ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor1529888825 <...> syzkaller syzkaller login: [ 21.644879][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 21.644896][ T36] audit: type=1400 audit(1786154197.010:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.649537][ T36] audit: type=1400 audit(1786154197.010:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.653963][ T36] audit: type=1400 audit(1786154197.020:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[2764]" dev="pipefs" ino=2764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 21.657608][ T36] audit: type=1400 audit(1786154197.020:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.660646][ T36] audit: type=1400 audit(1786154197.020:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor1529888825", ["ci2-android-6-12-rust/syz-executor1529888825"], 0x7ffe7674eeb0 /* 10 vars */) = 0 brk(NULL) = 0x555580f02000 brk(0x555580f02d40) = 0x555580f02d40 arch_prctl(ARCH_SET_FS, 0x555580f023c0) = 0 set_tid_address(0x555580f02690) = 312 set_robust_list(0x555580f026a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor1529888825", 4096) = 50 getrandom("\xec\xfb\x4c\xf5\x46\x5a\xe6\x7f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555580f02d40 brk(0x555580f23d40) = 0x555580f23d40 brk(0x555580f24000) = 0x555580f24000 mprotect(0x7fc0b7743000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18) = 18 executing program mkdir("sys", 0777) = 0 mount(NULL, "sys", "sysfs", 0, NULL) = 0 openat(AT_FDCWD, "sys/bus/pci/devices/0000:00:04.0/config", O_RDWR) = 3 [ 31.867608][ T36] audit: type=1400 audit(1786154207.240:64): avc: denied { execmem } for pid=312 comm="syz-executor152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.891541][ T36] audit: type=1400 audit(1786154207.240:65): avc: denied { mounton } for pid=312 comm="syz-executor152" path="/root/sys" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.914488][ T36] audit: type=1400 audit(1786154207.240:66): avc: denied { mount } for pid=312 comm="syz-executor152" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.037076][ T36] audit: type=1400 audit(1786154207.410:67): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.170261][ T312] ------------[ cut here ]------------ [ 32.175773][ T312] WARNING: CPU: 0 PID: 312 at drivers/virtio/virtio.c:372 virtio_dev_remove+0x1b6/0x1f0 [ 32.185540][ T312] Modules linked in: [ 32.189496][ T312] CPU: 0 UID: 0 PID: 312 Comm: syz-executor152 Not tainted syzkaller #0 4d4a838cf2fc485b043991145ccf8426a0241c16 [ 32.201453][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.211656][ T312] RIP: 0010:virtio_dev_remove+0x1b6/0x1f0 [ 32.217444][ T312] Code: db 41 ba a5 a3 a2 a7 45 03 53 f1 74 02 0f 0b 2e e8 0f 3b eb 1c 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 ca ea 71 fe <0f> 0b 43 80 3c 2c 00 0f 85 65 ff ff ff e9 68 ff ff ff 44 89 e1 80 [ 32.237089][ T312] RSP: 0018:ffffc9000113f7a0 EFLAGS: 00010293 [ 32.243183][ T312] RAX: ffffffff831586f6 RBX: ffff888107efa390 RCX: ffff888103b4cc00 [ 32.251206][ T312] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 0000000000000000 [ 32.259232][ T312] RBP: ffffc9000113f7c8 R08: ffffffff81ea971f R09: ffffffff8109c15c [ 32.267278][ T312] R10: 0000000000000000 R11: ffffffff83173e70 R12: 1ffff11020fdf472 [ 32.275273][ T312] R13: dffffc0000000000 R14: ffff888107efa000 R15: 00000000000000ff [ 32.283312][ T312] FS: 0000555580f023c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.292284][ T312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.298914][ T312] CR2: 000055da8ccce660 CR3: 00000001047a6000 CR4: 00000000003526b0 [ 32.306926][ T312] Call Trace: [ 32.310215][ T312] [ 32.313143][ T312] ? __cfi_virtio_dev_remove+0x10/0x10 [ 32.318647][ T312] device_release_driver_internal+0x4ad/0x830 [ 32.324739][ T312] device_release_driver+0x1d/0x30 [ 32.329882][ T312] bus_remove_device+0x34f/0x370 [ 32.334833][ T312] device_del+0x583/0xcf0 [ 32.339234][ T312] ? __cfi_device_del+0x10/0x10 [ 32.344118][ T312] ? pci_device_is_present+0x175/0x240 [ 32.349624][ T312] ? __cfi_pci_device_is_present+0x10/0x10 [ 32.355458][ T312] ? _raw_spin_lock_irq+0x93/0x120 [ 32.360617][ T312] device_unregister+0x19/0x40 [ 32.365400][ T312] unregister_virtio_device+0x38/0x70 [ 32.370804][ T312] virtio_pci_remove+0x80/0xf0 [ 32.375628][ T312] pci_device_remove+0xab/0x260 [ 32.380484][ T312] ? __cfi_pci_device_remove+0x10/0x10 [ 32.385980][ T312] device_release_driver_internal+0x4ad/0x830 [ 32.392080][ T312] device_release_driver+0x1d/0x30 [ 32.397233][ T312] pci_stop_bus_device+0x10c/0x160 [ 32.402365][ T312] pci_stop_and_remove_bus_device_locked+0x1e/0x40 [ 32.408905][ T312] remove_store+0xe6/0x150 [ 32.413375][ T312] ? __cfi_remove_store+0x10/0x10 [ 32.418488][ T312] ? __virt_addr_valid+0x2a1/0x370 [ 32.423635][ T312] ? __kasan_check_write+0x18/0x20 [ 32.428805][ T312] ? __cfi_remove_store+0x10/0x10 [ 32.433856][ T312] dev_attr_store+0x76/0xa0 [ 32.438405][ T312] ? __cfi_dev_attr_store+0x10/0x10 [ 32.443624][ T312] sysfs_kf_write+0x13e/0x160 [ 32.448343][ T312] ? __cfi_sysfs_kf_write+0x10/0x10 [ 32.453571][ T312] kernfs_fop_write_iter+0x319/0x510 [ 32.458902][ T312] vfs_write+0x75f/0xfd0 [ 32.463166][ T312] ? __cfi_vfs_write+0x10/0x10 [ 32.467983][ T312] ? cgroup_update_frozen+0x160/0x980 [ 32.473390][ T312] ? ptrace_stop+0x6d6/0x8f0 [ 32.478038][ T312] ? __kasan_check_read+0x15/0x20 [ 32.483080][ T312] ksys_write+0x145/0x260 [ 32.487444][ T312] ? __cfi_ksys_write+0x10/0x10 [ 32.492325][ T312] ? __kasan_check_write+0x18/0x20 [ 32.497492][ T312] __x64_sys_write+0x7f/0x90 [ 32.502099][ T312] x64_sys_call+0x271c/0x2ee0 [ 32.506809][ T312] do_syscall_64+0x57/0xf0 [ 32.511251][ T312] ? clear_bhb_loop+0x50/0xa0 [ 32.515993][ T312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.521937][ T312] RIP: 0033:0x7fc0b76b2cb9 [ 32.526434][ T312] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 32.546089][ T312] RSP: 002b:00007ffdfe9fe9e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.554506][ T312] RAX: ffffffffffffffda RBX: 00007ffdfe9feb18 RCX: 00007fc0b76b2cb9 [ 32.562522][ T312] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 32.570522][ T312] RBP: 0000000000000001 R08: 00007ffdfe9feb18 R09: 00007ffdfe9feb18 [ 32.578533][ T312] R10: 00007ffdfe9feb18 R11: 0000000000000246 R12: 00007ffdfe9feb08 [ 32.586568][ T312] R13: 0000000000000002 R14: 00007fc0b7743ca0 R15: 0000000000000002 [ 32.594566][ T312] [ 32.597638][ T312] ---[ end trace 0000000000000000 ]---