ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor108314831 <...> Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor108314831", ["ci2-android-6-12-rust/syz-executor108314831"], 0x7ffe39f30a90 /* 10 vars */) = 0 brk(NULL) = 0x555574bfc000 brk(0x555574bfcd40) = 0x555574bfcd40 arch_prctl(ARCH_SET_FS, 0x555574bfc3c0) = 0 set_tid_address(0x555574bfc690) = 313 set_robust_list(0x555574bfc6a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor108314831", 4096) = 49 getrandom("\x80\xdd\x25\x0b\xf9\xce\x6e\x7a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574bfcd40 brk(0x555574c1dd40) = 0x555574c1dd40 brk(0x555574c1e000) = 0x555574c1e000 mprotect(0x7f98755f7000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 executing program mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18) = 18 sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=296, cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, cmsg_data=[0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}], msg_controllen=296, msg_flags=0}, MSG_NOSIGNAL|MSG_ZEROCOPY) = -1 EBADF (Bad file descriptor) socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 3 socketpair(AF_UNIX, SOCK_DGRAM, 0, [4, 5]) = 0 sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=296, cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, cmsg_data=[0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]}], msg_controllen=296, msg_flags=0}, 0) = 0 socket(AF_INET, SOCK_STREAM, IPPROTO_IP) = 6 socket(AF_INET6, SOCK_STREAM, IPPROTO_IP) = 7 recvmsg(4, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=168, cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, cmsg_data=[8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45]}], msg_controllen=168, msg_flags=MSG_CTRUNC}, MSG_EOR) = 0 mmap(NULL, 12582912, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|MAP_POPULATE|MAP_NONBLOCK|MAP_EXECUTABLE|1< 0f b6 04 28 84 c0 0f 85 8e 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 32.184213][ T313] RSP: 0018:ffffc9000124f5a0 EFLAGS: 00010246 [ 32.204179][ T36] audit: type=1400 audit(1787028348.320:66): avc: denied { mounton } for pid=313 comm="syz-executor108" path="/root/debug" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.212434][ T313] RAX: 0000000000000000 RBX: ffffffff86364b61 RCX: 0000000000000001 [ 32.212453][ T313] RDX: ffffffff85a1341e RSI: ffffffff87e3b5b0 RDI: 0000000000000030 [ 32.224398][ T36] audit: type=1400 audit(1787028348.320:67): avc: denied { mount } for pid=313 comm="syz-executor108" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 32.234405][ T313] RBP: ffffc9000124f6b0 R08: ffff88810773cc00 R09: 0000000000000002 [ 32.234425][ T313] R10: 0000000000000025 R11: 0000000000000000 R12: ffffffff86364b60 [ 32.261532][ T36] audit: type=1400 audit(1787028348.430:68): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.265054][ T313] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 32.288626][ T36] audit: type=1400 audit(1787028348.430:69): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.295693][ T313] FS: 0000555574bfc3c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.304491][ T36] audit: type=1400 audit(1787028348.430:70): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.326062][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.326084][ T313] CR2: 0000000000000000 CR3: 00000001315ec000 CR4: 00000000003526b0 [ 32.326103][ T313] Call Trace: [ 32.326111][ T313] [ 32.326123][ T313] ? __cfi_vsscanf+0x10/0x10 [ 32.335185][ T36] audit: type=1400 audit(1787028348.430:71): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.342076][ T313] sscanf+0xe3/0x150 [ 32.342108][ T313] ? __cfi_sscanf+0x10/0x10 [ 32.364411][ T36] audit: type=1400 audit(1787028348.430:72): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.371778][ T313] ? mutex_lock_interruptible+0x97/0x1d0 [ 32.393625][ T36] audit: type=1400 audit(1787028348.430:73): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.401923][ T313] ? __asan_memcpy+0x5a/0x80 [ 32.401952][ T313] split_huge_pages_write+0x3c7/0x1220 [ 32.535758][ T313] ? __kasan_check_write+0x18/0x20 [ 32.540881][ T313] ? enqueue_task+0x1049/0x1100 [ 32.545751][ T313] ? __cfi_split_huge_pages_write+0x10/0x10 [ 32.551652][ T313] ? __kasan_check_write+0x18/0x20 [ 32.556777][ T313] ? __switch_to+0xc6b/0x1320 [ 32.561491][ T313] ? __kasan_check_write+0x18/0x20 [ 32.566642][ T313] ? debugfs_file_get+0x3be/0x590 [ 32.571691][ T313] full_proxy_write+0x125/0x1e0 [ 32.576592][ T313] ? __cfi_full_proxy_write+0x10/0x10 [ 32.581976][ T313] vfs_write+0x3c1/0xfd0 [ 32.586229][ T313] ? __kasan_check_write+0x18/0x20 [ 32.591348][ T313] ? _raw_spin_lock_irq+0x93/0x120 [ 32.596559][ T313] ? __cfi_vfs_write+0x10/0x10 [ 32.601333][ T313] ? cgroup_update_frozen+0x160/0x980 [ 32.606735][ T313] ? __asan_memset+0x39/0x50 [ 32.611342][ T313] ? ptrace_stop+0x6d6/0x8f0 [ 32.615975][ T313] ? __kasan_check_read+0x15/0x20 [ 32.621028][ T313] ksys_write+0x145/0x260 [ 32.625371][ T313] ? __cfi_ksys_write+0x10/0x10 [ 32.630228][ T313] ? __kasan_check_write+0x18/0x20 [ 32.635343][ T313] __x64_sys_write+0x7f/0x90 [ 32.639952][ T313] x64_sys_call+0x271c/0x2ee0 [ 32.644629][ T313] do_syscall_64+0x57/0xf0 [ 32.649053][ T313] ? clear_bhb_loop+0x50/0xa0 [ 32.653739][ T313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.659640][ T313] RIP: 0033:0x7f9875566ef9 [ 32.664067][ T313] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 32.683676][ T313] RSP: 002b:00007ffdc7b80728 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.692119][ T313] RAX: ffffffffffffffda RBX: 0000200000000300 RCX: 00007f9875566ef9 [ 32.700095][ T313] RDX: 000000000000002f RSI: 0000000000000000 RDI: 000000000000002e [ 32.708066][ T313] RBP: 0000200000000000 R08: 0000000000000008 R09: 00007ffdc7b80868 [ 32.716039][ T313] R10: 0000000000000008 R11: 0000000000000246 R12: 0067756265642f2e [ 32.724008][ T313] R13: 0000000000000002 R14: 00007f98755f7ca0 R15: 0000000000000002 [ 32.732048][ T313] [ 32.735102][ T313] Modules linked in: [ 32.739208][ T313] ---[ end trace 0000000000000000 ]--- [ 32.744789][ T313] RIP: 0010:vsscanf+0x18c/0x24b0 [ 32.749954][ T313] Code: 48 c7 c6 b0 b5 e3 87 e8 22 43 e6 fb 41 83 fe 25 74 4d 45 85 f6 0f 84 a4 21 00 00 48 ff c3 48 89 5c 24 58 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 8e 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 32.769662][ T313] RSP: 0018:ffffc9000124f5a0 EFLAGS: 00010246 [ 32.775772][ T313] RAX: 0000000000000000 RBX: ffffffff86364b61 RCX: 0000000000000001 [ 32.783820][ T313] RDX: ffffffff85a1341e RSI: ffffffff87e3b5b0 RDI: 0000000000000030 [ 32.791842][ T313] RBP: ffffc9000124f6b0 R08: ffff88810773cc00 R09: 0000000000000002 [ 32.799880][ T313] R10: 0000000000000025 R11: 0000000000000000 R12: ffffffff86364b60 [ 32.807902][ T313] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 32.815876][ T313] FS: 0000555574bfc3c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.824867][ T313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.831496][ T313] CR2: 0000000000000000 CR3: 00000001315ec000 CR4: 00000000003526b0 [ 32.839549][ T313] Kernel panic - not syncing: Fatal exception [ 32.846220][ T313] Kernel Offset: disabled [ 32.850554][ T313] Rebooting in 86400 seconds..