ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor4191030362 <...> Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor4191030362", ["ci2-android-6-12-rust/syz-executor4191030362"], 0x7ffeb37e7ab0 /* 10 vars */) = 0 brk(NULL) = 0x555568432000 brk(0x555568432d40) = 0x555568432d40 arch_prctl(ARCH_SET_FS, 0x5555684323c0) = 0 set_tid_address(0x555568432690) = 312 set_robust_list(0x5555684326a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor4191030362", 4096) = 50 getrandom("\x18\xd0\x02\x32\xba\x1c\xf1\x6c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555568432d40 brk(0x555568453d40) = 0x555568453d40 brk(0x555568454000) = 0x555568454000 mprotect(0x7fc74731a000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x5555684326a0, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x555568432690) = 313 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 313] getrandom( [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] <... getrandom resumed>"\x9a\x2e\xb1\xbf\xf8\x26\xe6\xbd", 8, GRND_NONBLOCK) = 8 ci2-android-6-12-rust/strace-static-x86_64: Process 314 attached [pid 313] mkdir("./syzkaller.YaalSI", 0700 [pid 314] set_robust_list(0x5555684326a0, 24 [pid 313] <... mkdir resumed>) = 0 [pid 314] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x555568432690) = 314 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 314] getrandom( [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 314] <... getrandom resumed>"\x9b\x6c\xda\x15\x41\xc6\x90\x1e", 8, GRND_NONBLOCK) = 8 [pid 313] chmod("./syzkaller.YaalSI", 0777 [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] mkdir("./syzkaller.Zcf3JZ", 0700 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... mkdir resumed>) = 0 [pid 313] <... chmod resumed>) = 0 [pid 313] chdir("./syzkaller.YaalSI") = 0 [pid 313] mkdir("./0", 0777 [pid 314] chmod("./syzkaller.Zcf3JZ", 0777) = 0 [pid 312] <... clone resumed>, child_tidptr=0x555568432690) = 315 [pid 314] chdir("./syzkaller.Zcf3JZ" [pid 313] <... mkdir resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... chdir resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] mkdir("./0", 0777 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] <... mkdir resumed>) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-12-rust/strace-static-x86_64: Process 315 attached , [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 316 attached [pid 315] set_robust_list(0x5555684326a0, 24 [pid 312] <... clone resumed>, child_tidptr=0x555568432690) = 316 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555568432690) = 317 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] <... set_robust_list resumed>) = 0 [pid 316] set_robust_list(0x5555684326a0, 24 [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... set_robust_list resumed>) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x5555684326a0, 24 [pid 314] <... clone resumed>, child_tidptr=0x555568432690) = 318 [pid 318] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 318] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] chdir("./0" [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] <... chdir resumed>) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 315] getrandom("\x89\x18\x9b\x89\x23\x9f\x9d\x9f", 8, GRND_NONBLOCK) = 8 [pid 318] <... openat resumed>) = 3 [pid 316] getrandom( [pid 315] mkdir("./syzkaller.xNAl5Z", 0700 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] symlink("/dev/binderfs", "./binderfs" [pid 315] <... mkdir resumed>) = 0 [pid 316] <... getrandom resumed>"\x66\xe4\x9a\xb4\x39\xd0\xb4\x55", 8, GRND_NONBLOCK) = 8 [pid 318] <... symlink resumed>) = 0 executing program [pid 316] mkdir("./syzkaller.E8wrff", 0700 [pid 315] chmod("./syzkaller.xNAl5Z", 0777 [pid 318] write(1, "executing program\n", 18) = 18 [pid 318] mkdir("./config", 0777 [pid 315] <... chmod resumed>) = 0 [pid 316] <... mkdir resumed>) = 0 [pid 315] chdir("./syzkaller.xNAl5Z") = 0 [pid 316] chmod("./syzkaller.E8wrff", 0777 [pid 315] mkdir("./0", 0777 [pid 318] <... mkdir resumed>) = 0 [pid 316] <... chmod resumed>) = 0 [pid 318] mount(NULL, "./config", "configfs", 0, NULL [pid 315] <... mkdir resumed>) = 0 [pid 316] chdir("./syzkaller.E8wrff" [pid 318] <... mount resumed>) = 0 [pid 316] <... chdir resumed>) = 0 [ 32.645307][ T36] audit: type=1400 audit(1785549754.670:64): avc: denied { execmem } for pid=312 comm="syz-executor419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[] [pid 318] mkdir("./config/usb_gadget/g2", 0777 [pid 315] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 318] <... mkdir resumed>) = 0 [pid 316] mkdir("./0", 0777 [pid 318] rmdir("./config/usb_gadget/g2") = 0 [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 314] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 314] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 314] getdents64(3, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 314] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./0/binderfs") = 0 [pid 314] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-6-12-rust/strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x5555684326a0, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] chdir("./0") = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 317] write(1, "executing program\n", 18) = 18 [pid 317] mkdir("./config", 0777) = 0 [pid 317] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 317] mkdir("./config/usb_gadget/g2", 0777) = 0 [pid 317] rmdir("./config/usb_gadget/g2") = 0 [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 314] <... umount2 resumed>) = 0 [pid 314] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] <... mkdir resumed>) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./0/config", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./0/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 314] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 314] getdents64(4 executing program [pid 316] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-12-rust/strace-static-x86_64: Process 319 attached [pid 315] <... clone resumed>, child_tidptr=0x555568432690) = 319 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 313] <... restart_syscall resumed>) = 0 [pid 314] getdents64(4 [pid 313] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 319] set_robust_list(0x5555684326a0, 24 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 319] <... set_robust_list resumed>) = 0 [pid 314] close(4 [pid 313] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 319] rt_sigprocmask(SIG_SETMASK, [] [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... close resumed>) = 0 [pid 313] <... openat resumed>) = 3 [pid 319] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] rmdir("./0/config" [pid 313] fstat(3 [pid 319] chdir("./0" [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... rmdir resumed>) = 0 [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] getdents64(3 [pid 319] <... chdir resumed>) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 ci2-android-6-12-rust/strace-static-x86_64: Process 320 attached [pid 319] setpgid(0, 0 [pid 314] getdents64(3 [pid 313] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 319] <... setpgid resumed>) = 0 [pid 320] set_robust_list(0x5555684326a0, 24 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 320] <... set_robust_list resumed>) = 0 [pid 319] <... openat resumed>) = 3 [pid 314] close(3 [pid 313] newfstatat(AT_FDCWD, "./0/binderfs" [pid 320] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... close resumed>) = 0 [pid 313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 320] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 319] write(3, "1000", 4 [pid 314] rmdir("./0" [pid 313] unlink("./0/binderfs" [pid 320] chdir("./0" [pid 319] <... write resumed>) = 4 [pid 314] <... rmdir resumed>) = 0 [pid 313] <... unlink resumed>) = 0 [pid 319] close(3 [pid 320] <... chdir resumed>) = 0 [pid 316] <... clone resumed>, child_tidptr=0x555568432690) = 320 [pid 319] <... close resumed>) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 319] symlink("/dev/binderfs", "./binderfs" [pid 320] <... prctl resumed>) = 0 [pid 319] <... symlink resumed>) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] mkdir("./1", 0777 [pid 313] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... mkdir resumed>) = 0 [pid 320] <... openat resumed>) = 3 [pid 313] <... umount2 resumed>) = 0 [pid 319] write(1, "executing program\n", 18 executing program [pid 313] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 320] write(3, "1000", 4 [pid 319] <... write resumed>) = 18 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 320] <... write resumed>) = 4 [pid 319] mkdir("./config", 0777 [pid 320] close(3 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 313] newfstatat(AT_FDCWD, "./0/config" [pid 320] <... close resumed>) = 0 [pid 319] <... mkdir resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 320] symlink("/dev/binderfs", "./binderfs" [pid 313] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 320] <... symlink resumed>) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 319] mount(NULL, "./config", "configfs", 0, NULL [pid 313] openat(AT_FDCWD, "./0/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 320] write(1, "executing program\n", 18 [pid 319] <... mount resumed>) = 0 [pid 320] <... write resumed>) = 18 [pid 313] <... openat resumed>) = 4 [pid 320] mkdir("./config", 0777 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 319] mkdir("./config/usb_gadget/g2", 0777 [pid 320] <... mkdir resumed>) = 0 [pid 319] <... mkdir resumed>) = 0 [pid 313] getdents64(4 [pid 314] <... clone resumed>, child_tidptr=0x555568432690) = 322 [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 313] getdents64(4 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 320] mount(NULL, "./config", "configfs", 0, NULL [pid 319] rmdir("./config/usb_gadget/g2" [pid 313] close(4 [pid 319] <... rmdir resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 313] rmdir("./0/config") = 0 [pid 320] <... mount resumed>) = 0 executing program [ 32.672283][ T36] audit: type=1400 audit(1785549754.700:65): avc: denied { mounton } for pid=318 comm="syz-executor419" path="/root/syzkaller.Zcf3JZ/0/config" dev="sda1" ino=2032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.706196][ T36] audit: type=1400 audit(1785549754.700:66): avc: denied { mount } for pid=318 comm="syz-executor419" name="/" dev="configfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [pid 320] mkdir("./config/usb_gadget/g2", 0777 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] getdents64(3ci2-android-6-12-rust/strace-static-x86_64: Process 322 attached [pid 320] <... mkdir resumed>) = 0 [pid 319] exit_group(0 [pid 313] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 319] <... exit_group resumed>) = ? [pid 313] rmdir("./0" [pid 319] +++ exited with 0 +++ [pid 320] rmdir("./config/usb_gadget/g2" [pid 313] <... rmdir resumed>) = 0 [pid 320] <... rmdir resumed>) = 0 [pid 313] mkdir("./1", 0777) = 0 [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x5555684326a0, 24 [pid 322] set_robust_list(0x5555684326a0, 24 [pid 323] <... set_robust_list resumed>) = 0 [pid 323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 323] chdir("./1") = 0 [pid 313] <... clone resumed>, child_tidptr=0x555568432690) = 323 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 322] <... set_robust_list resumed>) = 0 [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 323] <... prctl resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 322] rt_sigprocmask(SIG_SETMASK, [] [pid 323] <... openat resumed>) = 3 [pid 323] write(3, "1000", 4 [pid 322] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 323] <... write resumed>) = 4 [pid 323] close(3) = 0 [pid 322] chdir("./1" [pid 323] symlink("/dev/binderfs", "./binderfs" [pid 315] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 323] <... symlink resumed>) = 0 [pid 322] <... chdir resumed>) = 0 [pid 323] write(1, "executing program\n", 18 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 323] <... write resumed>) = 18 executing program [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 323] mkdir("./config", 0777 [pid 315] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 322] <... prctl resumed>) = 0 [pid 323] <... mkdir resumed>) = 0 [pid 322] setpgid(0, 0 [pid 315] <... openat resumed>) = 3 [pid 323] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 323] mkdir("./config/usb_gadget/g2", 0777) = 0 [pid 323] rmdir("./config/usb_gadget/g2") = 0 [pid 323] exit_group(0) = ? [pid 323] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 322] <... setpgid resumed>) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 [pid 322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 313] <... restart_syscall resumed>) = 0 [pid 313] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 322] write(1, "executing program\n", 18 [pid 313] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 322] <... write resumed>) = 18 [pid 313] <... openat resumed>) = 3 [pid 322] mkdir("./config", 0777 executing program [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 315] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] getdents64(3 [pid 322] <... mkdir resumed>) = 0 [pid 313] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 313] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 322] mount(NULL, "./config", "configfs", 0, NULL [pid 313] newfstatat(AT_FDCWD, "./1/binderfs" [pid 322] <... mount resumed>) = 0 [pid 313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 322] mkdir("./config/usb_gadget/g2", 0777 [pid 313] unlink("./1/binderfs" [pid 322] <... mkdir resumed>) = 0 [pid 313] <... unlink resumed>) = 0 [pid 313] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 322] rmdir("./config/usb_gadget/g2") = 0 [ 32.729917][ T36] audit: type=1400 audit(1785549754.700:67): avc: denied { search } for pid=318 comm="syz-executor419" name="/" dev="configfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.755832][ T36] audit: type=1400 audit(1785549754.700:68): avc: denied { write } for pid=318 comm="syz-executor419" name="usb_gadget" dev="configfs" ino=1813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 322] exit_group(0) = ? [pid 322] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 315] getdents64(3 [pid 313] <... umount2 resumed>) = 0 [pid 313] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 314] <... restart_syscall resumed>) = 0 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./1/config", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] openat(AT_FDCWD, "./1/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 314] fstat(3 [pid 313] <... openat resumed>) = 4 [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 314] getdents64(3 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 314] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 313] getdents64(4, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 314] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] getdents64(4 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./1/binderfs" [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] unlink("./1/binderfs" [pid 313] close(4 [pid 314] <... unlink resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 313] rmdir("./1/config" [pid 314] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... rmdir resumed>) = 0 [pid 313] getdents64(3, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./1") = 0 [pid 313] mkdir("./2", 0777) = 0 [pid 315] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... umount2 resumed>) = 0 [pid 314] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] newfstatat(AT_FDCWD, "./1/config", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./1/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 314] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[] [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] getdents64(4 [pid 313] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 314] getdents64(4 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 324 attached [pid 314] close(4) = 0 [pid 324] set_robust_list(0x5555684326a0, 24) = 0 [pid 314] rmdir("./1/config" [pid 324] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rmdir resumed>) = 0 [pid 324] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 324] chdir("./2") = 0 [pid 313] <... clone resumed>, child_tidptr=0x555568432690) = 324 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] getdents64(3 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 324] <... prctl resumed>) = 0 [pid 314] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 324] setpgid(0, 0) = 0 [pid 314] close(3 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... close resumed>) = 0 [pid 324] <... openat resumed>) = 3 [pid 314] rmdir("./1" [pid 324] write(3, "1000", 4 [pid 314] <... rmdir resumed>) = 0 [pid 324] <... write resumed>) = 4 [pid 324] close(3) = 0 [pid 324] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 324] write(1, "executing program\n", 18 [pid 314] mkdir("./2", 0777 [pid 324] <... write resumed>) = 18 [pid 314] <... mkdir resumed>) = 0 [pid 324] mkdir("./config", 0777) = 0 [ 32.779467][ T36] audit: type=1400 audit(1785549754.700:69): avc: denied { add_name } for pid=318 comm="syz-executor419" name="g2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.801043][ T36] audit: type=1400 audit(1785549754.700:70): avc: denied { create } for pid=318 comm="syz-executor419" name="g2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 32.822490][ T36] audit: type=1400 audit(1785549754.700:71): avc: denied { remove_name } for pid=318 comm="syz-executor419" name="g2" dev="configfs" ino=2430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 315] newfstatat(AT_FDCWD, "./0/binderfs" [pid 316] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 324] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 324] mkdir("./config/usb_gadget/g2", 0777) = 0 [pid 314] <... clone resumed>, child_tidptr=0x555568432690) = 325 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] rmdir("./config/usb_gadget/g2") = 0 [pid 324] exit_group(0) = ? [pid 324] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 313] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] getdents64(3 [pid 315] unlink("./0/binderfs" [pid 313] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 ci2-android-6-12-rust/strace-static-x86_64: Process 325 attached [pid 316] <... openat resumed>) = 3 [pid 313] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] fstat(3 [pid 315] <... unlink resumed>) = 0 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 325] set_robust_list(0x5555684326a0, 24 [pid 315] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] <... set_robust_list resumed>) = 0 [pid 316] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... umount2 resumed>) = 0 [pid 313] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./2/binderfs") = 0 [pid 313] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] getdents64(3, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 316] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 316] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] unlink("./0/binderfs") = 0 [pid 316] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 325] chdir("./2") = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 325] write(1, "executing program\n", 18) = 18 executing program [pid 325] mkdir("./config", 0777 [pid 315] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./0/config" [pid 313] <... umount2 resumed>) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] <... umount2 resumed>) = 0 [pid 315] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 325] <... mkdir resumed>) = 0 [pid 316] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./2/config" [pid 325] mount(NULL, "./config", "configfs", 0, NULL [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] openat(AT_FDCWD, "./0/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] newfstatat(AT_FDCWD, "./0/config" [pid 313] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 325] <... mount resumed>) = 0 [pid 316] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] <... openat resumed>) = 4 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 325] mkdir("./config/usb_gadget/g2", 0777 [pid 316] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] fstat(4 [pid 313] openat(AT_FDCWD, "./2/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 315] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] <... openat resumed>) = 4 [pid 316] openat(AT_FDCWD, "./0/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] fstat(4 [pid 316] <... openat resumed>) = 4 [pid 315] getdents64(4 [pid 316] fstat(4 [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 316] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 315] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4 [pid 315] getdents64(4 [pid 316] getdents64(4 [pid 315] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 316] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4 [pid 315] close(4 [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 316] getdents64(4 [pid 313] close(4 [pid 316] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 315] <... close resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 316] close(4 [pid 315] rmdir("./0/config") = 0 [pid 316] <... close resumed>) = 0 [pid 315] getdents64(3 [pid 313] rmdir("./2/config" [pid 316] rmdir("./0/config" [pid 315] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] <... rmdir resumed>) = 0 [pid 325] <... mkdir resumed>) = 0 [pid 316] <... rmdir resumed>) = 0 [pid 315] close(3 [pid 325] rmdir("./config/usb_gadget/g2" [pid 315] <... close resumed>) = 0 [pid 316] getdents64(3 [pid 313] getdents64(3 [pid 325] <... rmdir resumed>) = 0 [pid 316] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 315] rmdir("./0" [pid 325] exit_group(0 [pid 316] close(3 [pid 315] <... rmdir resumed>) = 0 [pid 313] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 325] <... exit_group resumed>) = ? [pid 315] mkdir("./1", 0777 [pid 316] <... close resumed>) = 0 [pid 313] close(3 [pid 316] rmdir("./0" [pid 313] <... close resumed>) = 0 [pid 325] +++ exited with 0 +++ [pid 316] <... rmdir resumed>) = 0 [pid 315] <... mkdir resumed>) = 0 [pid 313] rmdir("./2" [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 316] mkdir("./1", 0777 [pid 313] <... rmdir resumed>) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x5555684326a0, 24) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... mkdir resumed>) = 0 [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 326] chdir("./1") = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 315] <... clone resumed>, child_tidptr=0x555568432690) = 326 [pid 314] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] mkdir("./3", 0777 [pid 326] setpgid(0, 0 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 326] <... setpgid resumed>) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] <... mkdir resumed>) = 0 [pid 326] write(3, "1000", 4) = 4 [pid 314] <... openat resumed>) = 3 [pid 326] close(3) = 0 [pid 326] symlink("/dev/binderfs", "./binderfs") = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 327 attached executing program [pid 326] write(1, "executing program\n", 18 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] fstat(3 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[] [pid 327] set_robust_list(0x5555684326a0, 24 [pid 326] <... write resumed>) = 18 [pid 316] <... clone resumed>, child_tidptr=0x555568432690) = 327 [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 327] <... set_robust_list resumed>) = 0 [pid 326] mkdir("./config", 0777 [pid 314] getdents64(3 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 327] rt_sigprocmask(SIG_SETMASK, [] [pid 326] <... mkdir resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 327] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 327] chdir("./1" [pid 313] <... clone resumed>, child_tidptr=0x555568432690) = 328 ci2-android-6-12-rust/strace-static-x86_64: Process 328 attached [pid 327] <... chdir resumed>) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 328] set_robust_list(0x5555684326a0, 24 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 314] newfstatat(AT_FDCWD, "./2/binderfs" [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 328] <... set_robust_list resumed>) = 0 [pid 327] <... prctl resumed>) = 0 [pid 326] mount(NULL, "./config", "configfs", 0, NULL [pid 328] rt_sigprocmask(SIG_SETMASK, [] [pid 326] <... mount resumed>) = 0 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 326] mkdir("./config/usb_gadget/g2", 0777 [pid 328] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 327] setpgid(0, 0 [pid 314] unlink("./2/binderfs" [pid 328] chdir("./3" [pid 327] <... setpgid resumed>) = 0 [pid 326] <... mkdir resumed>) = 0 [pid 314] <... unlink resumed>) = 0 [pid 326] rmdir("./config/usb_gadget/g2") = 0 [pid 326] exit_group(0) = ? [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] <... chdir resumed>) = 0 [pid 314] <... umount2 resumed>) = 0 [pid 327] <... openat resumed>) = 3 [pid 314] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 327] write(3, "1000", 4 [pid 328] <... prctl resumed>) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 328] setpgid(0, 0 [pid 327] <... write resumed>) = 4 [pid 314] newfstatat(AT_FDCWD, "./2/config" [pid 328] <... setpgid resumed>) = 0 [pid 327] close(3 [pid 314] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 327] <... close resumed>) = 0 [pid 326] +++ exited with 0 +++ [pid 314] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 327] symlink("/dev/binderfs", "./binderfs" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 328] <... openat resumed>) = 3 [pid 327] <... symlink resumed>) = 0 [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 314] openat(AT_FDCWD, "./2/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 314] <... openat resumed>) = 4 [pid 328] write(3, "1000", 4 [pid 327] write(1, "executing program\n", 18 [pid 314] fstat(4 [pid 328] <... write resumed>) = 4 executing program [pid 328] close(3 [pid 327] <... write resumed>) = 18 [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 328] <... close resumed>) = 0 [pid 327] mkdir("./config", 0777 [pid 328] symlink("/dev/binderfs", "./binderfs" [pid 314] getdents64(4 [pid 328] <... symlink resumed>) = 0 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 328] write(1, "executing program\n", 18 executing program [pid 327] <... mkdir resumed>) = 0 [pid 314] getdents64(4 [pid 328] <... write resumed>) = 18 [pid 327] mount(NULL, "./config", "configfs", 0, NULL [pid 328] mkdir("./config", 0777 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 327] <... mount resumed>) = 0 [pid 327] mkdir("./config/usb_gadget/g2", 0777 [pid 314] close(4 [pid 328] <... mkdir resumed>) = 0 [pid 314] <... close resumed>) = 0 [pid 314] rmdir("./2/config" [pid 328] mount(NULL, "./config", "configfs", 0, NULL [pid 315] <... restart_syscall resumed>) = 0 [pid 328] <... mount resumed>) = 0 [pid 327] <... mkdir resumed>) = 0 [pid 314] <... rmdir resumed>) = 0 [pid 328] mkdir("./config/usb_gadget/g2", 0777 [pid 327] rmdir("./config/usb_gadget/g2" [pid 314] getdents64(3 [pid 328] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 327] <... rmdir resumed>) = 0 [pid 315] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 328] rmdir("./config/usb_gadget/g2") = -1 ENOENT (No such file or directory) [pid 328] exit_group(0 [pid 314] close(3 [pid 327] exit_group(0 [pid 328] <... exit_group resumed>) = ? [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... close resumed>) = 0 [pid 327] <... exit_group resumed>) = ? [pid 314] rmdir("./2" [pid 328] +++ exited with 0 +++ [pid 327] +++ exited with 0 +++ [pid 315] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 314] <... rmdir resumed>) = 0 [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 315] <... openat resumed>) = 3 [pid 315] fstat(3 [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 315] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 314] mkdir("./3", 0777 [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 315] getdents64(3, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 315] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 315] newfstatat(AT_FDCWD, "./1/binderfs" [pid 314] <... mkdir resumed>) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 315] unlink("./1/binderfs" [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] <... unlink resumed>) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 315] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-6-12-rust/strace-static-x86_64: Process 329 attached ) = 0 [pid 329] set_robust_list(0x5555684326a0, 24 [pid 315] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] <... clone resumed>, child_tidptr=0x555568432690) = 329 [pid 329] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 329] rt_sigprocmask(SIG_SETMASK, [] [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 329] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 329] chdir("./3" [pid 315] newfstatat(AT_FDCWD, "./1/config" [pid 329] <... chdir resumed>) = 0 [pid 315] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4 [pid 315] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 329] <... write resumed>) = 4 [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 329] close(3) = 0 [pid 315] openat(AT_FDCWD, "./1/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 315] <... openat resumed>) = 4 [pid 329] write(1, "executing program\n", 18 [pid 315] fstat(4 [pid 329] <... write resumed>) = 18 [pid 315] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 executing program [pid 315] getdents64(4 [pid 329] mkdir("./config", 0777 [pid 315] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 315] getdents64(4, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 329] <... mkdir resumed>) = 0 [pid 315] close(4 [pid 329] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 329] mkdir("./config/usb_gadget/g2", 0777 [pid 315] <... close resumed>) = 0 [pid 329] <... mkdir resumed>) = 0 [pid 315] rmdir("./1/config" [pid 329] rmdir("./config/usb_gadget/g2") = 0 [pid 329] exit_group(0) = ? [pid 329] +++ exited with 0 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 315] <... rmdir resumed>) = 0 [pid 315] getdents64(3, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 315] close(3) = 0 [pid 315] rmdir("./1") = 0 [ 32.845997][ T36] audit: type=1400 audit(1785549754.700:72): avc: denied { rmdir } for pid=318 comm="syz-executor419" name="g2" dev="configfs" ino=2430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.869594][ T36] audit: type=1400 audit(1785549754.710:73): avc: denied { unmount } for pid=314 comm="syz-executor419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [pid 315] mkdir("./2", 0777 [pid 316] <... restart_syscall resumed>) = 0 [pid 316] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... mkdir resumed>) = 0 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 315] rt_sigprocmask(SIG_BLOCK, ~[] [pid 316] <... openat resumed>) = 3 [pid 315] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 316] fstat(3 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 316] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 330 attached [pid 316] getdents64(3 [pid 330] set_robust_list(0x5555684326a0, 24 [pid 315] <... clone resumed>, child_tidptr=0x555568432690) = 330 [pid 330] <... set_robust_list resumed>) = 0 [pid 316] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 313] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 330] rt_sigprocmask(SIG_SETMASK, [] [pid 316] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 330] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] newfstatat(AT_FDCWD, "./1/binderfs" [pid 313] <... openat resumed>) = 3 [pid 330] chdir("./2" [pid 316] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 330] <... chdir resumed>) = 0 [pid 316] unlink("./1/binderfs" [pid 313] fstat(3 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] <... unlink resumed>) = 0 [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 330] <... prctl resumed>) = 0 [pid 314] <... restart_syscall resumed>) = 0 [pid 313] getdents64(3 [pid 330] setpgid(0, 0 [pid 316] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 330] <... setpgid resumed>) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] <... umount2 resumed>) = 0 [pid 313] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] <... openat resumed>) = 3 [pid 316] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] newfstatat(AT_FDCWD, "./3/binderfs" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] write(3, "1000", 4 [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 314] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 330] <... write resumed>) = 4 [pid 316] newfstatat(AT_FDCWD, "./1/config" [pid 314] <... openat resumed>) = 3 [pid 313] unlink("./3/binderfs" [pid 330] close(3 [pid 316] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] fstat(3 [pid 313] <... unlink resumed>) = 0 [pid 330] <... close resumed>) = 0 [pid 316] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] symlink("/dev/binderfs", "./binderfs" [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] <... symlink resumed>) = 0 [pid 316] openat(AT_FDCWD, "./1/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 330] write(1, "executing program\n", 18 [pid 316] <... openat resumed>) = 4 [pid 313] <... umount2 resumed>) = 0 [pid 330] <... write resumed>) = 18 executing program [pid 316] fstat(4 [pid 330] mkdir("./config", 0777 [pid 316] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 314] getdents64(3 [pid 330] <... mkdir resumed>) = 0 [pid 316] getdents64(4 [pid 314] <... getdents64 resumed>, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 330] mount(NULL, "./config", "configfs", 0, NULL [pid 316] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 314] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 330] <... mount resumed>) = 0 [pid 316] getdents64(4 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 314] newfstatat(AT_FDCWD, "./3/binderfs" [pid 330] mkdir("./config/usb_gadget/g2", 0777 [pid 314] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] close(4 [pid 314] unlink("./3/binderfs" [pid 313] newfstatat(AT_FDCWD, "./3/config" [pid 314] <... unlink resumed>) = 0 [pid 314] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 314] <... umount2 resumed>) = 0 [pid 313] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 330] <... mkdir resumed>) = 0 [pid 316] <... close resumed>) = 0 [pid 314] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] rmdir("./1/config" [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./3/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 330] rmdir("./config/usb_gadget/g2" [pid 316] <... rmdir resumed>) = 0 [pid 314] newfstatat(AT_FDCWD, "./3/config" [pid 316] getdents64(3 [pid 314] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] <... openat resumed>) = 4 [pid 330] <... rmdir resumed>) = 0 [pid 316] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 314] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] fstat(4 [pid 316] close(3 [pid 330] exit_group(0 [pid 316] <... close resumed>) = 0 [pid 314] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 330] <... exit_group resumed>) = ? [pid 316] rmdir("./1" [pid 314] openat(AT_FDCWD, "./3/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 316] <... rmdir resumed>) = 0 [pid 313] getdents64(4 [pid 314] fstat(4 [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 330] +++ exited with 0 +++ [pid 316] mkdir("./2", 0777 [pid 314] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 313] getdents64(4 [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 314] getdents64(4 [pid 313] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 2 entries */, 32768) = 48 [pid 313] close(4) = 0 [pid 314] getdents64(4 [pid 313] rmdir("./3/config" [pid 316] <... mkdir resumed>) = 0 [pid 314] <... getdents64 resumed>, 0x55556843b7a0 /* 0 entries */, 32768) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[] [pid 314] close(4 [pid 313] <... rmdir resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 314] <... close resumed>) = 0 [pid 313] getdents64(3 [pid 314] rmdir("./3/config" [pid 313] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] close(3 [pid 314] <... rmdir resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 314] getdents64(3ci2-android-6-12-rust/strace-static-x86_64: Process 331 attached [pid 313] rmdir("./3" [pid 316] <... clone resumed>, child_tidptr=0x555568432690) = 331 [pid 314] <... getdents64 resumed>, 0x555568433760 /* 0 entries */, 32768) = 0 [pid 313] <... rmdir resumed>) = 0 [pid 331] set_robust_list(0x5555684326a0, 24 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 331] <... set_robust_list resumed>) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [] [pid 314] close(3 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] mkdir("./4", 0777 [pid 331] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] chdir("./2" [pid 314] <... close resumed>) = 0 [pid 331] <... chdir resumed>) = 0 [pid 314] rmdir("./3" [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 314] <... rmdir resumed>) = 0 [pid 331] <... openat resumed>) = 3 [pid 313] <... mkdir resumed>) = 0 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] symlink("/dev/binderfs", "./binderfs" [pid 314] mkdir("./4", 0777 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[] [pid 314] <... mkdir resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 331] <... symlink resumed>) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[] [pid 331] write(1, "executing program\n", 18 [pid 314] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 331] <... write resumed>) = 18 executing program [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 332 attached ci2-android-6-12-rust/strace-static-x86_64: Process 333 attached [pid 331] mkdir("./config", 0777 [pid 333] set_robust_list(0x5555684326a0, 24) = 0 [pid 332] set_robust_list(0x5555684326a0, 24 [pid 314] <... clone resumed>, child_tidptr=0x555568432690) = 333 [pid 313] <... clone resumed>, child_tidptr=0x555568432690) = 332 [pid 333] rt_sigprocmask(SIG_SETMASK, [] [pid 332] <... set_robust_list resumed>) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 333] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] <... mkdir resumed>) = 0 [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 333] chdir("./4" [pid 332] rt_sigprocmask(SIG_SETMASK, [] [pid 333] <... chdir resumed>) = 0 [pid 332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 331] mount(NULL, "./config", "configfs", 0, NULL [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 332] chdir("./4" [pid 331] <... mount resumed>) = 0 [pid 333] <... prctl resumed>) = 0 [pid 332] <... chdir resumed>) = 0 [pid 333] setpgid(0, 0 [pid 331] mkdir("./config/usb_gadget/g2", 0777 [pid 333] <... setpgid resumed>) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] <... mkdir resumed>) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 332] write(3, "1000", 4 [pid 333] <... openat resumed>) = 3 [pid 332] <... write resumed>) = 4 [pid 331] rmdir("./config/usb_gadget/g2" [pid 333] write(3, "1000", 4 [pid 332] close(3) = 0 [pid 332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 332] write(1, "executing program\n", 18) = 18 executing program [pid 332] mkdir("./config", 0777) = 0 [pid 332] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 331] <... rmdir resumed>) = 0 [pid 333] <... write resumed>) = 4 [pid 332] mkdir("./config/usb_gadget/g2", 0777 [pid 333] close(3 [pid 331] exit_group(0 [pid 315] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] <... close resumed>) = 0 [pid 332] <... mkdir resumed>) = 0 [pid 333] symlink("/dev/binderfs", "./binderfs" [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 332] rmdir("./config/usb_gadget/g2" [pid 333] <... symlink resumed>) = 0 [pid 333] write(1, "executing program\n", 18 [pid 315] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 333] <... write resumed>) = 18 [pid 333] mkdir("./config", 0777 [pid 332] <... rmdir resumed>) = 0 [pid 315] <... openat resumed>) = 3 executing program [pid 332] exit_group(0) = ? [pid 331] <... exit_group resumed>) = ? [pid 315] fstat(3 [pid 332] +++ exited with 0 +++ [pid 331] +++ exited with 0 +++ [pid 315] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 333] <... mkdir resumed>) = 0 [pid 315] getdents64(3, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 315] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 333] mount(NULL, "./config", "configfs", 0, NULL [pid 315] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 333] <... mount resumed>) = 0 [pid 315] newfstatat(AT_FDCWD, "./2/binderfs" [pid 333] mkdir("./config/usb_gadget/g2", 0777 [pid 315] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 333] <... mkdir resumed>) = 0 [pid 315] unlink("./2/binderfs" [pid 333] rmdir("./config/usb_gadget/g2" [pid 315] <... unlink resumed>) = 0 [pid 313] <... restart_syscall resumed>) = 0 [pid 313] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 316] <... restart_syscall resumed>) = 0 [pid 313] getdents64(3, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 316] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 313] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 313] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 316] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 313] newfstatat(AT_FDCWD, "./4/binderfs" [pid 316] <... openat resumed>) = 3 [pid 313] <... newfstatat resumed>, {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 316] fstat(3 [pid 313] unlink("./4/binderfs") = 0 [pid 316] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 316] getdents64(3, 0x555568433760 /* 4 entries */, 32768) = 112 [pid 313] umount2("./4/config", MNT_FORCE|UMOUNT_NOFOLLOW [pid 316] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 32.959930][ T333] BUG: scheduling while atomic: syz-executor419/333/0x00000002 [ 32.967558][ T333] Modules linked in: [ 32.971616][ T333] CPU: 0 UID: 0 PID: 333 Comm: syz-executor419 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 32.971648][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.971671][ T333] Call Trace: [ 32.971679][ T333] [ 32.971688][ T333] __dump_stack+0x21/0x30 [ 32.971733][ T333] dump_stack_lvl+0x140/0x1c0 [ 32.971765][ T333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.971799][ T333] dump_stack+0x19/0x20 [ 32.971830][ T333] __schedule_bug+0x12b/0x200 [ 32.971856][ T333] ? find_proxy_task+0x2460/0x2460 [ 32.971881][ T333] ? kernel_text_address+0xa9/0xe0 [ 32.971912][ T333] ? __kernel_text_address+0x11/0x40 [ 32.971943][ T333] ? unwind_get_return_address+0x51/0x90 [ 32.971973][ T333] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 32.972001][ T333] __schedule+0xb85/0x20b0 [ 32.972031][ T333] ? stack_trace_save+0xaa/0x100 [ 32.972056][ T333] ? __sched_text_start+0x10/0x10 [ 32.972084][ T333] ? __kasan_check_read+0x15/0x20 [ 32.972105][ T333] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 32.972139][ T333] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 32.972172][ T333] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 32.972205][ T333] schedule+0xc5/0x240 [ 32.972232][ T333] schedule_preempt_disabled+0x14/0x30 [ 32.972262][ T333] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 32.972301][ T333] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 32.972336][ T333] ? try_to_wake_up+0x111a/0x1fd0 [ 32.972362][ T333] ? __kasan_check_write+0x18/0x20 [ 32.972385][ T333] ? wake_q_add_safe+0x29/0x100 [ 32.972419][ T333] ? cpus_share_resources+0xa0/0x130 [ 32.972445][ T333] ? rwsem_mark_wake+0x507/0x770 [ 32.972492][ T333] ? rwsem_read_trylock+0x275/0x5a0 [ 32.972521][ T333] ? wake_up_q+0x10a/0x1c0 [ 32.972540][ T333] ? downgrade_write+0x470/0x470 [ 32.972571][ T333] down_write+0x163/0x2b0 [ 32.972603][ T333] ? __cfi_down_write+0x10/0x10 [ 32.972634][ T333] ? down_read+0x7f/0xe0 [ 32.972666][ T333] ? __cfi_down_read+0x10/0x10 [ 32.972700][ T333] kernfs_remove_by_name_ns+0x8c/0x180 [ 32.972735][ T333] sysfs_unmerge_group+0xd7/0x130 [ 32.972762][ T333] dpm_sysfs_remove+0x7b/0xd0 [ 32.972792][ T333] device_del+0x241/0xcf0 [ 32.972825][ T333] ? __cfi_class_find_device+0x10/0x10 [ 32.972847][ T333] ? __cfi_device_del+0x10/0x10 [ 32.972879][ T333] ? __kasan_check_write+0x18/0x20 [ 32.972901][ T333] ? kobject_put+0x1cc/0x2a0 [ 32.972925][ T333] device_destroy+0xb0/0x100 [ 32.972958][ T333] ? __cfi_device_destroy+0x10/0x10 [ 32.972990][ T333] ? __kasan_check_write+0x18/0x20 [ 32.973014][ T333] android_device_destroy+0x118/0x180 [ 32.973047][ T333] gadgets_drop+0x1d/0x30 [ 32.973067][ T333] ? __cfi_gadgets_drop+0x10/0x10 [ 32.973088][ T333] configfs_rmdir+0x8b7/0x9b0 [ 32.973121][ T333] vfs_rmdir+0x3de/0x560 [ 32.973153][ T333] do_rmdir+0x29a/0x590 [ 32.973182][ T333] ? __cfi_do_rmdir+0x10/0x10 [ 32.973213][ T333] ? __kasan_check_write+0x18/0x20 [ 32.973236][ T333] __x64_sys_rmdir+0x4b/0x60 [ 32.973264][ T333] x64_sys_call+0xaf7/0x2ee0 [ 32.973286][ T333] do_syscall_64+0x57/0xf0 [ 32.973311][ T333] ? clear_bhb_loop+0x50/0xa0 [ 32.973343][ T333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.973374][ T333] RIP: 0033:0x7fc747286da9 [ 32.973411][ T333] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 32.973429][ T333] RSP: 002b:00007fff021c6598 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 32.973453][ T333] RAX: ffffffffffffffda RBX: 0032672f74656764 RCX: 00007fc747286da9 [ 32.973471][ T333] RDX: 00007fc747286da9 RSI: 00007fc747286da9 RDI: 0000200000000600 [ 32.973496][ T333] RBP: 0000000000000000 R08: 0000000000000009 R09: 0000000000000009 [ 32.973509][ T333] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff021c65bc [ 32.973524][ T333] R13: 00007fff021c65f0 R14: 00007fff021c65d0 R15: 0000000000000004 [ 32.973543][ T333] [ 32.974455][ T333] BUG: scheduling while atomic: syz-executor419/333/0x00000000 [ 33.370447][ T333] Modules linked in: [ 33.374398][ T333] CPU: 1 UID: 0 PID: 333 Comm: syz-executor419 Tainted: G W syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 33.374425][ T333] Tainted: [W]=WARN [ 33.374432][ T333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.374442][ T333] Call Trace: [ 33.374448][ T333] [ 33.374456][ T333] __dump_stack+0x21/0x30 [ 33.374484][ T333] dump_stack_lvl+0x140/0x1c0 [ 33.374506][ T333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.374529][ T333] dump_stack+0x19/0x20 [ 33.374550][ T333] __schedule_bug+0x12b/0x200 [ 33.374569][ T333] ? find_proxy_task+0x2460/0x2460 [ 33.374586][ T333] ? prepare_signal+0x13da/0x16b0 [ 33.374608][ T333] __schedule+0xb85/0x20b0 [ 33.374628][ T333] ? __wake_up_sync_key+0x1be/0x2c0 [ 33.374647][ T333] ? __cfi___wake_up_sync_key+0x10/0x10 [ 33.374666][ T333] ? __sched_text_start+0x10/0x10 [ 33.374686][ T333] ? __kasan_check_write+0x18/0x20 [ 33.374702][ T333] ? _raw_spin_lock_irq+0x93/0x120 [ 33.374720][ T333] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.374738][ T333] ? __kasan_check_read+0x15/0x20 [ 33.374753][ T333] ? cgroup_update_frozen+0x160/0x980 [ 33.374775][ T333] schedule+0xc5/0x240 [ 33.374793][ T333] ptrace_stop+0x528/0x8f0 [ 33.374812][ T333] ptrace_notify+0x1de/0x290 [ 33.374833][ T333] ? __cfi_ptrace_notify+0x10/0x10 [ 33.374855][ T333] ? __cfi_do_rmdir+0x10/0x10 [ 33.374878][ T333] ? __kasan_check_write+0x18/0x20 [ 33.374893][ T333] syscall_exit_work+0x84/0x150 [ 33.374908][ T333] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 33.374924][ T333] syscall_exit_to_user_mode+0x15/0xb0 [ 33.374954][ T333] do_syscall_64+0x63/0xf0 [ 33.374970][ T333] ? clear_bhb_loop+0x50/0xa0 [ 33.374992][ T333] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.375013][ T333] RIP: 0033:0x7fc747286da9 [ 33.375027][ T333] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.375040][ T333] RSP: 002b:00007fff021c6598 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 33.375057][ T333] RAX: 0000000000000000 RBX: 0032672f74656764 RCX: 00007fc747286da9 [ 33.375068][ T333] RDX: 00007fc747286da9 RSI: 00007fc747286da9 RDI: 0000200000000600 [ 33.375080][ T333] RBP: 0000000000000000 R08: 0000000000000009 R09: 0000000000000009 [ 33.375089][ T333] R10: 0000000000000009 R11: 0000000000000246 R12: 00007fff021c65bc [ 33.375099][ T333] R13: 00007fff021c65f0 R14: 00007fff021c65d0 R15: 0000000000000004 [ 33.375112][ T333] [ 33.375186][ T0] Oops: general protection fault, probably for non-canonical address 0xdfff8481f6e50680: 0000 [#1] PREEMPT SMP KASAN PTI [ 33.635375][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 33.648065][ T0] Tainted: [W]=WARN [ 33.651884][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.661963][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 33.667271][ T0] Code: e8 17 cf 3b fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 9a 32 65 fb 48 89 c7 e8 82 40 b8 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 33.686895][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 33.692982][ T0] RAX: ffff8881093e9300 RBX: ffffffff87415c90 RCX: ffffffff874156c0 [ 33.700987][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.708973][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 33.716973][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670 [ 33.724958][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 33.732945][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.741919][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.748521][ T0] CR2: 00007fff021c4e50 CR3: 0000000125c8e000 CR4: 00000000003526b0 [ 33.756526][ T0] Call Trace: [ 33.759813][ T0] [ 33.762753][ T0] ? __kasan_check_read+0x15/0x20 [ 33.767796][ T0] ? ct_nmi_enter+0x9a/0xe0 [ 33.772315][ T0] ? ct_irq_enter+0xd/0x20 [ 33.776747][ T0] ? irqentry_enter+0x2c/0x40 [ 33.781432][ T0] ? sysvec_apic_timer_interrupt+0x13/0x90 [ 33.787273][ T0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 33.793449][ T0] ? ct_kernel_exit+0x7d/0xb0 [ 33.798154][ T0] ? pv_native_safe_halt+0x13/0x20 [ 33.803288][ T0] ? default_idle+0x17/0x30 [ 33.807806][ T0] ? arch_cpu_idle+0xd/0x20 [ 33.812326][ T0] ? default_idle_call+0x3e/0x80 [ 33.817294][ T0] ? do_idle+0x2fc/0x570 [ 33.821572][ T0] ? idle_inject_timer_fn+0x80/0x80 [ 33.826787][ T0] ? cpu_startup_entry+0x47/0x60 [ 33.831739][ T0] ? rest_init+0x10b/0x130 [ 33.836168][ T0] ? __cfi_x86_late_time_init+0x10/0x10 [ 33.841734][ T0] ? start_kernel+0x462/0x4bb [ 33.846425][ T0] ? x86_64_start_reservations+0x2e/0x30 [ 33.852095][ T0] ? x86_64_start_kernel+0x6a/0x7b [ 33.857225][ T0] ? common_startup_64+0x13b/0x157 [ 33.862376][ T0] [ 33.865403][ T0] Modules linked in: [ 33.869323][ T0] ---[ end trace 0000000000000000 ]--- [ 33.874810][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 33.880129][ T0] Code: e8 17 cf 3b fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 9a 32 65 fb 48 89 c7 e8 82 40 b8 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 33.899751][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 33.905832][ T0] RAX: ffff8881093e9300 RBX: ffffffff87415c90 RCX: ffffffff874156c0 [ 33.913818][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.921799][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 33.929787][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670 [ 33.937788][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 33.945770][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.954724][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.961322][ T0] CR2: 00007fff021c4e50 CR3: 0000000125c8e000 CR4: 00000000003526b0 [ 33.969327][ T0] Kernel panic - not syncing: Fatal exception [ 35.069782][ T0] Shutting down cpus with NMI [ 35.075113][ T0] Kernel Offset: disabled [ 35.079448][ T0] Rebooting in 86400 seconds..