.947071][ T36] audit: type=1400 audit(1789752418.050:65): avc: denied { mounton } for pid=313 comm="syz-executor761" path="/root/sys" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 110.951477][ T313] loop0: detected capacity change from 0 to 8
[pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4096) = 4096
[pid 313] exit_group(0) = ?
[ 110.971334][ T36] audit: type=1400 audit(1789752418.050:66): avc: denied { mount } for pid=313 comm="syz-executor761" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[ 110.998404][ T36] audit: type=1400 audit(1789752418.050:67): avc: denied { read write } for pid=313 comm="syz-executor761" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 111.022809][ T36] audit: type=1400 audit(1789752418.070:68): avc: denied { open } for pid=313 comm="syz-executor761" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 111.046928][ T36] audit: type=1400 audit(1789752418.070:69): avc: denied { ioctl } for pid=313 comm="syz-executor761" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 312] kill(-313, SIGKILL) = 0
[pid 312] kill(313, SIGKILL) = 0
[pid 312] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid 312] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
[pid 312] getdents64(3, 0x555562213760 /* 2 entries */, 32768) = 48
[pid 312] getdents64(3, 0x555562213760 /* 0 entries */, 32768) = 0
[pid 312] close(3) = 0
[ 249.907260][ T37] INFO: task kworker/u8:2:46 blocked for more than 122 seconds.
[ 249.915100][ T37] Not tainted syzkaller #0
[ 249.920890][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 249.929943][ T37] task:kworker/u8:2 state:D stack:0 pid:46 tgid:46 ppid:2 flags:0x00004000
[ 249.940382][ T37] Workqueue: loop0 loop_rootcg_workfn
[ 249.945859][ T37] Call Trace:
[ 249.949423][ T37]
[ 249.952394][ T37] __schedule+0x1496/0x20b0
[ 249.956955][ T37] ? __sched_text_start+0x10/0x10
[ 249.962407][ T37] ? __kasan_check_write+0x18/0x20
[ 249.967757][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 249.973258][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10
[ 249.979224][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160
[ 249.984726][ T37] ? kthread_data+0x54/0xc0
[ 249.989299][ T37] ? wq_worker_sleeping+0x68/0x260
[ 249.994484][ T37] schedule+0xc5/0x240
[ 249.998633][ T37] blk_mq_freeze_queue_wait+0xf3/0x180
[ 250.004156][ T37] ? __cfi_blk_mq_freeze_queue_wait+0x10/0x10
[ 250.010326][ T37] ? blk_mq_run_hw_queues+0x378/0x440
[ 250.015755][ T37] ? __cfi_autoremove_wake_function+0x10/0x10
[ 250.021904][ T37] ? __cfi_blk_mq_run_hw_queues+0x10/0x10
[ 250.027724][ T37] ? mutex_unlock+0x90/0x240
[ 250.032348][ T37] ? __cfi_mutex_unlock+0x10/0x10
[ 250.037460][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 250.043307][ T37] blk_freeze_queue+0xc7/0x100
[ 250.048167][ T37] blk_mq_freeze_queue+0x19/0x30
[ 250.053159][ T37] queue_attr_store+0x2c9/0x3d0
[ 250.058087][ T37] ? __cfi_queue_attr_store+0x10/0x10
[ 250.063507][ T37] ? _copy_from_iter+0x927/0x1520
[ 250.068643][ T37] ? __asan_memcpy+0x5a/0x80
[ 250.073359][ T37] ? _copy_from_iter+0x9f7/0x1520
[ 250.078480][ T37] ? __kasan_check_write+0x18/0x20
[ 250.083646][ T37] ? mutex_lock+0x97/0x1d0
[ 250.088163][ T37] ? __cfi_mutex_lock+0x10/0x10
[ 250.093067][ T37] ? __kmalloc_noprof+0x261/0x510
[ 250.098165][ T37] ? __cfi_queue_attr_store+0x10/0x10
[ 250.103596][ T37] sysfs_kf_write+0x13e/0x160
[ 250.108422][ T37] ? __cfi_sysfs_kf_write+0x10/0x10
[ 250.113666][ T37] kernfs_fop_write_iter+0x316/0x510
[ 250.119070][ T37] lo_rw_aio+0xd36/0x1020
[ 250.123449][ T37] ? dequeue_entity+0x88a/0x13b0
[ 250.128454][ T37] ? enqueue_timer+0x1c5/0x4b0
[ 250.133262][ T37] ? loop_process_work+0x12c0/0x12c0
[ 250.138639][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 250.144235][ T37] ? kthread_associate_blkcg+0x207/0x390
[ 250.149935][ T37] ? dequeue_entities+0x1d2/0x1370
[ 250.155087][ T37] loop_process_work+0x589/0x12c0
[ 250.160293][ T37] ? loop_workfn+0x70/0x70
[ 250.164779][ T37] ? __kasan_check_write+0x18/0x20
[ 250.170001][ T37] ? __switch_to+0xc6b/0x1320
[ 250.174729][ T37] ? __cfi___switch_to+0x10/0x10
[ 250.179782][ T37] ? kthread_data+0x54/0xc0
[ 250.184328][ T37] ? psi_task_switch+0x57e/0x9c0
[ 250.189370][ T37] ? _raw_spin_unlock+0x45/0x60
[ 250.194278][ T37] ? finish_task_switch+0x139/0x770
[ 250.199548][ T37] ? __schedule+0x149e/0x20b0
[ 250.204259][ T37] ? kick_pool+0xb9/0x540
[ 250.208663][ T37] loop_rootcg_workfn+0x26/0x40
[ 250.213564][ T37] process_scheduled_works+0x7f4/0x1060
[ 250.219176][ T37] worker_thread+0xc99/0x13f0
[ 250.223887][ T37] ? __cfi_set_cpus_allowed_ptr+0x10/0x10
[ 250.229779][ T37] ? __kasan_check_read+0x15/0x20
[ 250.234841][ T37] kthread+0x2c4/0x360
[ 250.238966][ T37] ? __cfi_worker_thread+0x10/0x10
[ 250.244109][ T37] ? __cfi_kthread+0x10/0x10
[ 250.248785][ T37] ret_from_fork+0x64/0xa0
[ 250.253249][ T37] ? __cfi_kthread+0x10/0x10
[ 250.257902][ T37] ret_from_fork_asm+0x1a/0x30
[ 250.262704][ T37]
[ 250.265747][ T37] INFO: task syz-executor761:313 blocked for more than 123 seconds.
[ 250.273770][ T37] Not tainted syzkaller #0
[ 250.278744][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 250.287500][ T37] task:syz-executor761 state:D stack:0 pid:313 tgid:313 ppid:312 flags:0x00004002
[ 250.297750][ T37] Call Trace:
[ 250.301076][ T37]
[ 250.304019][ T37] __schedule+0x1496/0x20b0
[ 250.308631][ T37] ? __sched_text_start+0x10/0x10
[ 250.313702][ T37] ? blk_mq_flush_plug_list+0x155c/0x1750
[ 250.319494][ T37] ? filemap_get_folios_tag+0x61c/0x760
[ 250.325083][ T37] ? __kasan_check_write+0x18/0x20
[ 250.330266][ T37] schedule+0xc5/0x240
[ 250.334371][ T37] io_schedule+0x85/0x150
[ 250.338806][ T37] ? folio_wait_bit_common+0x69f/0x940
[ 250.344318][ T37] folio_wait_bit_common+0x6a4/0x940
[ 250.349685][ T37] ? folio_wait_bit+0x50/0x50
[ 250.354405][ T37] ? __cfi_wake_page_function+0x10/0x10
[ 250.360041][ T37] ? filemap_get_folios_tag+0x61c/0x760
[ 250.365652][ T37] ? __cfi_filemap_get_folios_tag+0x10/0x10
[ 250.371632][ T37] folio_wait_bit+0x29/0x50
[ 250.376185][ T37] folio_wait_writeback+0x90/0x1c0
[ 250.381412][ T37] __filemap_fdatawait_range+0x185/0x290
[ 250.387152][ T37] ? filemap_fdatawait_range+0x50/0x50
[ 250.392648][ T37] ? filemap_fdatawrite_wbc+0x137/0x190
[ 250.398302][ T37] filemap_write_and_wait_range+0x205/0x2a0
[ 250.404344][ T37] ? __cfi_filemap_write_and_wait_range+0x10/0x10
[ 250.410840][ T37] ? _raw_spin_lock+0x92/0x120
[ 250.415677][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 250.421901][ T37] bdev_release+0x199/0x700
[ 250.426473][ T37] ? __cfi_blkdev_release+0x10/0x10
[ 250.431773][ T37] blkdev_release+0x19/0x30
[ 250.436333][ T37] __fput+0x20b/0xa30
[ 250.440472][ T37] ____fput+0x20/0x30
[ 250.444522][ T37] task_work_run+0x1e5/0x260
[ 250.449200][ T37] ? __cfi_task_work_run+0x10/0x10
[ 250.454352][ T37] ? __kasan_check_write+0x18/0x20
[ 250.459541][ T37] do_exit+0xa46/0x2850
[ 250.463761][ T37] ? ptrace_stop+0x6d6/0x8f0
[ 250.468413][ T37] ? __cfi_do_exit+0x10/0x10
[ 250.473044][ T37] ? __kasan_check_write+0x18/0x20
[ 250.478206][ T37] ? _raw_spin_lock_irq+0x93/0x120
[ 250.483349][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 250.488952][ T37] ? __kasan_check_write+0x18/0x20
[ 250.494105][ T37] ? zap_other_threads+0x32f/0x370
[ 250.499289][ T37] do_group_exit+0x21f/0x2f0
[ 250.503925][ T37] __x64_sys_exit_group+0x43/0x50
[ 250.509036][ T37] x64_sys_call+0x2ed2/0x2ee0
[ 250.513763][ T37] do_syscall_64+0x57/0xf0
[ 250.518239][ T37] ? clear_bhb_loop+0x50/0xa0
[ 250.522965][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 250.528920][ T37] RIP: 0033:0x7fc09620b8e5
[ 250.533377][ T37] RSP: 002b:00007ffc891d8638 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[ 250.541853][ T37] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc09620b8e5
[ 250.549875][ T37] RDX: 00000000000000e7 RSI: ffffffffffffffd8 RDI: 0000000000000000
[ 250.557918][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000006
[ 250.565920][ T37] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000000000000
[ 250.573961][ T37] R13: 00007fc0962a4110 R14: 00007fc0962a63a8 R15: 00007fc0962a63c0
[ 250.582002][ T37]
[ 250.585046][ T37] NMI backtrace for cpu 0
[ 250.585060][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1
[ 250.585083][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 250.585092][ T37] Call Trace:
[ 250.585098][ T37]
[ 250.585104][ T37] __dump_stack+0x21/0x30
[ 250.585131][ T37] dump_stack_lvl+0x140/0x1c0
[ 250.585153][ T37] ? __cfi_dump_stack_lvl+0x10/0x10
[ 250.585177][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70
[ 250.585195][ T37] dump_stack+0x19/0x20
[ 250.585216][ T37] nmi_cpu_backtrace+0x2ba/0x2d0
[ 250.585230][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10
[ 250.585244][ T37] ? rcu_read_unlock_special+0x150/0x420
[ 250.585268][ T37] ? sched_show_task+0x371/0x530
[ 250.585290][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[ 250.585313][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[ 250.585340][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0
[ 250.585355][ T37] arch_trigger_cpumask_backtrace+0x14/0x20
[ 250.585377][ T37] cpumask_backtrace+0x1f/0x30
[ 250.585390][ T37] watchdog+0xe45/0xf90
[ 250.585406][ T37] ? __kasan_check_write+0x18/0x20
[ 250.585425][ T37] ? __cfi_watchdog+0x10/0x10
[ 250.585441][ T37] ? __kasan_check_read+0x15/0x20
[ 250.585456][ T37] ? __kthread_parkme+0x12f/0x180
[ 250.585472][ T37] ? schedule+0xc5/0x240
[ 250.585489][ T37] kthread+0x2c4/0x360
[ 250.585506][ T37] ? __cfi_watchdog+0x10/0x10
[ 250.585522][ T37] ? __cfi_kthread+0x10/0x10
[ 250.585539][ T37] ret_from_fork+0x64/0xa0
[ 250.585562][ T37] ? __cfi_kthread+0x10/0x10
[ 250.585580][ T37] ret_from_fork_asm+0x1a/0x30
[ 250.585596][ T37]
[ 250.585601][ T37] Sending NMI from CPU 0 to CPUs 1:
[ 250.755239][ C1] NMI backtrace for cpu 1
[ 250.755253][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 249ace596eef83e7ab94f4ef92c49a820648daf1
[ 250.755274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 250.755284][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 250.755314][ C1] Code: cc cc cc cc cc cc cc b8 40 cd bf 8e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 07 42 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
[ 250.755328][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2
[ 250.755345][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366b900 RCX: ffffffff85a5553d
[ 250.755358][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000025e9c
[ 250.755369][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd
[ 250.755381][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000
[ 250.755393][ C1] R13: 1ffff110206cd720 R14: dffffc0000000000 R15: ffffffff87ece328
[ 250.755406][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 250.755419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 250.755431][ C1] CR2: 00000000004644b0 CR3: 000000010b3c4000 CR4: 00000000003526b0
[ 250.755447][ C1] Call Trace:
[ 250.755454][ C1]
[ 250.755462][ C1] default_idle+0x17/0x30
[ 250.755487][ C1] arch_cpu_idle+0xd/0x20
[ 250.755509][ C1] default_idle_call+0x3e/0x80
[ 250.755533][ C1] do_idle+0x1df/0x570
[ 250.755552][ C1] ? idle_inject_timer_fn+0x80/0x80
[ 250.755573][ C1] cpu_startup_entry+0x47/0x60
[ 250.755591][ C1] start_secondary+0x12e/0x140
[ 250.755614][ C1] common_startup_64+0x13b/0x157
[ 250.755640][ C1]