ci2-android-5-10-perf/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-10-perf/syz-executor2163435557 <...> Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. execve("ci2-android-5-10-perf/syz-executor2163435557", ["ci2-android-5-10-perf/syz-executor2163435557"], 0x7ffeb5b3f920 /* 10 vars */) = 0 brk(NULL) = 0x555591fa0000 brk(0x555591fa0d40) = 0x555591fa0d40 arch_prctl(ARCH_SET_FS, 0x555591fa03c0) = 0 set_tid_address(0x555591fa0690) = 297 set_robust_list(0x555591fa06a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-10-perf/syz-executor2163435557", 4096) = 50 getrandom("\xac\x6a\xab\xf4\x76\x17\x67\x09", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555591fa0d40 brk(0x555591fc1d40) = 0x555591fc1d40 brk(0x555591fc2000) = 0x555591fc2000 mprotect(0x7f91af0d9000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-10-perf/strace-static-x86_64: Process 298 attached , child_tidptr=0x555591fa0690) = 298 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] set_robust_list(0x555591fa06a0, 24) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] setpgid(0, 0) = 0 [pid 298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "1000", 4) = 4 [pid 298] close(3) = 0 [pid 298] write(1, "executing program\n", 18) = 18 [pid 298] perf_event_open(NULL, 0, -1, -1, 0) = -1 EFAULT (Bad address) executing program [pid 298] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 298] write(3, "18", 2) = 2 [ 21.281052][ T24] audit: type=1400 audit(1792566899.159:64): avc: denied { execmem } for pid=297 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.306126][ T24] audit: type=1400 audit(1792566899.189:65): avc: denied { bpf } for pid=298 comm="syz-executor216" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 21.306143][ T298] FAULT_INJECTION: forcing a failure. [ 21.306143][ T298] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 21.339962][ T298] CPU: 0 PID: 298 Comm: syz-executor216 Not tainted syzkaller #0 [ 21.347680][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 21.357723][ T298] Call Trace: [ 21.361017][ T298] __dump_stack+0x21/0x24 [ 21.365322][ T298] dump_stack_lvl+0x1a7/0x208 [ 21.369979][ T298] ? thaw_kernel_threads+0x220/0x220 [ 21.375236][ T298] ? show_regs_print_info+0x18/0x18 [ 21.380428][ T298] ? vsnprintf+0x14e/0x1990 [ 21.384922][ T298] ? memcpy+0x56/0x70 [ 21.388878][ T298] dump_stack+0x15/0x1c [ 21.393007][ T298] should_fail+0x3ab/0x500 [ 21.397397][ T298] should_fail_usercopy+0x1a/0x20 [ 21.402395][ T298] _copy_to_user+0x20/0x90 [ 21.406790][ T298] bpf_verifier_vlog+0x1b4/0x330 [ 21.411704][ T298] __btf_verifier_log+0xdf/0x130 [ 21.416621][ T298] ? btf_check_sec_info+0x350/0x350 [ 21.421805][ T298] ? btf_parse_hdr+0x1df/0x7c0 [ 21.426544][ T298] ? memcpy+0x56/0x70 [ 21.430517][ T298] btf_parse_hdr+0x3eb/0x7c0 [ 21.435105][ T298] btf_new_fd+0x4ac/0xa00 [ 21.439408][ T298] bpf_btf_load+0x5e/0x70 [ 21.443723][ T298] __se_sys_bpf+0x4ea/0x740 [ 21.448206][ T298] ? __x64_sys_bpf+0x90/0x90 [ 21.452772][ T298] ? ptrace_notify+0x1ea/0x270 [ 21.457524][ T298] __x64_sys_bpf+0x7b/0x90 [ 21.461929][ T298] do_syscall_64+0x31/0x40 [ 21.466330][ T298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.472199][ T298] RIP: 0033:0x7f91af04da49 [ 21.476589][ T298] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 21.496260][ T298] RSP: 002b:00007ffca6ac69e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 21.504656][ T298] RAX: ffffffffffffffda RBX: 00007ffca6ac6a00 RCX: 00007f91af04da49 [ 21.512606][ T298] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 21.520553][ T298] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000009 [pid 298] bpf(BPF_BTF_LOAD, {btf="\x9f\xeb\x01\x00\x18\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x0c\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00", btf_log_buf=0x200000000700, btf_size=38, btf_log_size=196, btf_log_level=1, btf_log_true_size=0, btf_flags=0, btf_token_fd=0}, 40) = 4 [pid 298] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE, key_size=8, value_size=4, max_entries=0, map_flags=0, inner_map_fd=1, map_name="", map_ifindex=0, btf_fd=4, btf_key_type_id=0, btf_value_type_id=1, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 298] exit_group(0) = ? [pid 298] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555591fa0690) = 299 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 executing program ci2-android-5-10-perf/strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x555591fa06a0, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] write(1, "executing program\n", 18) = 18 [pid 299] perf_event_open(NULL, 0, -1, -1, 0) = -1 EFAULT (Bad address) [pid 299] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 299] write(3, "18", 2) = 2 [ 21.528512][ T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 21.536460][ T298] R13: 0000000000000000 R14: 00007f91af0d9c00 R15: 0000000000000002 [ 21.545824][ T24] audit: type=1400 audit(1792566899.429:66): avc: denied { map_create } for pid=298 comm="syz-executor216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 21.553159][ T299] FAULT_INJECTION: forcing a failure. [ 21.553159][ T299] name failslab, interval 1, probability 0, space 0, times 1 [ 21.577872][ T299] CPU: 0 PID: 299 Comm: syz-executor216 Not tainted syzkaller #0 [ 21.585561][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 21.595596][ T299] Call Trace: [ 21.598871][ T299] __dump_stack+0x21/0x24 [ 21.603177][ T299] dump_stack_lvl+0x1a7/0x208 [ 21.607833][ T299] ? thaw_kernel_threads+0x220/0x220 [ 21.613095][ T299] ? show_regs_print_info+0x18/0x18 [ 21.618285][ T299] ? __btf_verifier_log_type+0x4d9/0x660 [ 21.623893][ T299] dump_stack+0x15/0x1c [ 21.628025][ T299] should_fail+0x3ab/0x500 [ 21.632417][ T299] ? kvmalloc_node+0x88/0x130 [ 21.637079][ T299] __should_failslab+0xa4/0xe0 [ 21.641842][ T299] should_failslab+0x9/0x20 [ 21.646335][ T299] __kmalloc+0x60/0x330 [ 21.650505][ T299] kvmalloc_node+0x88/0x130 [ 21.654995][ T299] btf_check_all_metas+0x343/0x820 [ 21.660089][ T299] btf_parse_type_sec+0xea/0x1570 [ 21.665089][ T299] ? btf_verifier_log+0x2b0/0x2b0 [ 21.670094][ T299] ? btf_parse_hdr+0x1df/0x7c0 [ 21.674859][ T299] ? memcpy+0x56/0x70 [ 21.678821][ T299] ? btf_parse_hdr+0x5e2/0x7c0 [ 21.683580][ T299] ? btf_parse_str_sec+0x1aa/0x260 [ 21.688666][ T299] btf_new_fd+0x55b/0xa00 [ 21.692970][ T299] bpf_btf_load+0x5e/0x70 [ 21.697282][ T299] __se_sys_bpf+0x4ea/0x740 [ 21.701758][ T299] ? __x64_sys_bpf+0x90/0x90 [ 21.706325][ T299] ? ptrace_notify+0x1ea/0x270 [ 21.711078][ T299] __x64_sys_bpf+0x7b/0x90 [ 21.715469][ T299] do_syscall_64+0x31/0x40 [ 21.719888][ T299] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.725753][ T299] RIP: 0033:0x7f91af04da49 [ 21.730143][ T299] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 21.749732][ T299] RSP: 002b:00007ffca6ac69e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 21.758135][ T299] RAX: ffffffffffffffda RBX: 00007ffca6ac6a00 RCX: 00007f91af04da49 [ 21.766104][ T299] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 21.774053][ T299] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000009 [pid 299] bpf(BPF_BTF_LOAD, {btf="\x9f\xeb\x01\x00\x18\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x0c\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00", btf_log_buf=0x200000000700, btf_size=38, btf_log_size=196, btf_log_level=1, btf_log_true_size=0, btf_flags=0, btf_token_fd=0}, 40) = 4 [ 21.782004][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 21.789957][ T299] R13: 0000000000000000 R14: 00007f91af0d9c00 R15: 0000000000000002 [ 21.799164][ T299] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 21.810962][ T299] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 21.819490][ T299] CPU: 1 PID: 299 Comm: syz-executor216 Not tainted syzkaller #0 [ 21.827181][ T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 21.837239][ T299] RIP: 0010:btf_type_by_id+0x80/0xc0 [ 21.842498][ T299] Code: 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 71 77 22 00 45 89 f6 49 c1 e6 03 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 51 77 22 00 49 8b 06 5b 41 5c 41 [ 21.862096][ T299] RSP: 0018:ffffc90000b17c30 EFLAGS: 00010246 [ 21.868163][ T299] RAX: 0000000000000000 RBX: ffff8881085b5708 RCX: ffff888100dba800 [ 21.876116][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 21.884062][ T299] RBP: ffffc90000b17c50 R08: ffff8881085b5757 R09: 1ffff110210b6aea [ 21.892011][ T299] R10: dffffc0000000000 R11: ffffed10210b6aeb R12: dffffc0000000000 [ 21.899960][ T299] R13: 1ffff92000162f94 R14: 0000000000000000 R15: 0000000000000000 [ 21.907921][ T299] FS: 0000555591fa03c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.916847][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.923406][ T299] CR2: 000000002a251878 CR3: 0000000100d97000 CR4: 00000000003506a0 [ 21.931389][ T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.939336][ T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.947280][ T299] Call Trace: [ 21.950545][ T299] map_check_btf+0x14c/0x580 [ 21.955132][ T299] ? bpf_map_init_from_attr+0x146/0x350 [ 21.960651][ T299] ? bpf_prog_bind_map+0x660/0x660 [ 21.965740][ T299] ? __kasan_check_read+0x11/0x20 [ 21.970734][ T299] ? __kasan_check_write+0x14/0x20 [ 21.975815][ T299] ? btf_get_by_fd+0x11a/0x170 [ 21.980558][ T299] map_create+0x14f7/0x1f50 [ 21.985049][ T299] __se_sys_bpf+0x24b/0x740 [ 21.989525][ T299] ? __x64_sys_bpf+0x90/0x90 [ 21.994086][ T299] ? ptrace_notify+0x1ea/0x270 [ 21.998836][ T299] __x64_sys_bpf+0x7b/0x90 [ 22.003230][ T299] do_syscall_64+0x31/0x40 [ 22.007619][ T299] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.013483][ T299] RIP: 0033:0x7f91af04da49 [ 22.017958][ T299] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 22.037540][ T299] RSP: 002b:00007ffca6ac69e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 22.045948][ T299] RAX: ffffffffffffffda RBX: 00007ffca6ac6a00 RCX: 00007f91af04da49 [ 22.053897][ T299] RDX: 0000000000000048 RSI: 0000200000000800 RDI: 0000000000000000 [ 22.061843][ T299] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000009 [ 22.069790][ T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 22.077736][ T299] R13: 0000000000000000 R14: 00007f91af0d9c00 R15: 0000000000000002 [ 22.085681][ T299] Modules linked in: [ 22.089649][ T299] ---[ end trace 8e9dec217e62ff1b ]--- [ 22.091228][ T24] audit: type=1400 audit(1792566899.969:67): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.095167][ T299] RIP: 0010:btf_type_by_id+0x80/0xc0 [ 22.116768][ T24] audit: type=1400 audit(1792566899.969:68): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.122599][ T299] Code: 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 71 77 22 00 45 89 f6 49 c1 e6 03 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 51 77 22 00 49 8b 06 5b 41 5c 41 [ 22.143544][ T24] audit: type=1400 audit(1792566899.969:69): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.163446][ T299] RSP: 0018:ffffc90000b17c30 EFLAGS: 00010246 [ 22.184516][ T24] audit: type=1400 audit(1792566899.969:70): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.190675][ T299] RAX: 0000000000000000 RBX: ffff8881085b5708 RCX: ffff888100dba800 [ 22.211135][ T24] audit: type=1400 audit(1792566899.969:71): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 22.219148][ T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 22.239404][ T24] audit: type=1400 audit(1792566899.969:72): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 22.247439][ T299] RBP: ffffc90000b17c50 R08: ffff8881085b5757 R09: 1ffff110210b6aea [ 22.270137][ T24] audit: type=1400 audit(1792566899.969:73): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 22.278118][ T299] R10: dffffc0000000000 R11: ffffed10210b6aeb R12: dffffc0000000000 [ 22.308417][ T299] R13: 1ffff92000162f94 R14: 0000000000000000 R15: 0000000000000000 [ 22.316553][ T299] FS: 0000555591fa03c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.325521][ T299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.332130][ T299] CR2: 00002000000000c0 CR3: 0000000100d97000 CR4: 00000000003506b0 [ 22.340123][ T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.348097][ T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.356069][ T299] Kernel panic - not syncing: Fatal exception [ 22.362360][ T299] Kernel Offset: disabled [ 22.366673][ T299] Rebooting in 86400 seconds..