ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor452440404 <...> cess permissive=1 [ 20.601414][ T36] audit: type=1400 audit(1788715643.750:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor452440404", ["ci2-android-6-12-rust/syz-executor452440404"], 0x7ffc12478040 /* 10 vars */) = 0 brk(NULL) = 0x5555946bd000 brk(0x5555946bdd40) = 0x5555946bdd40 arch_prctl(ARCH_SET_FS, 0x5555946bd3c0) = 0 set_tid_address(0x5555946bd690) = 313 set_robust_list(0x5555946bd6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor452440404", 4096) = 49 getrandom("\xf8\x00\x97\x2f\x86\x63\xf1\x56", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555946bdd40 brk(0x5555946ded40) = 0x5555946ded40 brk(0x5555946df000) = 0x5555946df000 mprotect(0x7f74dff18000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 fsconfig(-1, FSCONFIG_SET_BINARY, "mem", NULL, 0) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "/proc/self/mem", O_RDWR) = 3 mkdir("my_sys", 0777) = 0 mount(NULL, "my_sys", "sysfs", 0, NULL) = 0 openat(AT_FDCWD, "my_sys/bus/pci/devices/0000:00:03.0/resource1", O_RDWR) = 4 mmap(NULL, 4, PROT_WRITE|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0 io_uring_enter(-1, 1, 1, IORING_ENTER_GETEVENTS, NULL, 8) = -1 EBADF (Bad file descriptor) [ 29.979170][ T36] audit: type=1400 audit(1788715653.130:64): avc: denied { execmem } for pid=313 comm="syz-executor452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.012364][ T313] ------------[ cut here ]------------ [ 30.016399][ T36] audit: type=1400 audit(1788715653.130:65): avc: denied { mounton } for pid=313 comm="syz-executor452" path="/root/my_sys" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.020451][ T313] ioremap on RAM at 0x000000012a929000 - 0x000000012a929fff [ 30.043818][ T36] audit: type=1400 audit(1788715653.130:66): avc: denied { mount } for pid=313 comm="syz-executor452" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 30.050741][ T313] WARNING: CPU: 0 PID: 313 at arch/x86/mm/ioremap.c:218 __ioremap_caller+0x5fb/0x650 [ 30.073980][ T36] audit: type=1400 audit(1788715653.130:67): avc: denied { mmap_zero } for pid=313 comm="syz-executor452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 30.082114][ T313] Modules linked in: [ 30.105856][ T313] CPU: 0 UID: 0 PID: 313 Comm: syz-executor452 Not tainted syzkaller #0 1f46b48b3a0ef7537d643c2c4b1d5e30032b8167 [ 30.117782][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.127882][ T313] RIP: 0010:__ioremap_caller+0x5fb/0x650 [ 30.133589][ T313] Code: 8d 5c 24 60 4c 8d b4 24 80 00 00 00 e8 0e fd 41 00 c6 05 0d de 9f 06 01 48 c7 c7 a0 7d e7 85 48 89 de 4c 89 f2 e8 85 cf be ff <0f> 0b e9 59 fc ff ff e8 39 73 5f 04 48 c7 c1 51 c2 ec 87 80 e1 07 [ 30.153312][ T313] RSP: 0018:ffffc9000123f800 EFLAGS: 00010246 [ 30.159434][ T313] RAX: d05aaf17b47b8d00 RBX: ffffc9000123f860 RCX: ffff888105b11300 [ 30.167458][ T313] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 30.175489][ T313] RBP: ffffc9000123f908 R08: 0000000000000003 R09: 0000000000000004 [ 30.183489][ T313] R10: dffffc0000000000 R11: fffff52000247e64 R12: 0000000000000000 [ 30.191540][ T313] R13: 000000000000002e R14: ffffc9000123f880 R15: dffffc0000000000 [ 30.199582][ T313] FS: 00005555946bd3c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.208595][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.215275][ T313] CR2: 0000000000000018 CR3: 000000011fe7a000 CR4: 00000000003526b0 [ 30.223260][ T313] Call Trace: [ 30.226588][ T313] [ 30.229541][ T313] ? generic_access_phys+0x153/0x310 [ 30.234889][ T313] ? ioremap+0x50/0x50 [ 30.238988][ T313] ioremap_prot+0x34/0x40 [ 30.243321][ T313] generic_access_phys+0x153/0x310 [ 30.248488][ T313] ? __cfi_generic_access_phys+0x10/0x10 [ 30.254207][ T313] kernfs_vma_access+0x17e/0x210 [ 30.259168][ T313] __access_remote_vm+0x2d9/0x630 [ 30.264253][ T313] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 30.270009][ T313] ? access_remote_vm+0x60/0x60 [ 30.274919][ T313] access_remote_vm+0x39/0x60 [ 30.279640][ T313] mem_rw+0x46f/0x6d0 [ 30.283649][ T313] mem_read+0x34/0x50 [ 30.287702][ T313] vfs_readv+0x5e7/0xa00 [ 30.291986][ T313] ? __cfi_mem_read+0x10/0x10 [ 30.296735][ T313] ? do_readv+0x2e0/0x2e0 [ 30.301117][ T313] ? ptrace_stop+0x6d6/0x8f0 [ 30.305766][ T313] ? __kasan_check_read+0x15/0x20 [ 30.310839][ T313] do_readv+0x151/0x2e0 [ 30.315050][ T313] ? generic_atomic_write_valid+0x1d0/0x1d0 [ 30.320988][ T313] ? __kasan_check_write+0x18/0x20 [ 30.326155][ T313] __x64_sys_readv+0x81/0x90 [ 30.330771][ T313] x64_sys_call+0x2a64/0x2ee0 [ 30.335492][ T313] do_syscall_64+0x57/0xf0 [ 30.339945][ T313] ? clear_bhb_loop+0x50/0xa0 [ 30.344666][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.350585][ T313] RIP: 0033:0x7f74dfe88209 [ 30.355074][ T313] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 30.374807][ T313] RSP: 002b:00007fffc2b23ba8 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 30.383250][ T313] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f74dfe88209 [ 30.391283][ T313] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 30.399322][ T313] RBP: 00007fffc2b23bc0 R08: 0000000000000008 R09: 0000000000000008 [ 30.407348][ T313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffc2b23d68 [ 30.415391][ T313] R13: 0000000000000002 R14: 00007f74dff18ca0 R15: 0000000000000002 [ 30.423380][ T313] readv(3, [{iov_base=0x200000000000, iov_len=31}, {iov_base=NULL, iov_len=0}], 2) = -1 EIO (Input/output error) exit_group(0) = ? +++ exited with 0 +++ [ 30.426452][ T313] ---[ end trace 0000000000000000 ]-