ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor765472646 <...> Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor765472646", ["ci2-android-6-12-rust/syz-executor765472646"], 0x7ffc50aa0f30 /* 10 vars */) = 0 brk(NULL) = 0x55556d8c5000 brk(0x55556d8c5d40) = 0x55556d8c5d40 arch_prctl(ARCH_SET_FS, 0x55556d8c53c0) = 0 set_tid_address(0x55556d8c5690) = 312 set_robust_list(0x55556d8c56a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor765472646", 4096) = 49 getrandom("\x0d\xc0\x0a\xaa\x37\x0e\x7b\x5d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556d8c5d40 brk(0x55556d8e6d40) = 0x55556d8e6d40 brk(0x55556d8e7000) = 0x55556d8e7000 mprotect(0x7ffaa9bbf000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556d8c5690) = 313 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55556d8c56a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] mkdirat(AT_FDCWD, "./debug", 0777) = 0 [pid 313] mount(NULL, "./debug", "debugfs", 0, NULL) = 0 [pid 313] openat(AT_FDCWD, "./debug/tracing/events/sched/sched_switch/enable", O_WRONLY) = 3 executing program [ 29.441010][ T36] audit: type=1400 audit(1785785690.779:64): avc: denied { execmem } for pid=312 comm="syz-executor765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 29.460538][ T36] audit: type=1400 audit(1785785690.789:65): avc: denied { mounton } for pid=313 comm="syz-executor765" path="/root/debug" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.483501][ T36] audit: type=1400 audit(1785785690.789:66): avc: denied { mount } for pid=313 comm="syz-executor765" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.506175][ T36] audit: type=1400 audit(1785785690.789:67): avc: denied { search } for pid=313 comm="syz-executor765" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [pid 313] write(3, "1\n", 2) = 2 [pid 313] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 313] write(4, "2", 1) = 1 [ 29.528139][ T36] audit: type=1400 audit(1785785690.789:68): avc: denied { write } for pid=313 comm="syz-executor765" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.551765][ T36] audit: type=1400 audit(1785785690.789:69): avc: denied { open } for pid=313 comm="syz-executor765" path="/root/debug/tracing/events/sched/sched_switch/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.579692][ T313] FAULT_INJECTION: forcing a failure. [ 29.579692][ T313] name failslab, interval 1, probability 0, space 0, times 1 [ 29.592555][ T313] CPU: 1 UID: 0 PID: 313 Comm: syz-executor765 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 29.592613][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.592634][ T313] Call Trace: [ 29.592641][ T313] [ 29.592648][ T313] __dump_stack+0x21/0x30 [ 29.592744][ T313] dump_stack_lvl+0x140/0x1c0 [ 29.592766][ T313] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.592784][ T313] ? xfd_validate_state+0x68/0x140 [ 29.592798][ T313] ? check_stack_object+0x10f/0x150 [ 29.592810][ T313] dump_stack+0x19/0x20 [ 29.592822][ T313] should_fail_ex+0x3c2/0x510 [ 29.592840][ T313] ? tracepoint_probe_unregister+0x223/0x990 [ 29.592856][ T313] should_failslab+0xac/0x100 [ 29.592869][ T313] __kmalloc_noprof+0x69/0x510 [ 29.592879][ T313] ? tracepoint_probe_unregister+0x223/0x990 [ 29.592894][ T313] ? __kasan_check_write+0x18/0x20 [ 29.592904][ T313] ? __cfi_probe_sched_switch+0x10/0x10 [ 29.592918][ T313] tracepoint_probe_unregister+0x223/0x990 [ 29.592932][ T313] ? __cfi_mutex_unlock+0x10/0x10 [ 29.592948][ T313] tracing_stop_cmdline_record+0x6f/0xb0 [ 29.592960][ T313] __ftrace_event_enable_disable+0x4c3/0x7a0 [ 29.592976][ T313] event_enable_write+0x1ca/0x290 [ 29.592986][ T313] ? __cfi_event_enable_write+0x10/0x10 [ 29.592996][ T313] ? bpf_lsm_file_permission+0xd/0x20 [ 29.593010][ T313] ? __cfi_event_enable_write+0x10/0x10 [ 29.593019][ T313] vfs_write+0x3c1/0xfd0 [ 29.593030][ T313] ? __kasan_check_write+0x18/0x20 [ 29.593039][ T313] ? _raw_spin_lock_irq+0x93/0x120 [ 29.593050][ T313] ? __cfi_vfs_write+0x10/0x10 [ 29.593060][ T313] ? cgroup_update_frozen+0x160/0x980 [ 29.593074][ T313] ? __asan_memset+0x39/0x50 [ 29.593083][ T313] ? ptrace_stop+0x6d6/0x8f0 [ 29.593095][ T313] ? __kasan_check_read+0x15/0x20 [ 29.593105][ T313] ksys_write+0x145/0x260 [ 29.593115][ T313] ? __cfi_ksys_write+0x10/0x10 [ 29.593125][ T313] ? __kasan_check_write+0x18/0x20 [ 29.593135][ T313] __x64_sys_write+0x7f/0x90 [ 29.593145][ T313] x64_sys_call+0x271c/0x2ee0 [ 29.593161][ T313] do_syscall_64+0x57/0xf0 [ 29.593172][ T313] ? clear_bhb_loop+0x50/0xa0 [ 29.593186][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.593199][ T313] RIP: 0033:0x7ffaa9b33989 [ 29.593218][ T313] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 29.593227][ T313] RSP: 002b:00007ffe596e2428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [pid 313] write(3, "0\n", 2) = 2 [pid 313] exit_group(0) = ? [pid 313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55556d8c56a0, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556d8c5690) = 314 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 executing program [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] mkdirat(AT_FDCWD, "./debug", 0777) = -1 EEXIST (File exists) [pid 314] mount(NULL, "./debug", "debugfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 314] openat(AT_FDCWD, "./debug/tracing/events/sched/sched_switch/enable", O_WRONLY) = 3 [ 29.593242][ T313] RAX: ffffffffffffffda RBX: 00007ffe596e2440 RCX: 00007ffaa9b33989 [ 29.593250][ T313] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 29.593257][ T313] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000009 [ 29.593263][ T313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe596e25a8 [ 29.593269][ T313] R13: 431bde82d7b634db R14: 00007ffaa9b94041 R15: 0000000000000002 [ 29.593278][ T313] [pid 314] write(3, "1\n", 2) = 2 [pid 314] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 314] write(4, "2", 1) = 1 [pid 314] write(3, "0\n", 2) = 2 [pid 314] exit_group(0) = ? [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 29.896643][ T36] audit: type=1400 audit(1785785691.239:70): avc: denied { mounton } for pid=314 comm="syz-executor765" path="/root/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.920786][ T314] FAULT_INJECTION: forcing a failure. [ 29.920786][ T314] name failslab, interval 1, probability 0, space 0, times 0 [ 29.933648][ T314] CPU: 0 UID: 0 PID: 314 Comm: syz-executor765 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 29.933676][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.933686][ T314] Call Trace: [ 29.933692][ T314] [ 29.933700][ T314] __dump_stack+0x21/0x30 [ 29.933728][ T314] dump_stack_lvl+0x140/0x1c0 [ 29.933752][ T314] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.933775][ T314] ? xfd_validate_state+0x68/0x140 [ 29.933801][ T314] ? check_stack_object+0x10f/0x150 [ 29.933820][ T314] dump_stack+0x19/0x20 [ 29.933839][ T314] should_fail_ex+0x3c2/0x510 [ 29.933851][ T314] ? tracepoint_probe_unregister+0x223/0x990 [ 29.933866][ T314] should_failslab+0xac/0x100 [ 29.933880][ T314] __kmalloc_noprof+0x69/0x510 [ 29.933890][ T314] ? tracepoint_probe_unregister+0x223/0x990 [ 29.933905][ T314] ? __kasan_check_write+0x18/0x20 [ 29.933915][ T314] ? __cfi_probe_sched_switch+0x10/0x10 [ 29.933928][ T314] tracepoint_probe_unregister+0x223/0x990 [ 29.933942][ T314] ? __cfi_mutex_unlock+0x10/0x10 [ 29.933960][ T314] tracing_stop_cmdline_record+0x6f/0xb0 [ 29.933972][ T314] __ftrace_event_enable_disable+0x4c3/0x7a0 [ 29.933987][ T314] event_enable_write+0x1ca/0x290 [ 29.933997][ T314] ? __cfi_event_enable_write+0x10/0x10 [ 29.934007][ T314] ? bpf_lsm_file_permission+0xd/0x20 [ 29.934021][ T314] ? __cfi_event_enable_write+0x10/0x10 [ 29.934030][ T314] vfs_write+0x3c1/0xfd0 [ 29.934041][ T314] ? __kasan_check_write+0x18/0x20 [ 29.934051][ T314] ? _raw_spin_lock_irq+0x93/0x120 [ 29.934062][ T314] ? __cfi_vfs_write+0x10/0x10 [ 29.934072][ T314] ? cgroup_update_frozen+0x160/0x980 [ 29.934085][ T314] ? __asan_memset+0x39/0x50 [ 29.934095][ T314] ? ptrace_stop+0x6d6/0x8f0 [ 29.934106][ T314] ? __kasan_check_read+0x15/0x20 [ 29.934116][ T314] ksys_write+0x145/0x260 [ 29.934126][ T314] ? __cfi_ksys_write+0x10/0x10 [ 29.934136][ T314] ? __kasan_check_write+0x18/0x20 [ 29.934146][ T314] __x64_sys_write+0x7f/0x90 [ 29.934156][ T314] x64_sys_call+0x271c/0x2ee0 [ 29.934165][ T314] do_syscall_64+0x57/0xf0 [ 29.934176][ T314] ? clear_bhb_loop+0x50/0xa0 [ 29.934189][ T314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.934202][ T314] RIP: 0033:0x7ffaa9b33989 [ 29.934212][ T314] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 29.934220][ T314] RSP: 002b:00007ffe596e2428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 29.934232][ T314] RAX: ffffffffffffffda RBX: 00007ffe596e2440 RCX: 00007ffaa9b33989 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 315 attached , child_tidptr=0x55556d8c5690) = 315 [pid 315] set_robust_list(0x55556d8c56a0, 24 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... set_robust_list resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 [pid 315] write(1, "executing program\n", 18) = 18 executing program [pid 315] mkdirat(AT_FDCWD, "./debug", 0777) = -1 EEXIST (File exists) [pid 315] mount(NULL, "./debug", "debugfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 315] openat(AT_FDCWD, "./debug/tracing/events/sched/sched_switch/enable", O_WRONLY) = 3 [pid 315] write(3, "1\n", 2) = 2 [pid 315] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 315] write(4, "2", 1) = 1 [ 29.934239][ T314] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 29.934246][ T314] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000009 [ 29.934252][ T314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe596e243c [ 29.934258][ T314] R13: 431bde82d7b634db R14: 00007ffaa9b94041 R15: 0000000000000002 [ 29.934266][ T314] [ 30.239546][ T315] FAULT_INJECTION: forcing a failure. [ 30.239546][ T315] name failslab, interval 1, probability 0, space 0, times 0 [ 30.252511][ T315] CPU: 0 UID: 0 PID: 315 Comm: syz-executor765 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 30.252542][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.252552][ T315] Call Trace: [ 30.252558][ T315] [ 30.252564][ T315] __dump_stack+0x21/0x30 [ 30.252594][ T315] dump_stack_lvl+0x140/0x1c0 [ 30.252617][ T315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.252640][ T315] ? xfd_validate_state+0x68/0x140 [ 30.252665][ T315] ? check_stack_object+0x10f/0x150 [ 30.252684][ T315] dump_stack+0x19/0x20 [ 30.252699][ T315] should_fail_ex+0x3c2/0x510 [ 30.252711][ T315] ? tracepoint_probe_unregister+0x223/0x990 [ 30.252726][ T315] should_failslab+0xac/0x100 [ 30.252739][ T315] __kmalloc_noprof+0x69/0x510 [ 30.252750][ T315] ? tracepoint_probe_unregister+0x223/0x990 [ 30.252764][ T315] ? __kasan_check_write+0x18/0x20 [ 30.252774][ T315] ? __cfi_probe_sched_switch+0x10/0x10 [ 30.252787][ T315] tracepoint_probe_unregister+0x223/0x990 [ 30.252802][ T315] ? __cfi_mutex_unlock+0x10/0x10 [ 30.252816][ T315] tracing_stop_cmdline_record+0x6f/0xb0 [ 30.252828][ T315] __ftrace_event_enable_disable+0x4c3/0x7a0 [ 30.252843][ T315] event_enable_write+0x1ca/0x290 [ 30.252853][ T315] ? __cfi_event_enable_write+0x10/0x10 [ 30.252863][ T315] ? bpf_lsm_file_permission+0xd/0x20 [ 30.252876][ T315] ? __cfi_event_enable_write+0x10/0x10 [ 30.252886][ T315] vfs_write+0x3c1/0xfd0 [ 30.252896][ T315] ? __kasan_check_write+0x18/0x20 [ 30.252905][ T315] ? _raw_spin_lock_irq+0x93/0x120 [ 30.252917][ T315] ? __cfi_vfs_write+0x10/0x10 [ 30.252926][ T315] ? cgroup_update_frozen+0x160/0x980 [ 30.252940][ T315] ? __asan_memset+0x39/0x50 [ 30.252949][ T315] ? ptrace_stop+0x6d6/0x8f0 [ 30.252961][ T315] ? __kasan_check_read+0x15/0x20 [ 30.252970][ T315] ksys_write+0x145/0x260 [ 30.252980][ T315] ? __cfi_ksys_write+0x10/0x10 [ 30.252990][ T315] ? __kasan_check_write+0x18/0x20 [ 30.253000][ T315] __x64_sys_write+0x7f/0x90 [ 30.253017][ T315] x64_sys_call+0x271c/0x2ee0 [ 30.253026][ T315] do_syscall_64+0x57/0xf0 [ 30.253037][ T315] ? clear_bhb_loop+0x50/0xa0 [ 30.253051][ T315] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.253068][ T315] RIP: 0033:0x7ffaa9b33989 [ 30.253078][ T315] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 30.253087][ T315] RSP: 002b:00007ffe596e2428 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 30.253099][ T315] RAX: ffffffffffffffda RBX: 00007ffe596e2440 RCX: 00007ffaa9b33989 [ 30.253106][ T315] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 30.253113][ T315] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000009 [ 30.253119][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe596e243c [ 30.253126][ T315] R13: 431bde82d7b634db R14: 00007ffaa9b94041 R15: 0000000000000002 [ 30.253138][ T315] [ 30.544062][ T99] CFI failure at __traceiter_sched_switch+0xa2/0xe0 (target: tp_stub_func+0x0/0x20; expected type: 0x4637f3aa) [ 30.555910][ T99] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 30.562855][ T99] CPU: 1 UID: 0 PID: 99 Comm: klogd Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 30.573773][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.583898][ T99] RIP: 0010:__traceiter_sched_switch+0xa2/0xe0 [ 30.590044][ T99] Code: 00 74 05 e8 20 01 86 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 49 89 db 41 ba 56 0c c8 b9 45 03 53 f1 74 02 <0f> 0b 41 ff d3 0f 1f 00 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c [ 30.609634][ T99] RSP: 0018:ffffc90000e2f670 EFLAGS: 00010007 [ 30.615691][ T99] RAX: 1ffff11021656863 RBX: ffffffff8188bff0 RCX: ffff88810b7c4c00 [ 30.623652][ T99] RDX: ffff88810cf5a600 RSI: 0000000000000001 RDI: 0000000000000000 [ 30.631619][ T99] RBP: ffffc90000e2f6b0 R08: 0000000000000000 R09: 1ffffffff0fd97dd [ 30.639575][ T99] R10: 000000002af71e77 R11: ffffffff8188bff0 R12: 0000000000000001 [ 30.647538][ T99] R13: ffff88810b2b4310 R14: ffff88810b2b4310 R15: dffffc0000000000 [ 30.655617][ T99] FS: 00007f40f4ad6c80(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.664539][ T99] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.671111][ T99] CR2: 00005623e49c0000 CR3: 000000010d304000 CR4: 00000000003526b0 [ 30.679243][ T99] Call Trace: [ 30.682505][ T99] [ 30.685622][ T99] __schedule+0x1cb1/0x20b0 [ 30.690142][ T99] ? __sched_text_start+0x10/0x10 [ 30.695170][ T99] ? probe_sched_wakeup+0x7c/0x90 [ 30.700224][ T99] ? ttwu_do_activate+0x5a8/0x620 [ 30.705244][ T99] ? try_to_wake_up+0x111a/0x1fd0 [ 30.710358][ T99] preempt_schedule_common+0x2d/0x60 [ 30.715654][ T99] preempt_schedule+0xc5/0xe0 [ 30.720332][ T99] ? __cfi_preempt_schedule+0x10/0x10 [ 30.725713][ T99] preempt_schedule_thunk+0x1a/0x40 [ 30.730903][ T99] _raw_spin_unlock_irqrestore+0x6c/0x70 [ 30.736529][ T99] __wake_up_sync_key+0x1be/0x2c0 [ 30.741544][ T99] ? __cfi___wake_up_sync_key+0x10/0x10 [ 30.747090][ T99] ? __kasan_check_write+0x18/0x20 [ 30.752191][ T99] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 30.757639][ T99] sock_def_readable+0x14d/0x430 [ 30.762573][ T99] ? __kasan_check_write+0x18/0x20 [ 30.767672][ T99] ? _raw_spin_lock+0x92/0x120 [ 30.772429][ T99] ? __cfi_sock_def_readable+0x10/0x10 [ 30.777881][ T99] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 30.783684][ T99] ? skb_queue_tail+0xcf/0x100 [ 30.788440][ T99] unix_dgram_sendmsg+0x12fb/0x1a90 [ 30.793632][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 30.799170][ T99] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 30.804460][ T99] ? security_socket_sendmsg+0x3d/0x100 [ 30.810032][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 30.815591][ T99] __sys_sendto+0x68a/0x700 [ 30.820194][ T99] ? __cfi___sys_sendto+0x10/0x10 [ 30.825223][ T99] ? sched_clock_cpu+0x75/0x400 [ 30.830070][ T99] ? __kasan_check_write+0x18/0x20 [ 30.835183][ T99] __x64_sys_sendto+0xe9/0x100 [ 30.840095][ T99] x64_sys_call+0x2c2c/0x2ee0 [ 30.844761][ T99] do_syscall_64+0x57/0xf0 [ 30.849166][ T99] ? clear_bhb_loop+0x50/0xa0 [ 30.853834][ T99] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.859716][ T99] RIP: 0033:0x7f40f4c26407 [ 30.864118][ T99] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 30.883708][ T99] RSP: 002b:00007ffcfd5136e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 30.892108][ T99] RAX: ffffffffffffffda RBX: 00007f40f4ad6c80 RCX: 00007f40f4c26407 [ 30.900271][ T99] RDX: 000000000000008b RSI: 00007ffcfd513820 RDI: 0000000000000003 [ 30.908232][ T99] RBP: 00007ffcfd513c50 R08: 0000000000000000 R09: 0000000000000000 [ 30.916190][ T99] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcfd513c68 [ 30.924166][ T99] R13: 00007ffcfd513820 R14: 0000000000000070 R15: 00007ffcfd513820 [ 30.932408][ T99] [ 30.935422][ T99] Modules linked in: [ 30.939319][ T99] ---[ end trace 0000000000000000 ]--- [ 30.944763][ T99] RIP: 0010:__traceiter_sched_switch+0xa2/0xe0 [ 30.950913][ T99] Code: 00 74 05 e8 20 01 86 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 49 89 db 41 ba 56 0c c8 b9 45 03 53 f1 74 02 <0f> 0b 41 ff d3 0f 1f 00 49 83 c6 18 4c 89 f0 48 c1 e8 03 42 80 3c [ 30.970597][ T99] RSP: 0018:ffffc90000e2f670 EFLAGS: 00010007 [ 30.976660][ T99] RAX: 1ffff11021656863 RBX: ffffffff8188bff0 RCX: ffff88810b7c4c00 [ 30.984632][ T99] RDX: ffff88810cf5a600 RSI: 0000000000000001 RDI: 0000000000000000 [ 30.992618][ T99] RBP: ffffc90000e2f6b0 R08: 0000000000000000 R09: 1ffffffff0fd97dd [ 31.000576][ T99] R10: 000000002af71e77 R11: ffffffff8188bff0 R12: 0000000000000001 [ 31.008535][ T99] R13: ffff88810b2b4310 R14: ffff88810b2b4310 R15: dffffc0000000000 [ 31.016495][ T99] FS: 00007f40f4ad6c80(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.025415][ T99] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.031994][ T99] CR2: 00005623e49c0000 CR3: 000000010d304000 CR4: 00000000003526b0 [ 31.039961][ T99] Kernel panic - not syncing: Fatal exception [ 31.046125][ T99] Kernel Offset: disabled [ 31.050464][ T99] Rebooting in 86400 seconds..