ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor617266049 <...> syzkaller syzkaller login: [ 14.262767][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 14.262785][ T36] audit: type=1400 audit(1787002222.030:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.267885][ T36] audit: type=1400 audit(1787002222.030:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.272053][ T36] audit: type=1400 audit(1787002222.030:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2551]" dev="pipefs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.276719][ T36] audit: type=1400 audit(1787002222.030:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.280072][ T36] audit: type=1400 audit(1787002222.030:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor617266049", ["ci2-android-6-12-rust/syz-executor617266049"], 0x7ffef363c0a0 /* 10 vars */) = 0 brk(NULL) = 0x55558bfb4000 brk(0x55558bfb4d40) = 0x55558bfb4d40 arch_prctl(ARCH_SET_FS, 0x55558bfb43c0) = 0 set_tid_address(0x55558bfb4690) = 312 set_robust_list(0x55558bfb46a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor617266049", 4096) = 49 getrandom("\x5e\x39\x06\x02\x6c\x19\x0a\x80", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558bfb4d40 brk(0x55558bfd5d40) = 0x55558bfd5d40 brk(0x55558bfd6000) = 0x55558bfd6000 mprotect(0x7f2df159c000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 313 attached , child_tidptr=0x55558bfb4690) = 313 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] set_robust_list(0x55558bfb46a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] getppid() = 0 [pid 313] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 313] unshare(CLONE_NEWNS) = 0 [pid 313] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 313] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 313] unshare(CLONE_NEWCGROUP) = 0 [pid 313] unshare(CLONE_NEWUTS) = 0 [pid 313] unshare(CLONE_SYSVSEM) = 0 [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] getpid() = 1 [pid 313] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 80 3d 1a 71 63 03 01 0f 84 af e3 ff ff e8 5f 93 05 fd c6 05 [ 25.012032][ T313] RSP: 0018:ffffc900011ff6a0 EFLAGS: 00010246 [ 25.018505][ T313] RAX: a8405eade80cd400 RBX: ffff88810e7dfbb0 RCX: ffff88811f8c5f00 [ 25.027238][ T313] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 25.035381][ T313] RBP: ffffc900011ff980 R08: 0000000000000003 R09: 0000000000000004 [ 25.044170][ T313] R10: dffffc0000000000 R11: fffff5200023fe80 R12: 1ffff11021cfbf6a [ 25.052470][ T313] R13: ffff88810e7dfb40 R14: 0000000000000000 R15: dffffc0000000000 [ 25.060887][ T313] FS: 000055558bfb43c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.070415][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.077056][ T313] CR2: 0000200000000080 CR3: 0000000106b7a000 CR4: 00000000003526b0 [ 25.085213][ T313] Call Trace: [ 25.088516][ T313] [ 25.091448][ T313] ? __kasan_check_write+0x18/0x20 [ 25.096935][ T313] ? __calc_delta+0x2b0/0x2b0 [ 25.101733][ T313] ? alloc_skb_with_frags+0x80b/0x8b0 [ 25.109004][ T313] ? __cfi___dev_queue_xmit+0x10/0x10 [ 25.114431][ T313] ? __kasan_check_write+0x18/0x20 [ 25.119904][ T313] ? skb_set_owner_w+0x280/0x3d0 [ 25.124879][ T313] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 25.130509][ T313] ? __kasan_check_write+0x18/0x20 [ 25.135679][ T313] ? packet_parse_headers+0x7f0/0xb10 [ 25.141332][ T313] ? packet_parse_headers+0x883/0xb10 [ 25.146773][ T313] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 25.152799][ T313] ? skb_setup_tx_timestamp+0x210/0x210 [ 25.158534][ T313] ? mutex_lock+0x97/0x1d0 [ 25.163028][ T313] packet_xmit+0x76/0x360 [ 25.168833][ T313] packet_sendmsg+0x228b/0x56b0 [ 25.173737][ T313] ? avc_has_perm_noaudit+0x26b/0x360 [ 25.179198][ T313] ? __cfi_packet_sendmsg+0x10/0x10 [ 25.184649][ T313] ? check_stack_object+0x10f/0x150 [ 25.191919][ T313] ? __check_object_size+0xdc/0x870 [ 25.197311][ T313] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 25.205827][ T313] ? security_socket_sendmsg+0x3d/0x100 [ 25.212030][ T313] ? __cfi_packet_sendmsg+0x10/0x10 [ 25.217491][ T313] __sys_sendto+0x68d/0x700 [ 25.222182][ T313] ? __cfi___sys_sendto+0x10/0x10 [ 25.227437][ T313] ? __kasan_check_write+0x18/0x20 [ 25.232873][ T313] __x64_sys_sendto+0xe9/0x100 [ 25.237984][ T313] x64_sys_call+0x2c2c/0x2ee0 [ 25.242720][ T313] do_syscall_64+0x57/0xf0 [ 25.247561][ T313] ? clear_bhb_loop+0x50/0xa0 [ 25.252261][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.258274][ T313] RIP: 0033:0x7f2df15051c9 [ 25.262976][ T313] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 25.282953][ T313] RSP: 002b:00007fff86a900e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 25.291739][ T313] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f2df15051c9 [ 25.301286][ T313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 25.310277][ T313] RBP: 00007f2df1570489 R08: 0000200000000000 R09: 0000000000000014 [ 25.318925][ T313] R10: 0000000004000010 R11: 0000000000000246 R12: 00007f2df15703f1 [ 25.327107][ T313] R13: 0000000000000001 R14: 00007fff86a90140 R15: 0000000000000003 [ 25.336058][ T313] [ 25.339188][ T313] ---[ end trace 0000000000000000 ]--- [ 25.346580][ T313] skb len=0 headroom=144 headlen=0 tailroom=240 [ 25.346580][ T313] mac=(144,0) mac_len=0 net=(144,-1) trans=-1 [ 25.346580][ T313] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 25.346580][ T313] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 25.346580][ T313] hash(0x0 sw=0 l4=0) proto=0x0010 pkttype=0 iif=0 [ 25.346580][ T313] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 25.346580][ T313] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [pid 313] sendto(3, NULL, 0, MSG_PROBE|MSG_ZEROCOPY, {sa_family=AF_PACKET, sll_protocol=htons(ETH_P_PPPTALK), sll_ifindex=17, sll_hatype=ARPHRD_ETHER, sll_pkttype=PACKET_HOST, sll_halen=0}, 20) = -1 EPROTONOSUPPORT (Protocol not supported) [pid 313] exit_group(1) = ? [pid 313] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=1, si_utime=0, si_stime=72 /* 0.72 s */} --- exit_group(0) = ? +++ exited with 0 +++ [ 25.394498][ T313] dev name=wg