ci2-android-5-10/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-10/syz-executor2589926768 <...> T24] audit: type=1400 audit(1785470704.840:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.358677][ T24] audit: type=1400 audit(1785470704.840:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. execve("ci2-android-5-10/syz-executor2589926768", ["ci2-android-5-10/syz-executor2589926768"], 0x7ffcbd89e0f0 /* 10 vars */) = 0 brk(NULL) = 0x555563962000 brk(0x555563962d40) = 0x555563962d40 arch_prctl(ARCH_SET_FS, 0x5555639623c0) = 0 set_tid_address(0x555563962690) = 297 set_robust_list(0x5555639626a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-10/syz-executor2589926768", 4096) = 45 getrandom("\xde\x4a\x4f\x19\x11\xe8\x9f\x6e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563962d40 brk(0x555563983d40) = 0x555563983d40 brk(0x555563984000) = 0x555563984000 mprotect(0x7f4852793000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555563962690) = 298 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 ci2-android-5-10/strace-static-x86_64: Process 298 attached [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC [pid 298] set_robust_list(0x5555639626a0, 24 [pid 297] <... openat resumed>) = 3 [pid 298] <... set_robust_list resumed>) = 0 [pid 297] write(3, "1", 1 [pid 298] rt_sigprocmask(SIG_SETMASK, [] [pid 297] <... write resumed>) = 1 [pid 298] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "100", 3) = 3 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "0", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "0", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "7 4 1 3", 7) = 7 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "1", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "1", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "Y", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "Y", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "Y", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "Y", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "Y", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "Y", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "0", 1) = 1 [pid 297] close(3) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 297] write(3, "298", 3) = 3 [pid 297] close(3) = 0 [pid 297] kill(298, SIGKILL) = 0 [pid 298] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=298, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555563962690) = 299 ci2-android-5-10/strace-static-x86_64: Process 299 attached [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] set_robust_list(0x5555639626a0, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setpgid(0, 0) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3) = 0 [pid 299] write(1, "executing program\n", 18) = 18 executing program [pid 299] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [ 24.041888][ T24] audit: type=1400 audit(1785470714.540:64): avc: denied { execmem } for pid=297 comm="syz-executor258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 299] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 299] openat(AT_FDCWD, "./sys/power/state", O_RDWR) = 3 [ 24.082818][ T24] audit: type=1400 audit(1785470714.580:65): avc: denied { mounton } for pid=299 comm="syz-executor258" path="/root/sys" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.089814][ T299] PM: suspend entry (s2idle) [ 24.105453][ T24] audit: type=1400 audit(1785470714.580:66): avc: denied { mount } for pid=299 comm="syz-executor258" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 24.500673][ T299] Filesystems sync: 0.390 seconds [ 24.505746][ T299] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 24.514924][ T299] OOM killer disabled. [ 24.519010][ T299] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 24.528396][ T299] printk: Suspending console(s) (use no_console_suspend to debug)