ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor4112189168 <...> Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor4112189168", ["ci2-android-6-12-rust/syz-executor4112189168"], 0x7fffab90da30 /* 10 vars */) = 0 brk(NULL) = 0x55558bb8a000 brk(0x55558bb8ad40) = 0x55558bb8ad40 arch_prctl(ARCH_SET_FS, 0x55558bb8a3c0) = 0 set_tid_address(0x55558bb8a690) = 313 set_robust_list(0x55558bb8a6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor4112189168", 4096) = 50 getrandom("\x78\x2f\x2e\xf1\xa6\x7b\x8d\x90", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558bb8ad40 brk(0x55558bbabd40) = 0x55558bbabd40 brk(0x55558bbac000) = 0x55558bbac000 mprotect(0x7f3015ddc000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18) = 18 add_key("keyring", "syz ", NULL, 0, KEY_SPEC_USER_KEYRING) = 339161814 add_key("asymmetric", NULL, "\x30\x82\x05\x55\x30\x82\x03\x3d\xa0\x03\x02\x01\x02\x02\x14\x73\x98\xea\x98\x2d\xd0\x2e\xa8\xb1\xcf\x57\xc7\xf2\x97\xb3\xe6\x1a\xfc\x8c\x0a\x30\x0d\x06\x09\x2a\x86\x48\x86\xf7\x0d\x01\x01\x0b\x05\x00\x30\x34\x31\x32\x30\x30\x06\x03\x55\x04\x03\x0c\x29\x43\x65\x72\x74\x69\x66\x69\x63\x61\x74\x65\x20\x76\x65\x72\x69\x66\x69\x63\x61\x74\x69\x6f\x6e\x20\x73\x65\x6c\x66\x2d\x74\x65\x73\x74\x69\x6e\x67"..., 1369, 339161814) = 723258137 executing program [ 30.956297][ T36] audit: type=1400 audit(1786912680.250:64): avc: denied { execmem } for pid=313 comm="syz-executor411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.963299][ T313] ------------[ cut here ]------------ [ 30.976927][ T36] audit: type=1400 audit(1786912680.250:65): avc: denied { write } for pid=313 comm="syz-executor411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 30.981703][ T313] WARNING: CPU: 0 PID: 313 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 31.010040][ T313] Modules linked in: [ 31.014025][ T313] CPU: 0 UID: 0 PID: 313 Comm: syz-executor411 Not tainted syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae [ 31.026002][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.036154][ T313] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 31.041735][ T313] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 4a 6b 06 ff 0f 0b b8 ea ff ff ff eb de e8 3c 6b 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 31.061423][ T313] RSP: 0018:ffffc900011af728 EFLAGS: 00010293 [ 31.067550][ T313] RAX: ffffffff82810684 RBX: ffff888120bf3a00 RCX: ffff88810770b900 [ 31.075596][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.083637][ T313] RBP: ffffc900011af770 R08: ffffc900011af82f R09: 0000000000000000 [ 31.091632][ T313] R10: 0000000000000000 R11: ffffffff828101a0 R12: ffff8881046ff988 [ 31.099667][ T313] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888120bf3a38 [ 31.107707][ T313] FS: 000055558bb8a3c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.116704][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.123307][ T313] CR2: 0000200000000000 CR3: 000000011f9bc000 CR4: 00000000003526b0 [ 31.131325][ T313] Call Trace: [ 31.134698][ T313] [ 31.137645][ T313] ? __asan_memcpy+0x5a/0x80 [ 31.142265][ T313] crypto_sig_verify+0x1cd/0x260 [ 31.147264][ T313] ? __cfi_crypto_sig_verify+0x10/0x10 [ 31.152758][ T313] ? crypto_sig_set_pubkey+0x9a/0xb0 [ 31.158102][ T313] public_key_verify_signature+0x654/0xa40 [ 31.163988][ T313] ? __cfi_public_key_verify_signature+0x10/0x10 [ 31.170343][ T313] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 31.175957][ T313] ? __switch_to+0xc6b/0x1320 [ 31.180674][ T313] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 31.187236][ T313] public_key_verify_signature_2+0x47/0x60 [ 31.193131][ T313] verify_signature+0xf0/0x120 [ 31.197956][ T313] asymmetric_key_verify_signature+0x160/0x200 [ 31.204186][ T313] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 31.210882][ T313] ? should_fail+0xf/0x20 [ 31.215270][ T313] ? __kasan_check_write+0x18/0x20 [ 31.220412][ T313] ? _copy_from_user+0x87/0xa0 [ 31.225261][ T313] ? memdup_user+0xb1/0x170 [ 31.229789][ T313] keyctl_pkey_verify+0x203/0x290 [ 31.234873][ T313] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 31.240455][ T313] ? __sched_text_start+0x10/0x10 [ 31.245543][ T313] __se_sys_keyctl+0x743/0xe40 [ 31.250340][ T313] ? __x64_sys_keyctl+0xf0/0xf0 [ 31.255269][ T313] ? cgroup_update_frozen+0x160/0x980 [ 31.260678][ T313] ? __asan_memset+0x39/0x50 [ 31.265354][ T313] ? ptrace_stop+0x6d6/0x8f0 [ 31.269975][ T313] ? _raw_spin_unlock_irq+0x45/0x70 [ 31.275265][ T313] ? ptrace_notify+0x20d/0x290 [ 31.280067][ T313] ? __cfi_ptrace_notify+0x10/0x10 [ 31.285240][ T313] ? __kasan_check_write+0x18/0x20 [ 31.290383][ T313] __x64_sys_keyctl+0xc3/0xf0 [ 31.295125][ T313] x64_sys_call+0x996/0x2ee0 [ 31.299743][ T313] do_syscall_64+0x57/0xf0 [ 31.304210][ T313] ? clear_bhb_loop+0x50/0xa0 [ 31.308934][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.314886][ T313] RIP: 0033:0x7f3015d4bcb9 [ 31.319342][ T313] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 31.339023][ T313] RSP: 002b:00007fff7fa4de88 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 31.347511][ T313] RAX: ffffffffffffffda RBX: 0000323135616873 RCX: 00007f3015d4bcb9 keyctl(KEYCTL_PKEY_VERIFY, {key_id=723258137, in_len=0, in2_len=0}, "enc=pkcs1 hash=sha512", NULL, NULL) = -1 EINVAL (Invalid argument) exit_group(0) = ? +++ exited with 0 +++ [ 31.355542][ T313] RDX: 000