ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor3175993471

<...>
Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts.
execve("ci2-android-6-12-rust/syz-executor3175993471", ["ci2-android-6-12-rust/syz-executor3175993471"], 0x7ffe7aded2e0 /* 10 vars */) = 0
brk(NULL)                               = 0x555581553000
brk(0x555581553d40)                     = 0x555581553d40
arch_prctl(ARCH_SET_FS, 0x5555815533c0) = 0
set_tid_address(0x555581553690)         = 311
set_robust_list(0x5555815536a0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor3175993471", 4096) = 50
getrandom("\xb0\x1d\xb2\xe7\x9c\x93\x44\x09", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555581553d40
brk(0x555581574d40)                     = 0x555581574d40
brk(0x555581575000)                     = 0x555581575000
mprotect(0x7f2aacdad000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18)     = 18
executing program
futex(0x7f2aacdb3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x7f2aacd15710, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2aacd08000}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2aaccb0000
mprotect(0x7f2aaccb1000, 131072, PROT_READ|PROT_WRITE) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2aaccd0990, parent_tid=0x7f2aaccd0990, exit_signal=0, stack=0x7f2aaccb0000, stack_size=0x20300, tls=0x7f2aaccd06c0} => {parent_tid=[312]}, 88) = 312
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x7f2aacdb3b48, FUTEX_WAKE_PRIVATE, 1000000) = 0
futex(0x7f2aacdb3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-12-rust/strace-static-x86_64: Process 312 attached
 <unfinished ...>
[pid   312] set_robust_list(0x7f2aaccd09a0, 24) = 0
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] mkdir("./file0", 000)       = 0
[pid   312] futex(0x7f2aacdb3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   312] futex(0x7f2aacdb3b48, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f2aacdb3b48, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   311] <... futex resumed>)        = 1
[pid   312] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000 <unfinished ...>
[pid   311] futex(0x7f2aacdb3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... openat resumed>)       = 3
[pid   312] futex(0x7f2aacdb3b4c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f2aacdb3b48, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] futex(0x7f2aacdb3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... futex resumed>)        = 1
[pid   312] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=0000000000000000040000,user_id=00000000000000000000,group_id=00000000"...) = 0
[pid   312] futex(0x7f2aacdb3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   312] futex(0x7f2aacdb3b48, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f2aacdb3b48, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   312] <... futex resumed>)        = 0
[pid   312] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\xfd\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104
[pid   312] futex(0x7f2aacdb3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7f2aacdb3b48, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] futex(0x7f2aacdb3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable)
[pid   311] futex(0x7f2aacdb3b48, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   312] <... futex resumed>)        = 0
[pid   311] futex(0x7f2aacdb3b4c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[   33.109457][   T36] audit: type=1400 audit(1791325349.380:64): avc:  denied  { execmem } for  pid=311 comm="syz-executor317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   33.129391][   T36] audit: type=1400 audit(1791325349.380:65): avc:  denied  { read write } for  pid=311 comm="syz-executor317" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[pid   312] read(3 <unfinished ...>
[pid   311] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   311] futex(0x7f2aacdb3b5c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2aacc8f000
[pid   311] mprotect(0x7f2aacc90000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2aaccaf990, parent_tid=0x7f2aaccaf990, exit_signal=0, stack=0x7f2aacc8f000, stack_size=0x20300, tls=0x7f2aaccaf6c0}ci2-android-6-12-rust/strace-static-x86_64: Process 314 attached
 => {parent_tid=[314]}, 88) = 314
[pid   314] set_robust_list(0x7f2aaccaf9a0, 24 <unfinished ...>
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   314] <... set_robust_list resumed>) = 0
[pid   311] futex(0x7f2aacdb3b58, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] futex(0x7f2aacdb3b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   314] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x04\x00\x00\x00\x02\x00\x00\x00\x09\x00\x00\x00", 32) = 32
[pid   314] futex(0x7f2aacdb3b5c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   311] <... futex resumed>)        = 0
[pid   311] futex(0x7f2aacdb3b58, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] <... futex resumed>)        = 1
[pid   311] <... futex resumed>)        = 0
[pid   314] rename("./file0/../file0/file0", "./file0/../file0/file0" <unfinished ...>
[pid   311] futex(0x7f2aacdb3b5c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... read resumed>, "\x2e\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3a\x01\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46
[   33.153115][   T36] audit: type=1400 audit(1791325349.380:66): avc:  denied  { open } for  pid=311 comm="syz-executor317" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   33.176624][   T36] audit: type=1400 audit(1791325349.380:67): avc:  denied  { mounton } for  pid=311 comm="syz-executor317" path="/root/file0" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[pid   312] write(3, "\x90\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\xbf\x0d\x00\x00"..., 144) = 144
[pid   312] futex(0x7f2aacdb3b4c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   33.199377][   T36] audit: type=1400 audit(1791325349.400:68): avc:  denied  { mount } for  pid=311 comm="syz-executor317" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   33.207452][  T314] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[   33.234031][  T314] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   33.242444][  T314] CPU: 1 UID: 0 PID: 314 Comm: syz-executor317 Not tainted syzkaller #0 d3eed1e307a834e4006f99660f38f56e8d371643
[   33.254322][  T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[   33.264369][  T314] RIP: 0010:do_renameat2+0x409/0xc30
[   33.269661][  T314] Code: ff 48 89 c3 48 3d 01 f0 ff ff 72 0d e8 30 1d 98 ff 41 89 dc e9 7f 04 00 00 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 25 06 00 00 48 89 5c 24 08 8b 1b be
[   33.289260][  T314] RSP: 0018:ffffc9000125fd40 EFLAGS: 00010202
[   33.295340][  T314] RAX: dffffc0000000000 RBX: 0000000000000008 RCX: ffff88812302a600
[   33.303319][  T314] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811a9c7190
[   33.311293][  T314] RBP: ffffc9000125fee8 R08: ffff8881f6f50e47 R09: 1ffff1103edea1c8
[   33.319299][  T314] R10: dffffc0000000000 R11: ffffed103edea1c9 R12: 0000000000000000
[   33.327277][  T314] R13: 0000000000000001 R14: 1ffff9200024bfbc R15: 0000000000000001
[   33.335258][  T314] FS:  00007f2aaccaf6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   33.344272][  T314] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   33.350872][  T314] CR2: 00007f2aaccaebb0 CR3: 0000000130a70000 CR4: 00000000003526b0
[   33.358846][  T314] Call Trace:
[   33.362119][  T314]  <TASK>
[   33.365048][  T314]  ? __check_object_size+0x99/0x870
[   33.370254][  T314]  ? __cfi_do_renameat2+0x10/0x10
[   33.375282][  T314]  ? getname_flags+0x203/0x6b0
[   33.380058][  T314]  __x64_sys_rename+0x86/0xa0
[   33.384753][  T314]  x64_sys_call+0x150b/0x2ee0
[   33.389433][  T314]  do_syscall_64+0x57/0xf0
[   33.393858][  T314]  ? clear_bhb_loop+0x50/0xa0
[   33.398535][  T314]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   33.404433][  T314] RIP: 0033:0x7f2aacd02e79
[   33.408859][  T314] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[   33.428460][  T314] RSP: 002b:00007f2aaccaf218 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   33.436872][  T314] RAX: ffffffffffffffda RBX: 00007f2aacdb3b58 RCX: 00007f2aacd02e79
[   33.444839][  T314] RDX: 00007f2aacd02e79 RSI: 00002000000000c0 RDI: 0000200000000100
[   33.452804][  T314] RBP: 00007f2aacdb3b50 R08: 33203a6b63617473 R09: 33203a6b63617473
[   33.460785][  T314] R10: 33203a6b63617473 R11: 0000000000000246 R12: 00007f2aacd8141c
[   33.468753][  T314] R13: 0000200000006280 R14: 0000200000000100 R15: 00007fffa557fc98
[   33.476725][  T314]  </TASK>
[   33.479737][  T314] Modules linked in:
[   33.483777][  T314] ---[ end trace 0000000000000000 ]---
[   33.488402][   T36] audit: type=1400 audit(1791325349.750:69): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[pid   312] futex(0x7f2aacdb3b48, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   311] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[   33.490105][  T314] RIP: 0010:do_renameat2+0x409/0xc30
[   33.515985][   T36] audit: type=1400 audit(1791325349.750:70): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.516639][  T314] Code: ff 48 89 c3 48 3d 01 f0 ff ff 72 0d e8 30 1d 98 ff 41 89 dc e9 7f 04 00 00 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 25 06 00 00 48 89 5c 24 08 8b 1b be
[   33.538365][   T36] audit: type=1400 audit(1791325349.750:71): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.557451][  T314] RSP: 0018:ffffc9000125fd40 EFLAGS: 00010202
[   33.579656][   T36] audit: type=1400 audit(1791325349.750:72): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   33.584750][  T314] RAX: dffffc0000000000 RBX: 0000000000000008 RCX: ffff88812302a600
[   33.605917][   T36] audit: type=1400 audit(1791325349.750:73): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   33.613112][  T314] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88811a9c7190
[   33.641335][  T314] RBP: ffffc9000125fee8 R08: ffff8881f6f50e47 R09: 1ffff1103edea1c8
[   33.649354][  T314] R10: dffffc0000000000 R11: ffffed103edea1c9 R12: 0000000000000000
[   33.657349][  T314] R13: 0000000000000001 R14: 1ffff9200024bfbc R15: 0000000000000001
[   33.665391][  T314] FS:  00007f2aaccaf6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   33.674389][  T314] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   33.681021][  T314] CR2: 00007f2aaccaebb0 CR3: 0000000130a70000 CR4: 00000000003526b0
[   33.689031][  T314] Kernel panic - not syncing: Fatal exception
[   33.695229][  T314] Kernel Offset: disabled
[   33.699584][  T314] Rebooting in 86400 seconds..