ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor3986887217 <...> [ 7.470383][ T36] audit: type=1400 audit(1789692397.570:58): avc: denied { read } for pid=204 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 20.669191][ T36] audit: type=1400 audit(1789692410.790:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.672455][ T36] audit: type=1400 audit(1789692410.790:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.675216][ T36] audit: type=1400 audit(1789692410.790:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[2584]" dev="pipefs" ino=2584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 20.678261][ T36] audit: type=1400 audit(1789692410.790:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.681305][ T36] audit: type=1400 audit(1789692410.790:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor3986887217", ["ci2-android-6-12-rust/syz-executor3986887217"], 0x7ffc0a76eaa0 /* 10 vars */) = 0 brk(NULL) = 0x55557e347000 brk(0x55557e347d40) = 0x55557e347d40 arch_prctl(ARCH_SET_FS, 0x55557e3473c0) = 0 set_tid_address(0x55557e347690) = 312 set_robust_list(0x55557e3476a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor3986887217", 4096) = 50 getrandom("\xc7\xd6\xcf\xec\x5c\x4a\x95\xda", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e347d40 brk(0x55557e368d40) = 0x55557e368d40 brk(0x55557e369000) = 0x55557e369000 mprotect(0x7f2fa77e4000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18) = 18 executing program mkdirat(AT_FDCWD, "./file0", 0700) = 0 mount("./file0", "./file0", "incremental-fs", MS_DIRSYNC, NULL) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_APPEND|__O_SYNC|O_LARGEFILE|O_NOFOLLOW|O_PATH|O_DIRECTORY|O_EMPTYPATH|FASYNC|0x8a800014) = 3 openat(3, ".pending_reads", O_WRONLY) = 4 setsockopt(-1, SOL_IP, IP_IPSEC_POLICY, "\x17\x00\x00\x00\x02\x00\x01\x04\x00\xff\xbe\x8c\x5e\xe1\x76\x88\xa2\x00\x32\xe8\x01\x01\x00\x0a\x00\x00\x02\xa2\x57\xfc\x5a\xd9\x02\x00\xbb\x6a\x88\x00\x00\xd6\xc8\xdb\x00\x00\x00\xdf\x01\x80\x02\x00\x00\x00\xfc\x06\x07\xbd\xff\x59\x10\x0a\xc4\x57\x61\x54\x7a\x68\x1f\x00\x9c\xee\x4a\x5a\xcb\x3d\xa4\x00\x00\x1f\xb7\x00\x67\x4f\x00\xc8\x8e\xbb\xf9\x31\x50\x33\xbf\x79\xac\x2d\xfc\x06\x01\x15\x00\x39"..., 184) = -1 EBADF (Bad file descriptor) [ 31.178259][ T36] audit: type=1400 audit(1789692421.290:64): avc: denied { execmem } for pid=312 comm="syz-executor398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.184443][ T312] ------------[ cut here ]------------ [ 31.197999][ T36] audit: type=1400 audit(1789692421.290:65): avc: denied { mounton } for pid=312 comm="syz-executor398" path="/root/file0" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.203534][ T312] WARNING: CPU: 0 PID: 312 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 31.226777][ T36] audit: type=1400 audit(1789692421.290:66): avc: denied { mount } for pid=312 comm="syz-executor398" name="/" dev="incremental-fs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.235730][ T312] Modules linked in: [ 31.235775][ T312] CPU: 0 UID: 0 PID: 312 Comm: syz-executor398 Not tainted syzkaller #0 59fd58dbf897e2c8ba33f91efbb53ce34092dff9 [ 31.259719][ T36] audit: type=1400 audit(1789692421.290:67): avc: denied { write } for pid=312 comm="syz-executor398" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.263244][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.275388][ T36] audit: type=1400 audit(1789692421.290:68): avc: denied { open } for pid=312 comm="syz-executor398" path="/root/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.299021][ T312] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 31.309349][ T36] audit: type=1400 audit(1789692421.290:69): avc: denied { ioctl } for pid=312 comm="syz-executor398" path="/root/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.333943][ T312] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 d8 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 31.385890][ T312] RSP: 0018:ffffc9000126f980 EFLAGS: 00010246 [ 31.392056][ T312] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 31.400158][ T312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000126fa38 [ 31.408281][ T312] RBP: ffffc9000126faa8 R08: ffffc9000126fa37 R09: 0000000000000000 [ 31.416323][ T312] R10: ffffc9000126fa20 R11: fffff5200024df47 R12: ffffc9000126f9c0 [ 31.424357][ T312] R13: dffffc0000000000 R14: 1ffff9200024df34 R15: 0000000000000000 [ 31.432378][ T312] FS: 000055557e3473c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.441313][ T312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.447962][ T312] CR2: 000000000062b5d8 CR3: 0000000131e04000 CR4: 00000000003526b0 [ 31.456021][ T312] Call Trace: [ 31.459312][ T312] [ 31.462309][ T312] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 31.468241][ T312] ? __kasan_check_write+0x18/0x20 [ 31.473399][ T312] ? __switch_to+0xc6b/0x1320 [ 31.478085][ T312] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 31.484460][ T312] ___kmalloc_large_node+0x81/0x220 [ 31.489680][ T312] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 31.495885][ T312] __kmalloc_large_node_noprof+0x1e/0xd0 [ 31.501529][ T312] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 31.507761][ T312] __kmalloc_noprof+0x326/0x510 [ 31.512691][ T312] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 31.518767][ T312] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 31.525255][ T312] ? selinux_file_ioctl+0x732/0x1480 [ 31.530565][ T312] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 31.536151][ T312] ? __kasan_check_write+0x18/0x20 [ 31.541266][ T312] ? _raw_spin_lock_irq+0x93/0x120 [ 31.546397][ T312] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.551951][ T312] ? cgroup_update_frozen+0x160/0x980 [ 31.557369][ T312] ? __asan_memset+0x39/0x50 [ 31.561979][ T312] ? ptrace_stop+0x6d6/0x8f0 [ 31.566608][ T312] ? _raw_spin_unlock_irq+0x45/0x70 [ 31.571895][ T312] ? ptrace_notify+0x20d/0x290 [ 31.576714][ T312] ? bpf_lsm_file_ioctl+0xd/0x20 [ 31.581678][ T312] ? security_file_ioctl+0x3e/0x110 [ 31.586969][ T312] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 31.593434][ T312] __se_sys_ioctl+0x123/0x1b0 [ 31.598115][ T312] __x64_sys_ioctl+0x7f/0xa0 [ 31.602745][ T312] x64_sys_call+0x1878/0x2ee0 [ 31.607428][ T312] do_syscall_64+0x57/0xf0 [ 31.611838][ T312] ? clear_bhb_loop+0x50/0xa0 [ 31.616642][ T312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.622865][ T312] RIP: 0033:0x7f2fa7753d39 [ 31.627307][ T312] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 31.647021][ T312] RSP: 002b:00007ffce5f56b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.655672][ T312] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f2fa7753d39 [ 31.663680][ T312] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000004 [ 31.671651][ T312] RBP: 0000200000000000 R08: 00000000000a8c88 R09: 00000000000a8c88 ioctl(4, _IOC(_IOC_WRITE, 0x67, 0x26, 0x10), 0x2000000000c0) = -1 ENOMEM (Cannot allocate memory) exit_group(0) = ? +++ exited with 0 +++ [ 31.67966