ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor728754431 <...> Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor728754431", ["ci2-android-6-12-rust/syz-executor728754431"], 0x7ffc2bc371f0 /* 10 vars */) = 0 brk(NULL) = 0x55556b453000 brk(0x55556b453e00) = 0x55556b453e00 arch_prctl(ARCH_SET_FS, 0x55556b453480) = 0 set_tid_address(0x55556b453750) = 312 set_robust_list(0x55556b453760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor728754431", 4096) = 49 getrandom("\xcc\x04\x55\xf3\x20\xe2\x59\x43", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556b453e00 brk(0x55556b474e00) = 0x55556b474e00 brk(0x55556b475000) = 0x55556b475000 mprotect(0x7f67bd431000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f67bd38c9b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f67bd38fa40}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f67bd38c9b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f67bd38fa40}, NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 313 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 313] set_robust_list(0x55556b453760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] setpgid(0, 0) = 0 [pid 313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 313] write(3, "1000", 4) = 4 [pid 313] close(3) = 0 [pid 313] write(1, "executing program\n", 18) = 18 [pid 313] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 313] mount(NULL, "./config", "configfs", 0, NULL) = 0 executing program [pid 313] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 313] rmdir("./config/usb_gadget/g1") = 0 [pid 313] exit_group(0) = ? [pid 313] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 315 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x55556b453760, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 315] setpgid(0, 0) = 0 [pid 315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 315] write(3, "1000", 4) = 4 [pid 315] close(3) = 0 [pid 315] write(1, "executing program\n", 18) = 18 [pid 315] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 315] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 315] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 315] rmdir("./config/usb_gadget/g1") = 0 [pid 315] exit_group(0) = ? [pid 315] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 316 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x55556b453760, 24) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] write(1, "executing program\n", 18) = 18 executing program [pid 316] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 316] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 316] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 316] rmdir("./config/usb_gadget/g1") = 0 [pid 316] exit_group(0) = ? [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 317 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x55556b453760, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18) = 18 executing program [pid 317] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 317] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 317] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 317] rmdir("./config/usb_gadget/g1") = 0 [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 32.321034][ T36] audit: type=1400 audit(1787859629.720:64): avc: denied { execmem } for pid=312 comm="syz-executor728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.341254][ T36] audit: type=1400 audit(1787859629.720:65): avc: denied { mounton } for pid=313 comm="syz-executor728" path="/root/config" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 318 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x55556b453760, 24) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] write(1, "executing program\n", 18) = 18 [pid 318] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 318] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 318] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 318] rmdir("./config/usb_gadget/g1") = 0 [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 319 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x55556b453760, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] write(1, "executing program\n", 18) = 18 executing program [pid 319] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 319] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 319] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 319] rmdir("./config/usb_gadget/g1") = 0 [pid 319] exit_group(0) = ? [pid 319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 320 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x55556b453760, 24) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] write(1, "executing program\n", 18) = 18 executing program [pid 320] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 320] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 320] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 320] rmdir("./config/usb_gadget/g1") = 0 [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 321 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x55556b453760, 24) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] write(1, "executing program\n", 18) = 18 executing program [pid 321] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 321] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 321] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 321] rmdir("./config/usb_gadget/g1") = 0 [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 322 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x55556b453760, 24) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 [pid 322] write(1, "executing program\n", 18) = 18 executing program [pid 322] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 322] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 322] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 32.365026][ T36] audit: type=1400 audit(1787859629.720:66): avc: denied { mount } for pid=313 comm="syz-executor728" name="/" dev="configfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.388975][ T36] audit: type=1400 audit(1787859629.730:67): avc: denied { search } for pid=313 comm="syz-executor728" name="/" dev="configfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 322] rmdir("./config/usb_gadget/g1") = 0 [pid 322] exit_group(0) = ? [pid 322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 323 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x55556b453760, 24) = 0 [pid 323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3) = 0 [pid 323] write(1, "executing program\n", 18) = 18 executing program [pid 323] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 323] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 323] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 323] rmdir("./config/usb_gadget/g1") = 0 [pid 323] exit_group(0) = ? [pid 323] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 324 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x55556b453760, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] write(1, "executing program\n", 18) = 18 executing program [pid 324] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 324] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 324] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 324] rmdir("./config/usb_gadget/g1") = 0 [pid 324] exit_group(0) = ? [pid 324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 325 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x55556b453760, 24) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] write(1, "executing program\n", 18) = 18 executing program [pid 325] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 325] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 325] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 325] rmdir("./config/usb_gadget/g1") = 0 [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 326 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x55556b453760, 24) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] write(1, "executing program\n", 18) = 18 executing program [pid 326] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 326] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [ 32.412614][ T36] audit: type=1400 audit(1787859629.730:68): avc: denied { write } for pid=313 comm="syz-executor728" name="usb_gadget" dev="configfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.437375][ T36] audit: type=1400 audit(1787859629.730:69): avc: denied { add_name } for pid=313 comm="syz-executor728" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 326] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 326] rmdir("./config/usb_gadget/g1") = 0 [pid 326] exit_group(0) = ? [pid 326] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 327 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x55556b453760, 24) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] write(1, "executing program\n", 18) = 18 [pid 327] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 327] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 327] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 327] rmdir("./config/usb_gadget/g1") = 0 [pid 327] exit_group(0) = ? [pid 327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 328 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x55556b453760, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] write(1, "executing program\n", 18) = 18 executing program [pid 328] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 328] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 328] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 328] rmdir("./config/usb_gadget/g1") = 0 [pid 328] exit_group(0) = ? [pid 328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 329 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x55556b453760, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] write(1, "executing program\n", 18) = 18 [pid 329] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 329] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 329] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 329] rmdir("./config/usb_gadget/g1") = 0 [pid 329] exit_group(0) = ? [pid 329] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 330 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x55556b453760, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 330] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 330] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 330] rmdir("./config/usb_gadget/g1") = 0 [ 32.458952][ T36] audit: type=1400 audit(1787859629.730:70): avc: denied { create } for pid=313 comm="syz-executor728" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 32.480297][ T36] audit: type=1400 audit(1787859629.730:71): avc: denied { remove_name } for pid=313 comm="syz-executor728" name="g1" dev="configfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 331 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x55556b453760, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 executing program [pid 331] write(1, "executing program\n", 18) = 18 [pid 331] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 331] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 331] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 331] rmdir("./config/usb_gadget/g1") = 0 [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 332 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x55556b453760, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] write(1, "executing program\n", 18) = 18 executing program [pid 332] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 332] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 332] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 332] rmdir("./config/usb_gadget/g1") = 0 [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 333 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x55556b453760, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 [pid 333] write(1, "executing program\n", 18) = 18 executing program [pid 333] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 333] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 333] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 333] rmdir("./config/usb_gadget/g1") = 0 [pid 333] exit_group(0) = ? [pid 333] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 334 [pid 334] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 334] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 334] <... prctl resumed>) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] write(1, "executing program\n", 18) = 18 executing program [pid 334] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 334] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 334] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 334] rmdir("./config/usb_gadget/g1") = 0 [pid 334] exit_group(0) = ? [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 335 attached , child_tidptr=0x55556b453750) = 335 [pid 335] set_robust_list(0x55556b453760, 24) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 335] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 335] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 executing program [pid 335] write(1, "executing program\n", 18) = 18 [pid 335] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 335] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 335] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 335] rmdir("./config/usb_gadget/g1") = 0 [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 336 attached , child_tidptr=0x55556b453750) = 336 [pid 336] set_robust_list(0x55556b453760, 24) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 336] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] write(1, "executing program\n", 18) = 18 executing program [pid 336] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 336] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 336] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 336] rmdir("./config/usb_gadget/g1") = 0 [pid 336] exit_group(0) = ? [pid 336] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 337 attached , child_tidptr=0x55556b453750) = 337 [pid 337] set_robust_list(0x55556b453760, 24 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 337] <... set_robust_list resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18) = 18 executing program [pid 337] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 337] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [ 32.504915][ T36] audit: type=1400 audit(1787859629.730:72): avc: denied { rmdir } for pid=313 comm="syz-executor728" name="g1" dev="configfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.527739][ T36] audit: type=1400 audit(1787859629.740:73): avc: denied { mounton } for pid=315 comm="syz-executor728" path="/root/config" dev="configfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 337] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 337] rmdir("./config/usb_gadget/g1") = 0 [pid 337] exit_group(0) = ? [pid 337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 338 ci2-android-6-12-rust/strace-static-x86_64: Process 338 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] set_robust_list(0x55556b453760, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 executing program [pid 338] write(1, "executing program\n", 18) = 18 [pid 338] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 338] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 338] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 338] rmdir("./config/usb_gadget/g1") = 0 [pid 338] exit_group(0) = ? [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x55556b453760, 24 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 339 [pid 339] <... set_robust_list resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] write(1, "executing program\n", 18) = 18 executing program [pid 339] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 339] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 339] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 339] rmdir("./config/usb_gadget/g1") = 0 [pid 339] exit_group(0) = ? [pid 339] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x55556b453760, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 340 [pid 340] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] write(1, "executing program\n", 18) = 18 [pid 340] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 340] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 340] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 340] rmdir("./config/usb_gadget/g1") = 0 [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 341 [pid 341] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 341] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 341] <... prctl resumed>) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] write(1, "executing program\n", 18) = 18 [pid 341] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 341] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) executing program [pid 341] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 341] rmdir("./config/usb_gadget/g1") = 0 [pid 341] exit_group(0) = ? [pid 341] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 342 [pid 342] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 342] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] write(1, "executing program\n", 18) = 18 executing program [pid 342] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 342] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 342] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 342] rmdir("./config/usb_gadget/g1") = 0 [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 343 ci2-android-6-12-rust/strace-static-x86_64: Process 343 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] set_robust_list(0x55556b453760, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 [pid 343] write(1, "executing program\n", 18) = 18 [pid 343] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 343] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 343] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 executing program [pid 343] rmdir("./config/usb_gadget/g1") = 0 [pid 343] exit_group(0) = ? [pid 343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 344 [pid 344] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 344] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 executing program [pid 344] write(1, "executing program\n", 18) = 18 [pid 344] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 344] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 344] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 344] rmdir("./config/usb_gadget/g1") = 0 [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 345 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 345] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 345] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 [pid 345] write(1, "executing program\n", 18) = 18 executing program [pid 345] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 345] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 345] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 345] rmdir("./config/usb_gadget/g1") = 0 [pid 345] exit_group(0) = ? [pid 345] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=345, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 346 ci2-android-6-12-rust/strace-static-x86_64: Process 346 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] set_robust_list(0x55556b453760, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] write(1, "executing program\n", 18) = 18 executing program [pid 346] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 346] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 346] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 346] rmdir("./config/usb_gadget/g1") = 0 [pid 346] exit_group(0) = ? [pid 346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 347 [pid 347] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] write(1, "executing program\n", 18) = 18 [pid 347] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 347] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 347] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 347] rmdir("./config/usb_gadget/g1") = 0 [pid 347] exit_group(0) = ? [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 348 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 348] write(1, "executing program\n", 18) = 18 executing program [pid 348] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 348] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 348] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 348] rmdir("./config/usb_gadget/g1") = 0 [pid 348] exit_group(0) = ? [pid 348] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 349 attached executing program [pid 349] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 349 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 349] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 349] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 32.749476][ T349] BUG: scheduling while atomic: syz-executor728/349/0x00000002 [ 32.757117][ T349] Modules linked in: [ 32.761052][ T349] CPU: 0 UID: 0 PID: 349 Comm: syz-executor728 Not tainted syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 32.761084][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.761095][ T349] Call Trace: [ 32.761101][ T349] [ 32.761108][ T349] __dump_stack+0x21/0x30 [ 32.761142][ T349] dump_stack_lvl+0x140/0x1c0 [ 32.761170][ T349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.761201][ T349] dump_stack+0x19/0x20 [ 32.761228][ T349] __schedule_bug+0x12b/0x200 [ 32.761252][ T349] ? find_proxy_task+0x2460/0x2460 [ 32.761275][ T349] __schedule+0xb85/0x20b0 [ 32.761296][ T349] ? is_bpf_text_address+0x17b/0x1a0 [ 32.761326][ T349] ? __sched_text_start+0x10/0x10 [ 32.761345][ T349] ? __kasan_check_read+0x15/0x20 [ 32.761365][ T349] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 32.761396][ T349] ? __kasan_check_write+0x18/0x20 [ 32.761417][ T349] ? _raw_spin_lock_irq+0x93/0x120 [ 32.761445][ T349] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.761475][ T349] schedule+0xc5/0x240 [ 32.761494][ T349] schedule_preempt_disabled+0x14/0x30 [ 32.761514][ T349] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 32.761540][ T349] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 32.761564][ T349] ? do_syscall_64+0x57/0xf0 [ 32.761587][ T349] ? rwsem_read_trylock+0x275/0x5a0 [ 32.761604][ T349] ? downgrade_write+0x470/0x470 [ 32.761622][ T349] down_write+0x163/0x2b0 [ 32.761635][ T349] ? __cfi_down_write+0x10/0x10 [ 32.761648][ T349] ? down_read+0x7f/0xe0 [ 32.761661][ T349] ? __cfi_down_read+0x10/0x10 [ 32.761674][ T349] ? _raw_spin_lock+0x92/0x120 [ 32.761690][ T349] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.761707][ T349] kernfs_remove+0x87/0xc0 [ 32.761722][ T349] sysfs_remove_dir+0xad/0xf0 [ 32.761736][ T349] __kobject_del+0xe2/0x2c0 [ 32.761752][ T349] kobject_del+0x49/0x80 [ 32.761768][ T349] device_del+0xba7/0xcf0 [ 32.761785][ T349] ? __cfi_device_del+0x10/0x10 [ 32.761802][ T349] ? __kasan_check_write+0x18/0x20 [ 32.761814][ T349] ? kobject_put+0x1cc/0x2a0 [ 32.761830][ T349] device_destroy+0xb0/0x100 [ 32.761841][ T349] ? __cfi_device_destroy+0x10/0x10 [ 32.761852][ T349] ? __kasan_check_write+0x18/0x20 [ 32.761865][ T349] android_device_destroy+0x118/0x180 [ 32.761882][ T349] gadgets_drop+0x1d/0x30 [ 32.761894][ T349] ? __cfi_gadgets_drop+0x10/0x10 [ 32.761906][ T349] configfs_rmdir+0x8b7/0x9b0 [ 32.761923][ T349] vfs_rmdir+0x3db/0x560 [ 32.761940][ T349] do_rmdir+0x29a/0x590 [ 32.761956][ T349] ? __cfi_do_rmdir+0x10/0x10 [ 32.761972][ T349] ? __kasan_check_write+0x18/0x20 [ 32.761985][ T349] __x64_sys_rmdir+0x4b/0x60 [ 32.762010][ T349] x64_sys_call+0xaf7/0x2ee0 [ 32.762021][ T349] do_syscall_64+0x57/0xf0 [ 32.762037][ T349] ? clear_bhb_loop+0x50/0xa0 [ 32.762051][ T349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.762064][ T349] RIP: 0033:0x7f67bd39f749 [ 32.762076][ T349] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 32.762087][ T349] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 32.762101][ T349] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 32.762110][ T349] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [pid 349] rmdir("./config/usb_gadget/g1") = 0 [pid 349] exit_group(0) = ? [pid 349] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=349, si_uid=0, si_status=0, si_utime=0, si_stime=37 /* 0.37 s */} --- [ 32.762120][ T349] RBP: 0000000000007fc1 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 32.762129][ T349] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 32.762137][ T349] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 32.762147][ T349] [ 32.762644][ T349] BUG: scheduling while atomic: syz-executor728/349/0x00000000 [ 33.134621][ T349] Modules linked in: [ 33.138585][ T349] CPU: 0 UID: 0 PID: 349 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 33.138617][ T349] Tainted: [W]=WARN [ 33.138625][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.138636][ T349] Call Trace: [ 33.138643][ T349] [ 33.138650][ T349] __dump_stack+0x21/0x30 [ 33.138682][ T349] dump_stack_lvl+0x140/0x1c0 [ 33.138708][ T349] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.138736][ T349] dump_stack+0x19/0x20 [ 33.138762][ T349] __schedule_bug+0x12b/0x200 [ 33.138786][ T349] ? find_proxy_task+0x2460/0x2460 [ 33.138811][ T349] __schedule+0xb85/0x20b0 [ 33.138831][ T349] ? __wake_up_sync_key+0x1be/0x2c0 [ 33.138857][ T349] ? __cfi___wake_up_sync_key+0x10/0x10 [ 33.138882][ T349] ? __sched_text_start+0x10/0x10 [ 33.138901][ T349] ? __kasan_check_write+0x18/0x20 [ 33.138923][ T349] ? _raw_spin_lock_irq+0x93/0x120 [ 33.138951][ T349] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.138979][ T349] ? __kasan_check_read+0x15/0x20 [ 33.139000][ T349] ? cgroup_update_frozen+0x160/0x980 [ 33.139028][ T349] schedule+0xc5/0x240 [ 33.139046][ T349] ptrace_stop+0x528/0x8f0 [ 33.139071][ T349] ptrace_notify+0x1de/0x290 [ 33.139097][ T349] ? __cfi_ptrace_notify+0x10/0x10 [ 33.139124][ T349] ? __cfi_do_rmdir+0x10/0x10 [ 33.139164][ T349] ? __kasan_check_write+0x18/0x20 [ 33.139186][ T349] syscall_exit_work+0x84/0x150 [ 33.139206][ T349] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 33.139226][ T349] syscall_exit_to_user_mode+0x15/0xb0 [ 33.139251][ T349] do_syscall_64+0x63/0xf0 [ 33.139285][ T349] ? clear_bhb_loop+0x50/0xa0 [ 33.139308][ T349] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.139328][ T349] RIP: 0033:0x7f67bd39f749 [ 33.139346][ T349] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.139364][ T349] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 350 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 350] <... prctl resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 executing program [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 350] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 350] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 350] rmdir("./config/usb_gadget/g1") = 0 [pid 350] exit_group(0) = ? [pid 350] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x55556b453760, 24) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 351 [pid 351] <... prctl resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 [pid 351] write(1, "executing program\n", 18) = 18 executing program [pid 351] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 351] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 351] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 33.139387][ T349] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 33.139401][ T349] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 33.139417][ T349] RBP: 0000000000007fc1 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 33.139432][ T349] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 33.139446][ T349] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 33.139463][ T349] [ 33.410004][ T351] BUG: scheduling while atomic: syz-executor728/351/0x00000002 [ 33.417690][ T351] Modules linked in: [ 33.421627][ T351] CPU: 0 UID: 0 PID: 351 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 33.421668][ T351] Tainted: [W]=WARN [ 33.421675][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.421688][ T351] Call Trace: [ 33.421696][ T351] [ 33.421704][ T351] __dump_stack+0x21/0x30 [ 33.421737][ T351] dump_stack_lvl+0x140/0x1c0 [ 33.421762][ T351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.421791][ T351] dump_stack+0x19/0x20 [ 33.421817][ T351] __schedule_bug+0x12b/0x200 [ 33.421839][ T351] ? find_proxy_task+0x2460/0x2460 [ 33.421862][ T351] ? update_load_avg+0x4f3/0x1980 [ 33.421886][ T351] ? __kernel_text_address+0x11/0x40 [ 33.421916][ T351] ? unwind_get_return_address+0x51/0x90 [ 33.421944][ T351] __schedule+0xb85/0x20b0 [ 33.421965][ T351] ? kvm_sched_clock_read+0x15/0x30 [ 33.421989][ T351] ? sched_clock_noinstr+0xd/0x30 [ 33.422009][ T351] ? __kasan_check_read+0x15/0x20 [ 33.422031][ T351] ? __sched_text_start+0x10/0x10 [ 33.422050][ T351] ? __kasan_check_read+0x15/0x20 [ 33.422069][ T351] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 33.422099][ T351] ? __kasan_check_write+0x18/0x20 [ 33.422119][ T351] ? _raw_spin_lock_irq+0x93/0x120 [ 33.422142][ T351] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.422162][ T351] schedule+0xc5/0x240 [ 33.422173][ T351] schedule_preempt_disabled+0x14/0x30 [ 33.422185][ T351] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 33.422201][ T351] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 33.422215][ T351] ? try_to_wake_up+0x111a/0x1fd0 [ 33.422229][ T351] ? __kasan_check_write+0x18/0x20 [ 33.422241][ T351] ? wake_q_add_safe+0x29/0x100 [ 33.422253][ T351] ? __cfi_try_to_wake_up+0x10/0x10 [ 33.422266][ T351] ? rwsem_mark_wake+0x507/0x770 [ 33.422293][ T351] ? rwsem_read_trylock+0x275/0x5a0 [ 33.422310][ T351] ? wake_up_q+0x10a/0x1c0 [ 33.422321][ T351] ? downgrade_write+0x470/0x470 [ 33.422338][ T351] down_write+0x163/0x2b0 [ 33.422352][ T351] ? __cfi_down_write+0x10/0x10 [ 33.422365][ T351] ? down_read+0x7f/0xe0 [ 33.422377][ T351] ? __cfi_down_read+0x10/0x10 [ 33.422391][ T351] ? __kasan_check_write+0x18/0x20 [ 33.422403][ T351] kernfs_remove+0x87/0xc0 [ 33.422419][ T351] sysfs_remove_group+0x22d/0x250 [ 33.422434][ T351] dpm_sysfs_remove+0x99/0xd0 [ 33.422450][ T351] device_del+0x241/0xcf0 [ 33.422467][ T351] ? __cfi_class_find_device+0x10/0x10 [ 33.422480][ T351] ? __cfi_device_del+0x10/0x10 [ 33.422497][ T351] ? __kasan_check_write+0x18/0x20 [ 33.422509][ T351] ? kobject_put+0x1cc/0x2a0 [ 33.422525][ T351] device_destroy+0xb0/0x100 [ 33.422536][ T351] ? __cfi_device_destroy+0x10/0x10 [ 33.422548][ T351] ? __kasan_check_write+0x18/0x20 [ 33.422560][ T351] android_device_destroy+0x118/0x180 [ 33.422578][ T351] gadgets_drop+0x1d/0x30 [ 33.422589][ T351] ? __cfi_gadgets_drop+0x10/0x10 [ 33.422601][ T351] configfs_rmdir+0x8b7/0x9b0 [ 33.422618][ T351] vfs_rmdir+0x3db/0x560 [ 33.422635][ T351] do_rmdir+0x29a/0x590 [ 33.422658][ T351] ? __cfi_do_rmdir+0x10/0x10 [ 33.422675][ T351] ? __kasan_check_write+0x18/0x20 [ 33.422687][ T351] __x64_sys_rmdir+0x4b/0x60 [ 33.422704][ T351] x64_sys_call+0xaf7/0x2ee0 [ 33.422715][ T351] do_syscall_64+0x57/0xf0 [ 33.422731][ T351] ? clear_bhb_loop+0x50/0xa0 [ 33.422744][ T351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.422757][ T351] RIP: 0033:0x7f67bd39f749 [ 33.422769][ T351] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.422780][ T351] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 33.422794][ T351] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 33.422804][ T351] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 33.422813][ T351] RBP: 0000000000008256 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 33.422822][ T351] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 33.422830][ T351] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 33.422841][ T351] [ 33.423022][ T351] BUG: scheduling while atomic: syz-executor728/351/0x00000000 [ 33.837397][ T351] Modules linked in: [ 33.841342][ T351] CPU: 0 UID: 0 PID: 351 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 33.841379][ T351] Tainted: [W]=WARN [ 33.841387][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.841399][ T351] Call Trace: [ 33.841408][ T351] [ 33.841417][ T351] __dump_stack+0x21/0x30 [ 33.841449][ T351] dump_stack_lvl+0x140/0x1c0 [ 33.841474][ T351] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.841503][ T351] dump_stack+0x19/0x20 [ 33.841528][ T351] __schedule_bug+0x12b/0x200 [ 33.841550][ T351] ? find_proxy_task+0x2460/0x2460 [ 33.841573][ T351] __schedule+0xb85/0x20b0 [ 33.841592][ T351] ? __wake_up_sync_key+0x1be/0x2c0 [ 33.841618][ T351] ? __cfi___wake_up_sync_key+0x10/0x10 [ 33.841642][ T351] ? __sched_text_start+0x10/0x10 [ 33.841661][ T351] ? __kasan_check_write+0x18/0x20 [ 33.841683][ T351] ? _raw_spin_lock_irq+0x93/0x120 [ 33.841710][ T351] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.841738][ T351] ? __kasan_check_read+0x15/0x20 [ 33.841757][ T351] ? cgroup_update_frozen+0x160/0x980 [ 33.841785][ T351] schedule+0xc5/0x240 [ 33.841803][ T351] ptrace_stop+0x528/0x8f0 [ 33.841827][ T351] ptrace_notify+0x1de/0x290 [ 33.841854][ T351] ? __cfi_ptrace_notify+0x10/0x10 [ 33.841882][ T351] ? __cfi_do_rmdir+0x10/0x10 [ 33.841912][ T351] ? __kasan_check_write+0x18/0x20 [ 33.841934][ T351] syscall_exit_work+0x84/0x150 [ 33.841954][ T351] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 33.841975][ T351] syscall_exit_to_user_mode+0x15/0xb0 [ 33.842000][ T351] do_syscall_64+0x63/0xf0 [ 33.842029][ T351] ? clear_bhb_loop+0x50/0xa0 [ 33.842052][ T351] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.842119][ T351] RIP: 0033:0x7f67bd39f749 [ 33.842138][ T351] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.842155][ T351] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 33.842178][ T351] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67bd39f749 [pid 351] rmdir("./config/usb_gadget/g1") = 0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [pid 351] exit_group(0) = ? [pid 351] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 352 attached , child_tidptr=0x55556b453750) = 352 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 352] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 352] <... set_robust_list resumed>) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] write(1, "executing program\n", 18) = 18 [pid 352] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 352] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 352] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 352] rmdir("./config/usb_gadget/g1") = 0 [pid 352] exit_group(0) = ? [pid 352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 353 attached , child_tidptr=0x55556b453750) = 353 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 353] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 353] <... set_robust_list resumed>) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 353] setpgid(0, 0) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 353] close(3) = 0 [pid 353] write(1, "executing program\n", 18) = 18 [pid 353] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 353] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 353] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 353] rmdir("./config/usb_gadget/g1") = 0 [pid 353] exit_group(0) = ? [pid 353] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=353, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 354 attached , child_tidptr=0x55556b453750) = 354 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 354] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 354] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 354] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 354] rmdir("./config/usb_gadget/g1") = 0 [pid 354] exit_group(0) = ? [pid 354] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=354, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 355 attached , child_tidptr=0x55556b453750) = 355 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 355] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 355] <... set_robust_list resumed>) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] write(1, "executing program\n", 18) = 18 [pid 355] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 355] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 355] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 355] rmdir("./config/usb_gadget/g1") = 0 [pid 355] exit_group(0) = ? [pid 355] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=355, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 356 attached , child_tidptr=0x55556b453750) = 356 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 356] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 356] <... set_robust_list resumed>) = 0 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] write(1, "executing program\n", 18) = 18 [pid 356] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 356] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 356] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 356] rmdir("./config/usb_gadget/g1") = 0 [pid 356] exit_group(0) = ? [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 357 attached , child_tidptr=0x55556b453750) = 357 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 357] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 357] <... set_robust_list resumed>) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 357] write(3, "1000", 4) = 4 [pid 357] close(3) = 0 [pid 357] write(1, "executing program\n", 18) = 18 [pid 357] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 357] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 357] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 357] rmdir("./config/usb_gadget/g1") = 0 [pid 357] exit_group(0) = ? [pid 357] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=357, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 358 attached , child_tidptr=0x55556b453750) = 358 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 358] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 358] <... set_robust_list resumed>) = 0 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 358] setpgid(0, 0) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 358] write(3, "1000", 4) = 4 [pid 358] close(3) = 0 [pid 358] write(1, "executing program\n", 18) = 18 [pid 358] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 358] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 358] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 358] rmdir("./config/usb_gadget/g1") = 0 [pid 358] exit_group(0) = ? [pid 358] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=358, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 359 attached , child_tidptr=0x55556b453750) = 359 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 359] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 359] <... set_robust_list resumed>) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] write(1, "executing program\n", 18) = 18 [pid 359] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 359] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 359] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 359] rmdir("./config/usb_gadget/g1") = 0 [pid 359] exit_group(0) = ? [pid 359] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=359, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 360 attached , child_tidptr=0x55556b453750) = 360 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 360] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 360] <... set_robust_list resumed>) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] write(1, "executing program\n", 18) = 18 [pid 360] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 360] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 360] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 360] rmdir("./config/usb_gadget/g1") = 0 [pid 360] exit_group(0) = ? [pid 360] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=360, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 361 [pid 361] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] write(1, "executing program\n", 18) = 18 [pid 361] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 361] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 361] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 361] rmdir("./config/usb_gadget/g1") = 0 [pid 361] exit_group(0) = ? [pid 361] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=361, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 362 attached , child_tidptr=0x55556b453750) = 362 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 362] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 362] <... set_robust_list resumed>) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] write(1, "executing program\n", 18) = 18 [pid 362] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 362] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 362] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 362] rmdir("./config/usb_gadget/g1") = 0 [pid 362] exit_group(0) = ? [pid 362] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 363 attached , child_tidptr=0x55556b453750) = 363 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 363] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 363] <... set_robust_list resumed>) = 0 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] write(1, "executing program\n", 18) = 18 [pid 363] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 363] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 363] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 363] rmdir("./config/usb_gadget/g1") = 0 [pid 363] exit_group(0) = ? [pid 363] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=363, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 364 attached , child_tidptr=0x55556b453750) = 364 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 364] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] <... set_robust_list resumed>) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] write(1, "executing program\n", 18) = 18 [pid 364] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 364] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 364] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 364] rmdir("./config/usb_gadget/g1") = 0 [pid 364] exit_group(0) = ? [pid 364] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=364, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 365 attached , child_tidptr=0x55556b453750) = 365 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 365] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 365] <... set_robust_list resumed>) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] write(1, "executing program\n", 18) = 18 [pid 365] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 365] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 365] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 365] rmdir("./config/usb_gadget/g1") = 0 [pid 365] exit_group(0) = ? [pid 365] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x55556b453760, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 366 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] write(1, "executing program\n", 18) = 18 [pid 366] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 366] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 366] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 366] rmdir("./config/usb_gadget/g1") = 0 [pid 366] exit_group(0) = ? [pid 366] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=366, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 367 attached , child_tidptr=0x55556b453750) = 367 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 367] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 367] <... set_robust_list resumed>) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] write(1, "executing program\n", 18) = 18 [pid 367] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 367] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 367] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 367] rmdir("./config/usb_gadget/g1") = 0 [pid 367] exit_group(0) = ? [pid 367] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=367, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 368 attached , child_tidptr=0x55556b453750) = 368 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 368] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 368] <... set_robust_list resumed>) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] write(1, "executing program\n", 18) = 18 [pid 368] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 368] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 368] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 368] rmdir("./config/usb_gadget/g1") = 0 [pid 368] exit_group(0) = ? [pid 368] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 369 attached , child_tidptr=0x55556b453750) = 369 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 369] set_robust_list(0x55556b453760, 24 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 369] <... set_robust_list resumed>) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] write(1, "executing program\n", 18) = 18 [pid 369] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 369] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 369] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 369] rmdir("./config/usb_gadget/g1") = 0 [pid 369] exit_group(0) = ? [pid 369] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x55556b453760, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 370 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] write(1, "executing program\n", 18) = 18 [pid 370] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 370] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 370] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 370] rmdir("./config/usb_gadget/g1") = 0 [pid 370] exit_group(0) = ? [pid 370] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x55556b453760, 24) = 0 [pid 371] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 371 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 [pid 371] write(1, "executing program\n", 18) = 18 [pid 371] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 371] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 371] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 371] rmdir("./config/usb_gadget/g1") = 0 [pid 371] exit_group(0) = ? [pid 371] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 372 attached , child_tidptr=0x55556b453750) = 372 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] set_robust_list(0x55556b453760, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] write(1, "executing program\n", 18) = 18 executing program [pid 372] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 372] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 372] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 33.842192][ T351] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 33.842208][ T351] RBP: 0000000000008256 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 33.842223][ T351] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 33.842237][ T351] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 33.842254][ T351] [ 34.101667][ T372] BUG: scheduling while atomic: syz-executor728/372/0x00000002 [ 34.109416][ T372] Modules linked in: [ 34.113320][ T372] CPU: 0 UID: 0 PID: 372 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 34.113345][ T372] Tainted: [W]=WARN [ 34.113349][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.113356][ T372] Call Trace: [ 34.113362][ T372] [ 34.113367][ T372] __dump_stack+0x21/0x30 [ 34.113389][ T372] dump_stack_lvl+0x140/0x1c0 [ 34.113406][ T372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.113422][ T372] ? is_bpf_text_address+0x17b/0x1a0 [ 34.113442][ T372] dump_stack+0x19/0x20 [ 34.113458][ T372] __schedule_bug+0x12b/0x200 [ 34.113472][ T372] ? find_proxy_task+0x2460/0x2460 [ 34.113485][ T372] ? update_load_avg+0x4f3/0x1980 [ 34.113501][ T372] __schedule+0xb85/0x20b0 [ 34.113513][ T372] ? sched_clock_noinstr+0xd/0x30 [ 34.113526][ T372] ? __kasan_check_read+0x15/0x20 [ 34.113539][ T372] ? __sched_text_start+0x10/0x10 [ 34.113551][ T372] ? __kasan_check_read+0x15/0x20 [ 34.113563][ T372] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 34.113584][ T372] ? __kasan_check_write+0x18/0x20 [ 34.113596][ T372] ? _raw_spin_lock_irq+0x93/0x120 [ 34.113612][ T372] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.113628][ T372] schedule+0xc5/0x240 [ 34.113639][ T372] schedule_preempt_disabled+0x14/0x30 [ 34.113651][ T372] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 34.113665][ T372] ? ttwu_do_activate+0x620/0x620 [ 34.113680][ T372] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 34.113695][ T372] ? try_to_wake_up+0x111a/0x1fd0 [ 34.113709][ T372] ? __kasan_check_write+0x18/0x20 [ 34.113721][ T372] ? wake_q_add_safe+0x29/0x100 [ 34.113732][ T372] ? __kasan_check_write+0x18/0x20 [ 34.113744][ T372] ? rwsem_read_trylock+0x275/0x5a0 [ 34.113761][ T372] ? downgrade_write+0x470/0x470 [ 34.113778][ T372] ? __kasan_check_write+0x18/0x20 [ 34.113790][ T372] ? wake_up_q+0x10a/0x1c0 [ 34.113801][ T372] down_write+0x163/0x2b0 [ 34.113814][ T372] ? __cfi_down_write+0x10/0x10 [ 34.113827][ T372] ? _raw_spin_lock+0x92/0x120 [ 34.113843][ T372] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.113859][ T372] kernfs_remove+0x87/0xc0 [ 34.113875][ T372] sysfs_remove_dir+0xad/0xf0 [ 34.113888][ T372] __kobject_del+0xe2/0x2c0 [ 34.113905][ T372] kobject_del+0x49/0x80 [ 34.113920][ T372] cleanup_glue_dir+0x1a6/0x220 [ 34.113938][ T372] device_del+0xbb2/0xcf0 [ 34.113954][ T372] ? __cfi_device_del+0x10/0x10 [ 34.113971][ T372] ? __kasan_check_write+0x18/0x20 [ 34.113983][ T372] ? kobject_put+0x1cc/0x2a0 [ 34.113999][ T372] device_destroy+0xb0/0x100 [ 34.114011][ T372] ? __cfi_device_destroy+0x10/0x10 [ 34.114022][ T372] ? __kasan_check_write+0x18/0x20 [ 34.114034][ T372] android_device_destroy+0x118/0x180 [ 34.114052][ T372] gadgets_drop+0x1d/0x30 [ 34.114063][ T372] ? __cfi_gadgets_drop+0x10/0x10 [ 34.114081][ T372] configfs_rmdir+0x8b7/0x9b0 [ 34.114099][ T372] vfs_rmdir+0x3db/0x560 [ 34.114115][ T372] do_rmdir+0x29a/0x590 [ 34.114132][ T372] ? __cfi_do_rmdir+0x10/0x10 [ 34.114148][ T372] ? __kasan_check_write+0x18/0x20 [ 34.114161][ T372] __x64_sys_rmdir+0x4b/0x60 [ 34.114177][ T372] x64_sys_call+0xaf7/0x2ee0 [ 34.114189][ T372] do_syscall_64+0x57/0xf0 [ 34.114205][ T372] ? clear_bhb_loop+0x50/0xa0 [ 34.114218][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.114230][ T372] RIP: 0033:0x7f67bd39f749 [ 34.114243][ T372] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 34.114253][ T372] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 34.114267][ T372] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 34.114277][ T372] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 34.114286][ T372] RBP: 0000000000008509 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 34.114295][ T372] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 34.114304][ T372] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 34.114314][ T372] [pid 372] rmdir("./config/usb_gadget/g1") = 0 [pid 372] exit_group(0) = ? [pid 372] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=372, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} --- [ 34.114494][ T372] BUG: scheduling while atomic: syz-executor728/372/0x00000000 [ 34.520743][ T372] Modules linked in: [ 34.524662][ T372] CPU: 1 UID: 0 PID: 372 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 34.524692][ T372] Tainted: [W]=WARN [ 34.524698][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.524709][ T372] Call Trace: [ 34.524717][ T372] [ 34.524725][ T372] __dump_stack+0x21/0x30 [ 34.524755][ T372] dump_stack_lvl+0x140/0x1c0 [ 34.524779][ T372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.524806][ T372] dump_stack+0x19/0x20 [ 34.524829][ T372] __schedule_bug+0x12b/0x200 [ 34.524849][ T372] ? find_proxy_task+0x2460/0x2460 [ 34.524870][ T372] __schedule+0xb85/0x20b0 [ 34.524887][ T372] ? preempt_schedule+0xc5/0xe0 [ 34.524903][ T372] ? __cfi_preempt_schedule+0x10/0x10 [ 34.524920][ T372] ? __cfi___wake_up_sync_key+0x10/0x10 [ 34.524941][ T372] ? preempt_schedule_thunk+0x1a/0x40 [ 34.524961][ T372] ? __sched_text_start+0x10/0x10 [ 34.524978][ T372] ? __kasan_check_write+0x18/0x20 [ 34.524997][ T372] ? _raw_spin_lock_irq+0x93/0x120 [ 34.525020][ T372] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.525045][ T372] ? __kasan_check_read+0x15/0x20 [ 34.525062][ T372] ? cgroup_update_frozen+0x160/0x980 [ 34.525087][ T372] schedule+0xc5/0x240 [ 34.525103][ T372] ptrace_stop+0x528/0x8f0 [ 34.525123][ T372] ptrace_notify+0x1de/0x290 [ 34.525148][ T372] ? __cfi_ptrace_notify+0x10/0x10 [ 34.525172][ T372] ? __cfi_do_rmdir+0x10/0x10 [ 34.525197][ T372] ? __kasan_check_write+0x18/0x20 [ 34.525215][ T372] syscall_exit_work+0x84/0x150 [ 34.525233][ T372] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 34.525252][ T372] syscall_exit_to_user_mode+0x15/0xb0 [ 34.525273][ T372] do_syscall_64+0x63/0xf0 [ 34.525297][ T372] ? clear_bhb_loop+0x50/0xa0 [ 34.525316][ T372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.525334][ T372] RIP: 0033:0x7f67bd39f749 [ 34.525350][ T372] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 34.525365][ T372] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 34.525384][ T372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 34.525397][ T372] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 34.525411][ T372] RBP: 0000000000008509 R08: 00007fffbd20adbc R09: 00007fffbd20adbc restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 373 attached , child_tidptr=0x55556b453750) = 373 [pid 373] set_robust_list(0x55556b453760, 24 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 373] <... set_robust_list resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 [pid 373] write(1, "executing program\n", 18) = 18 executing program [pid 373] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 373] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 373] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 373] rmdir("./config/usb_gadget/g1") = 0 [pid 373] exit_group(0) = ? [pid 373] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 374 ci2-android-6-12-rust/strace-static-x86_64: Process 374 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] set_robust_list(0x55556b453760, 24) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] write(1, "executing program\n", 18) = 18 executing program [pid 374] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 374] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 374] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 374] rmdir("./config/usb_gadget/g1") = 0 [pid 374] exit_group(0) = ? [pid 374] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 375 [pid 375] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 375] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3) = 0 [pid 375] write(1, "executing program\n", 18) = 18 executing program [pid 375] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 375] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 375] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 375] rmdir("./config/usb_gadget/g1") = 0 [pid 375] exit_group(0) = ? [pid 375] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=375, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 376 [pid 376] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] write(1, "executing program\n", 18) = 18 executing program [pid 376] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 376] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 376] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 376] rmdir("./config/usb_gadget/g1") = 0 [pid 376] exit_group(0) = ? [pid 376] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 34.525424][ T372] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 34.525437][ T372] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 34.525452][ T372] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 377 ci2-android-6-12-rust/strace-static-x86_64: Process 377 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] set_robust_list(0x55556b453760, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 executing program [pid 377] write(1, "executing program\n", 18) = 18 [pid 377] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 377] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 377] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 377] rmdir("./config/usb_gadget/g1") = 0 [pid 377] exit_group(0) = ? [pid 377] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=377, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 378 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 378] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 378] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] write(1, "executing program\n", 18) = 18 executing program [pid 378] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 378] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 378] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 378] rmdir("./config/usb_gadget/g1") = 0 [pid 378] exit_group(0) = ? [pid 378] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 379 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] write(1, "executing program\n", 18) = 18 executing program [pid 379] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 379] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 379] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 379] <... mkdirat resumed>) = 0 [pid 379] rmdir("./config/usb_gadget/g1") = 0 [pid 379] exit_group(0) = ? [pid 379] +++ exited with 0 +++ <... rt_sigprocmask resumed>, NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 380 [pid 380] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] write(1, "executing program\n", 18) = 18 executing program [pid 380] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 380] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 380] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 380] rmdir("./config/usb_gadget/g1") = 0 [pid 380] exit_group(0) = ? [pid 380] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=380, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 381 attached , child_tidptr=0x55556b453750) = 381 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] set_robust_list(0x55556b453760, 24) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 381] setpgid(0, 0) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3) = 0 [pid 381] write(1, "executing program\n", 18) = 18 executing program [pid 381] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 381] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 381] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 381] rmdir("./config/usb_gadget/g1") = 0 [pid 381] exit_group(0) = ? [pid 381] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=381, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 382 [pid 382] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 382] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 executing program [pid 382] write(1, "executing program\n", 18) = 18 [pid 382] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 382] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 382] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 382] rmdir("./config/usb_gadget/g1") = 0 [pid 382] exit_group(0) = ? [pid 382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 383 attached , child_tidptr=0x55556b453750) = 383 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] set_robust_list(0x55556b453760, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] write(1, "executing program\n", 18) = 18 executing program [pid 383] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 383] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 383] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 383] rmdir("./config/usb_gadget/g1") = 0 [pid 383] exit_group(0) = ? [pid 383] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=383, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b453750) = 384 ci2-android-6-12-rust/strace-static-x86_64: Process 384 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] set_robust_list(0x55556b453760, 24) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] write(1, "executing program\n", 18) = 18 executing program [pid 384] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 384] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 384] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 384] rmdir("./config/usb_gadget/g1") = 0 [pid 384] exit_group(0) = ? [pid 384] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=384, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 385 [pid 385] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 385] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 385] setpgid(0, 0) = 0 [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 385] write(3, "1000", 4) = 4 [pid 385] close(3) = 0 [pid 385] write(1, "executing program\n", 18) = 18 executing program [pid 385] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 385] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 385] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 385] rmdir("./config/usb_gadget/g1") = 0 [pid 385] exit_group(0) = ? [pid 385] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=385, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x55556b453760, 24) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 386 [pid 386] rt_sigprocmask(SIG_SETMASK, [] [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 386] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 executing program [pid 386] write(1, "executing program\n", 18) = 18 [pid 386] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 386] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 386] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 386] rmdir("./config/usb_gadget/g1") = 0 [pid 386] exit_group(0) = ? [pid 386] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x55556b453760, 24) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x55556b453750) = 387 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 387] setpgid(0, 0) = 0 [pid 387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 387] write(3, "1000", 4) = 4 [pid 387] close(3) = 0 executing program [pid 387] write(1, "executing program\n", 18) = 18 [pid 387] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 387] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 387] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 34.963319][ T387] BUG: scheduling while atomic: syz-executor728/387/0x00000002 [ 34.971009][ T387] Modules linked in: [ 34.974915][ T387] CPU: 0 UID: 0 PID: 387 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 34.974943][ T387] Tainted: [W]=WARN [ 34.974947][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.974954][ T387] Call Trace: [ 34.974959][ T387] [ 34.974964][ T387] __dump_stack+0x21/0x30 [ 34.974986][ T387] dump_stack_lvl+0x140/0x1c0 [ 34.975003][ T387] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.975020][ T387] ? stack_trace_save+0xaa/0x100 [ 34.975035][ T387] dump_stack+0x19/0x20 [ 34.975050][ T387] __schedule_bug+0x12b/0x200 [ 34.975064][ T387] ? find_proxy_task+0x2460/0x2460 [ 34.975077][ T387] ? kasan_save_stack+0x4d/0x60 [ 34.975092][ T387] ? kasan_save_stack+0x3e/0x60 [ 34.975123][ T387] ? __kasan_record_aux_stack+0xb2/0xd0 [ 34.975139][ T387] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 34.975151][ T387] ? call_rcu+0x14/0x20 [ 34.975164][ T387] ? kernfs_put+0x1de/0x360 [ 34.975180][ T387] ? kernfs_remove_by_name_ns+0x108/0x180 [ 34.975196][ T387] ? sysfs_delete_link+0x10f/0x140 [ 34.975210][ T387] __schedule+0xb85/0x20b0 [ 34.975222][ T387] ? __kasan_check_write+0x18/0x20 [ 34.975234][ T387] ? _raw_spin_trylock+0xb5/0x140 [ 34.975251][ T387] ? __cfi__raw_spin_trylock+0x10/0x10 [ 34.975268][ T387] ? _raw_spin_unlock+0x45/0x60 [ 34.975284][ T387] ? __sched_text_start+0x10/0x10 [ 34.975295][ T387] ? __kasan_check_write+0x18/0x20 [ 34.975307][ T387] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.975323][ T387] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.975341][ T387] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 34.975358][ T387] schedule+0xc5/0x240 [ 34.975369][ T387] kernfs_drain+0x278/0x420 [ 34.975385][ T387] ? kernfs_show+0x280/0x280 [ 34.975400][ T387] ? __cfi_autoremove_wake_function+0x10/0x10 [ 34.975415][ T387] ? __cfi_down_write+0x10/0x10 [ 34.975429][ T387] __kernfs_remove+0x402/0x940 [ 34.975445][ T387] kernfs_remove_by_name_ns+0x100/0x180 [ 34.975462][ T387] sysfs_remove_file_ns+0x68/0x80 [ 34.975474][ T387] device_del+0x56c/0xcf0 [ 34.975492][ T387] ? __cfi_device_del+0x10/0x10 [ 34.975508][ T387] ? __kasan_check_write+0x18/0x20 [ 34.975521][ T387] ? kobject_put+0x1cc/0x2a0 [ 34.975537][ T387] device_destroy+0xb0/0x100 [ 34.975549][ T387] ? __cfi_device_destroy+0x10/0x10 [ 34.975560][ T387] ? __kasan_check_write+0x18/0x20 [ 34.975572][ T387] android_device_destroy+0x118/0x180 [ 34.975590][ T387] gadgets_drop+0x1d/0x30 [ 34.975602][ T387] ? __cfi_gadgets_drop+0x10/0x10 [ 34.975617][ T387] configfs_rmdir+0x8b7/0x9b0 [ 34.975634][ T387] vfs_rmdir+0x3db/0x560 [ 34.975651][ T387] do_rmdir+0x29a/0x590 [ 34.975667][ T387] ? __cfi_do_rmdir+0x10/0x10 [ 34.975684][ T387] ? __kasan_check_write+0x18/0x20 [ 34.975696][ T387] __x64_sys_rmdir+0x4b/0x60 [ 34.975713][ T387] x64_sys_call+0xaf7/0x2ee0 [ 34.975724][ T387] do_syscall_64+0x57/0xf0 [ 34.975740][ T387] ? clear_bhb_loop+0x50/0xa0 [ 34.975754][ T387] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.975767][ T387] RIP: 0033:0x7f67bd39f749 [ 34.975779][ T387] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 34.975790][ T387] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 34.975804][ T387] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 34.975813][ T387] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 34.975822][ T387] RBP: 0000000000008867 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 34.975831][ T387] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 34.975840][ T387] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 34.975850][ T387] [ 34.978041][ T387] BUG: scheduling while atomic: syz-executor728/387/0x00000000 [ 35.357310][ T387] Modules linked in: [ 35.361316][ T387] CPU: 0 UID: 0 PID: 387 Comm: syz-executor728 Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 35.361351][ T387] Tainted: [W]=WARN [ 35.361357][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.361368][ T387] Call Trace: [ 35.361374][ T387] [ 35.361380][ T387] __dump_stack+0x21/0x30 [ 35.361414][ T387] dump_stack_lvl+0x140/0x1c0 [ 35.361441][ T387] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.361535][ T387] dump_stack+0x19/0x20 [ 35.361563][ T387] __schedule_bug+0x12b/0x200 [ 35.361588][ T387] ? find_proxy_task+0x2460/0x2460 [ 35.361611][ T387] ? prepare_signal+0x13da/0x16b0 [ 35.361639][ T387] __schedule+0xb85/0x20b0 [ 35.361658][ T387] ? __wake_up_sync_key+0x1be/0x2c0 [ 35.361683][ T387] ? __cfi___wake_up_sync_key+0x10/0x10 [ 35.361707][ T387] ? __sched_text_start+0x10/0x10 [ 35.361727][ T387] ? __kasan_check_write+0x18/0x20 [ 35.361749][ T387] ? _raw_spin_lock_irq+0x93/0x120 [ 35.361777][ T387] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 35.361805][ T387] ? __kasan_check_read+0x15/0x20 [ 35.361826][ T387] ? cgroup_update_frozen+0x160/0x980 [ 35.361854][ T387] schedule+0xc5/0x240 [ 35.361873][ T387] ptrace_stop+0x528/0x8f0 [ 35.361896][ T387] ptrace_notify+0x1de/0x290 [ 35.361924][ T387] ? __cfi_ptrace_notify+0x10/0x10 [ 35.361950][ T387] ? __cfi_do_rmdir+0x10/0x10 [ 35.361979][ T387] ? __kasan_check_write+0x18/0x20 [ 35.362000][ T387] syscall_exit_work+0x84/0x150 [ 35.362020][ T387] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 35.362041][ T387] syscall_exit_to_user_mode+0x15/0xb0 [ 35.362065][ T387] do_syscall_64+0x63/0xf0 [ 35.362092][ T387] ? clear_bhb_loop+0x50/0xa0 [ 35.362115][ T387] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.362137][ T387] RIP: 0033:0x7f67bd39f749 [ 35.362156][ T387] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 35.362174][ T387] RSP: 002b:00007fffbd20ad98 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 35.362198][ T387] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f67bd39f749 [ 35.362213][ T387] RDX: 0031672f74656764 RSI: 72fd93309063071b RDI: 0000200000000240 [ 35.362230][ T387] RBP: 0000000000008867 R08: 00007fffbd20adbc R09: 00007fffbd20adbc [ 35.362244][ T387] R10: 00007fffbd20adbc R11: 0000000000000246 R12: 00007fffbd20adbc [ 35.362258][ T387] R13: 431bde82d7b634db R14: 00007fffbd20add0 R15: 0000000000000002 [ 35.362276][ T387] [ 35.362291][ T387] psi: inconsistent task state! task=99:klogd cpu=1 psi_flags=14 clear=0 set=10 [ 35.362334][ T99] Oops: general protection fault, maybe for address 0xffffffff85a43476: 0000 [#1] PREEMPT SMP KASAN PTI [ 35.631752][ T99] CPU: 1 UID: 0 PID: 99 Comm: klogd Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 35.644443][ T99] Tainted: [W]=WARN [ 35.648243][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.658287][ T99] RIP: f608:0x1ffff920001c9e40 [ 35.663043][ T99] Code: Unable to access opcode bytes at 0x1ffff920001c9e16. [ 35.670440][ T99] RSP: d737:ffffc90000e4f290 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 35.678879][ T99] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffffc90000e4f4a0 [ 35.686941][ T99] RDX: 1ffff920001c9e95 RSI: 1ffff920001c9e94 RDI: ffffc90000e4f493 [ 35.694963][ T99] RBP: ffffc90000e4f1f8 R08: ffffffff8599bf80 R09: 1ffff920001c9e88 [ 35.702943][ T99] R10: 0000000000000000 R11: ffffffff8599bf80 R12: 0000000000000001 [ 35.710913][ T99] R13: 000000000000000c R14: 0000000000000000 R15: ffffffff85a43476 [ 35.718885][ T99] FS: 00007f47220b1c80(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.727812][ T99] CS: f608 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.734389][ T99] CR2: 0000200000000040 CR3: 000000010a734000 CR4: 00000000003526b0 [ 35.742364][ T99] Call Trace: [ 35.745657][ T99] ================================================================== [ 35.753732][ T99] BUG: KASAN: stack-out-of-bounds in update_stack_state+0x3f8/0x4d0 [ 35.761720][ T99] Read of size 8 at addr ffffc90000e4f448 by task klogd/99 [ 35.768910][ T99] [ 35.771239][ T99] CPU: 1 UID: 0 PID: 99 Comm: klogd Tainted: G W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 35.771261][ T99] Tainted: [W]=WARN [ 35.771266][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.771274][ T99] Call Trace: [ 35.771279][ T99] [ 35.771292][ T99] __dump_stack+0x21/0x30 [ 35.771312][ T99] dump_stack_lvl+0x140/0x1c0 [ 35.771328][ T99] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.771345][ T99] ? __cfi__printk+0x10/0x10 [ 35.771367][ T99] print_address_description+0x71/0x210 [ 35.771385][ T99] print_report+0x4a/0x70 [ 35.771401][ T99] kasan_report+0x162/0x1a0 [ 35.771423][ T99] ? update_stack_state+0x3f8/0x4d0 [ 35.771438][ T99] ? update_stack_state+0x3f8/0x4d0 [ 35.771453][ T99] __asan_report_load8_noabort+0x18/0x20 [ 35.771466][ T99] update_stack_state+0x3f8/0x4d0 [ 35.771482][ T99] unwind_next_frame+0x39e/0x6b0 [ 35.771497][ T99] __unwind_start+0x340/0x400 [ 35.771512][ T99] __show_trace_log_lvl+0x372/0x420 [ 35.771528][ T99] __die_body+0xa9/0xb0 [ 35.771541][ T99] die_addr+0x4e/0x90 [ 35.771553][ T99] ? insn_get_prefixes+0xe46/0x1d20 [ 35.771570][ T99] exc_general_protection+0x13e/0x1e0 [ 35.771583][ T99] ? insn_get_prefixes+0xe46/0x1d20 [ 35.771599][ T99] ? inat_get_opcode_attribute+0x10/0x60 [ 35.771615][ T99] ? insn_get_prefixes+0xe46/0x1d20 [ 35.771630][ T99] ? __cfi_cmp_ex_search+0x10/0x10 [ 35.771647][ T99] ? __cfi_cmp_ex_search+0x10/0x10 [ 35.771663][ T99] ? insn_get_seg_base+0x177/0x6c0 [ 35.771678][ T99] ? inat_get_opcode_attribute+0x10/0x60 [ 35.771693][ T99] ? __cfi_insn_get_seg_base+0x10/0x10 [ 35.771708][ T99] ? __asan_memset+0x39/0x50 [ 35.771720][ T99] ? number+0xc9d/0xf00 [ 35.771736][ T99] ? __kasan_check_write+0x18/0x20 [ 35.771748][ T99] ? pv_hash+0x10d/0x230 [ 35.771760][ T99] ? native_halt+0x14/0x30 [ 35.771772][ T99] ? kvm_wait+0x163/0x230 [ 35.771787][ T99] ? __cfi_kvm_wait+0x10/0x10 [ 35.771804][ T99] ? __pv_queued_spin_lock_slowpath+0x8dd/0xe90 [ 35.771818][ T99] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 35.771831][ T99] ? snprintf+0xe9/0x140 [ 35.771846][ T99] ? console_verbose+0x3d/0x50 [ 35.771862][ T99] ? do_oops_enter_exit+0x8f/0x130 [ 35.771881][ T99] ? oops_begin+0xc9/0xe0 [ 35.771893][ T99] ? die_addr+0x22/0x90 [ 35.771906][ T99] ? exc_general_protection+0x13e/0x1e0 [ 35.771973][ T99] ? asm_exc_general_protection+0x2b/0x30 [ 35.772033][ T99] ? __switch_to+0x76b/0x1320 [ 35.772053][ T99] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 35.772067][ T99] ? select_task_rq_fair+0x5f0/0x2410 [ 35.772080][ T99] ? _raw_spin_lock+0x115/0x120 [ 35.772097][ T99] ? __cfi__raw_spin_lock+0x10/0x10 [ 35.772119][ T99] ? __kasan_kmalloc+0x96/0xb0 [ 35.772135][ T99] ? try_to_wake_up+0x106e/0x1fd0 [ 35.772153][ T99] ? avc_has_perm_noaudit+0x26b/0x360 [ 35.772169][ T99] ? __cfi_try_to_wake_up+0x10/0x10 [ 35.772183][ T99] ? avc_has_perm_noaudit+0x289/0x360 [ 35.772198][ T99] ? default_wake_function+0x47/0x60 [ 35.772214][ T99] ? autoremove_wake_function+0x1a/0x110 [ 35.772228][ T99] ? receiver_wake_function+0x50/0x80 [ 35.772243][ T99] ? receiver_wake_function+0x61/0x80 [ 35.772256][ T99] ? __wake_up_sync_key+0x174/0x2c0 [ 35.772271][ T99] ? __cfi___wake_up_sync_key+0x10/0x10 [ 35.772285][ T99] ? __kasan_check_write+0x18/0x20 [ 35.772298][ T99] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 35.772315][ T99] ? sock_def_readable+0x14d/0x430 [ 35.772332][ T99] ? __kasan_check_write+0x18/0x20 [ 35.772344][ T99] ? _raw_spin_lock+0x92/0x120 [ 35.772360][ T99] ? __cfi_sock_def_readable+0x10/0x10 [ 35.772377][ T99] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 35.772394][ T99] ? skb_queue_tail+0xcf/0x100 [ 35.772411][ T99] ? unix_dgram_sendmsg+0x12f8/0x1a90 [ 35.772427][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 35.772442][ T99] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 35.772456][ T99] ? security_socket_sendmsg+0x3d/0x100 [ 35.772473][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 35.772487][ T99] ? __sys_sendto+0x666/0x6e0 [ 35.772504][ T99] ? __cfi___sys_sendto+0x10/0x10 [ 35.772521][ T99] ? __kasan_check_write+0x18/0x20 [ 35.772539][ T99] ? __x64_sys_sendto+0xe9/0x100 [ 35.772554][ T99] ? x64_sys_call+0x2c2c/0x2ee0 [ 35.772570][ T99] ? do_syscall_64+0x57/0xf0 [ 35.772590][ T99] ? clear_bhb_loop+0x50/0xa0 [ 35.772604][ T99] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.772618][ T99] [ 35.772623][ T99] [ 36.213205][ T99] The buggy address belongs to stack of task klogd/99 [ 36.219968][ T99] and is located at offset 40 in frame: [ 36.225598][ T99] __pv_queued_spin_lock_slowpath+0x0/0xe90 [ 36.231490][ T99] [ 36.233817][ T99] This frame has 4 objects: [ 36.238303][ T99] [32, 33) 'old.i261' [ 36.238313][ T99] [48, 50) 'old.i.i' [ 36.242387][ T99] [64, 65) 'old.i' [ 36.246371][ T99] [80, 84) 'val.addr' [ 36.250177][ T99] [ 36.256546][ T99] The buggy address belongs to a vmalloc virtual mapping [ 36.263575][ T99] The buggy address belongs to the physical page: [ 36.270016][ T99] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b757 [ 36.278872][ T99] flags: 0x4000000000000000(zone=1) [ 36.284078][ T99] raw: 4000000000000000 0000000000000000 dead000000000122 0000000000000000 [ 36.292650][ T99] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 36.301230][ T99] page dumped because: kasan: bad access detected [ 36.307646][ T99] page_owner tracks the page as allocated [ 36.313363][ T99] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 98, tgid 98 (start-stop-daem), ts 5246385717, free_ts 0 [ 36.331501][ T99] post_alloc_hook+0x37d/0x3b0 [ 36.336265][ T99] prep_new_page+0x2d/0x180 [ 36.340795][ T99] get_page_from_freelist+0x4aea/0x4ba0 [ 36.346338][ T99] __alloc_pages_noprof+0x35a/0x7e0 [ 36.351533][ T99] __vmalloc_node_range_noprof+0x8e5/0x1300 [ 36.357428][ T99] dup_task_struct+0x5d6/0xd80 [ 36.362240][ T99] copy_process+0x57c/0x3350 [ 36.366911][ T99] kernel_clone+0x233/0x810 [ 36.371416][ T99] __ia32_sys_vfork+0xdb/0x150 [ 36.376191][ T99] x64_sys_call+0x2620/0x2ee0 [ 36.380863][ T99] do_syscall_64+0x57/0xf0 [ 36.385275][ T99] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.391165][ T99] page_owner free stack trace missing [ 36.396537][ T99] [ 36.398864][ T99] Memory state around the buggy address: [ 36.404522][ T99] ffffc90000e4f300: 00 00 00 00 f1 f1 f1 f1 f8 f3 f3 f3 00 00 00 00 [ 36.412668][ T99] ffffc90000e4f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.420717][ T99] >ffffc90000e4f400: 00 00 00 00 f1 f1 f1 f1 f8 f2 f8 f2 f8 f2 04 f3 [ 36.428806][ T99] ^ [ 36.435202][ T99] ffffc90000e4f480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.443253][ T99] ffffc90000e4f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.451387][ T99] ================================================================== [ 36.459437][ T99] [ 36.462360][ T99] ? __kasan_check_write+0x18/0x20 [ 36.467463][ T99] ? pv_hash+0x10d/0x230 [ 36.471708][ T99] ? native_halt+0x14/0x30 [ 36.476137][ T99] ? kvm_wait+0x163/0x230 [ 36.480478][ T99] ? __cfi_kvm_wait+0x10/0x10 [ 36.485153][ T99] ? __pv_queued_spin_lock_slowpath+0x8dd/0xe90 [ 36.491390][ T99] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 36.497985][ T99] ? snprintf+0xe9/0x140 [ 36.502286][ T99] ? console_verbose+0x3d/0x50 [ 36.507054][ T99] ? do_oops_enter_exit+0x8f/0x130 [ 36.512180][ T99] ? oops_begin+0xc9/0xe0 [ 36.516538][ T99] ? die_addr+0x22/0x90 [ 36.520701][ T99] ? exc_general_protection+0x13e/0x1e0 [ 36.526248][ T99] ? asm_exc_general_protection+0x2b/0x30 [ 36.531965][ T99] ? __switch_to+0x76b/0x1320 [ 36.536654][ T99] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 36.543257][ T99] ? select_task_rq_fair+0x5f0/0x2410 [ 36.548627][ T99] ? _raw_spin_lock+0x115/0x120 [ 36.553489][ T99] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.558708][ T99] ? __kasan_kmalloc+0x96/0xb0 [ 36.563489][ T99] ? try_to_wake_up+0x106e/0x1fd0 [ 36.568513][ T99] ? avc_has_perm_noaudit+0x26b/0x360 [ 36.573898][ T99] ? __cfi_try_to_wake_up+0x10/0x10 [ 36.579087][ T99] ? avc_has_perm_noaudit+0x289/0x360 [ 36.584476][ T99] ? default_wake_function+0x47/0x60 [ 36.589756][ T99] ? autoremove_wake_function+0x1a/0x110 [ 36.595378][ T99] ? receiver_wake_function+0x50/0x80 [ 36.600760][ T99] ? receiver_wake_function+0x61/0x80 [ 36.606124][ T99] ? __wake_up_sync_key+0x174/0x2c0 [ 36.611499][ T99] ? __cfi___wake_up_sync_key+0x10/0x10 [ 36.617060][ T99] ? __kasan_check_write+0x18/0x20 [ 36.622170][ T99] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 36.627644][ T99] ? sock_def_readable+0x14d/0x430 [ 36.632778][ T99] ? __kasan_check_write+0x18/0x20 [ 36.637884][ T99] ? _raw_spin_lock+0x92/0x120 [ 36.642650][ T99] ? __cfi_sock_def_readable+0x10/0x10 [ 36.648626][ T99] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 36.654430][ T99] ? skb_queue_tail+0xcf/0x100 [ 36.659189][ T99] ? unix_dgram_sendmsg+0x12f8/0x1a90 [ 36.664557][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 36.670313][ T99] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 36.675696][ T99] ? security_socket_sendmsg+0x3d/0x100 [ 36.681245][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 36.686789][ T99] ? __sys_sendto+0x666/0x6e0 [ 36.691478][ T99] ? __cfi___sys_sendto+0x10/0x10 [ 36.696518][ T99] ? __kasan_check_write+0x18/0x20 [ 36.701622][ T99] ? __x64_sys_sendto+0xe9/0x100 [ 36.706651][ T99] ? x64_sys_call+0x2c2c/0x2ee0 [ 36.711523][ T99] ? do_syscall_64+0x57/0xf0 [ 36.716141][ T99] ? clear_bhb_loop+0x50/0xa0 [ 36.720834][ T99] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.726899][ T99] [ 36.729912][ T99] Modules linked in: [ 36.733844][ T99] Oops: general protection fault, maybe for address 0xffff888108b7a600: 0000 [#2] PREEMPT SMP KASAN PTI [ 36.744969][ T99] CPU: 0 UID: 0 PID: 99 Comm: klogd Tainted: G B D W syzkaller #0 3aec22cf26281034e067abc904a659b9ba9f7313 [ 36.757379][ T99] Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN [ 36.763180][ T99] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.773495][ T99] RIP: 0010:__switch_to+0x76b/0x1320 [ 36.778807][ T99] Code: 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 00 01 00 00 0f 85 51 02 00 00 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc e8 3a 39 4e 00 8e c3 e9 a0 fc ff ff e8 2e 39 4e [ 36.798533][ T99] RSP: 0018:ffffc90000e4f6b8 EFLAGS: 00010046 [ 36.804709][ T99] RAX: ffff888108b7a600 RBX: 1ffff1103ede9f48 RCX: ffff88810cfa5f00 [ 36.812692][ T99] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.820762][ T99] RBP: 1ffff1103edea162 R08: ffff88810cfa5f07 R09: 1ffff110219f4be0 [ 36.828728][ T99] R10: dffffc0000000000 R11: ffffed10219f4be1 R12: ffff8881f6f50b00 [ 36.836692][ T99] R13: ffff8881f6f4fa41 R14: 0008000000000000 R15: ffff8881f6f50b14 [ 36.844657][ T99] FS: 00007f47220b1c80(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.853577][ T99] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.860156][ T99] CR2: 00007f67bd3dd670 CR3: 000000010a734000 CR4: 00000000003526b0 [ 36.868227][ T99] Call Trace: [ 36.871497][ T99] [ 36.874435][ T99] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 36.881041][ T99] ? select_task_rq_fair+0x5f0/0x2410 [ 36.886424][ T99] ? _raw_spin_lock+0x115/0x120 [ 36.891279][ T99] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.896489][ T99] ? __kasan_kmalloc+0x96/0xb0 [ 36.901288][ T99] ? try_to_wake_up+0x106e/0x1fd0 [ 36.906332][ T99] ? avc_has_perm_noaudit+0x26b/0x360 [ 36.911701][ T99] ? __cfi_try_to_wake_up+0x10/0x10 [ 36.917079][ T99] ? avc_has_perm_noaudit+0x289/0x360 [ 36.922449][ T99] ? default_wake_function+0x47/0x60 [ 36.927744][ T99] ? autoremove_wake_function+0x1a/0x110 [ 36.933368][ T99] ? receiver_wake_function+0x50/0x80 [ 36.938797][ T99] ? receiver_wake_function+0x61/0x80 [ 36.944172][ T99] ? __wake_up_sync_key+0x174/0x2c0 [ 36.949378][ T99] ? __cfi___wake_up_sync_key+0x10/0x10 [ 36.954919][ T99] ? __kasan_check_write+0x18/0x20 [ 36.960029][ T99] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 36.966032][ T99] ? sock_def_readable+0x14d/0x430 [ 36.971174][ T99] ? __kasan_check_write+0x18/0x20 [ 36.976299][ T99] ? _raw_spin_lock+0x92/0x120 [ 36.981097][ T99] ? __cfi_sock_def_readable+0x10/0x10 [ 36.986570][ T99] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 36.992390][ T99] ? skb_queue_tail+0xcf/0x100 [ 36.997174][ T99] ? unix_dgram_sendmsg+0x12f8/0x1a90 [ 37.002805][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 37.008350][ T99] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 37.013663][ T99] ? security_socket_sendmsg+0x3d/0x100 [ 37.019228][ T99] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 37.024801][ T99] ? __sys_sendto+0x666/0x6e0 [ 37.029480][ T99] ? __cfi___sys_sendto+0x10/0x10 [ 37.034536][ T99] ? __kasan_check_write+0x18/0x20 [ 37.039657][ T99] ? __x64_sys_sendto+0xe9/0x100 [ 37.044614][ T99] ? x64_sys_call+0x2c2c/0x2ee0 [ 37.049469][ T99] ? do_syscall_64+0x57/0xf0 [ 37.054413][ T99] ? clear_bhb_loop+0x50/0xa0 [ 37.059145][ T99] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.065238][ T99] [ 37.068274][ T99] Modules linked in: [ 37.072161][ T99] ---[ end trace 0000000000000000 ]--- [ 37.077631][ T99] RIP: f608:0x1ffff920001c9e40 [ 37.082404][ T99] Code: Unable to access opcode bytes at 0x1ffff920001c9e16. [ 37.090024][ T99] RSP: d737:ffffc90000e4f290 EFLAGS: 00000000 ORIG_RAX: 0000000000000000 [ 37.098440][ T99] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffffc90000e4f4a0 [ 37.106402][ T99] RDX: 1ffff920001c9e95 RSI: 1ffff920001c9e94 RDI: ffffc90000e4f493 [ 37.114402][ T99] RBP: ffffc90000e4f1f8 R08: ffffffff8599bf80 R09: 1ffff920001c9e88 [ 37.122416][ T99] R10: 0000000000000000 R11: ffffffff8599bf80 R12: 0000000000000001 [ 37.130385][ T99] R13: 000000000000000c R14: 0000000000000000 R15: ffffffff85a43476 [ 37.138386][ T99] FS: 00007f47220b1c80(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.147454][ T99] CS: f608 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.154064][ T99] CR2: 00007f67bd3dd670 CR3: 000000010a734000 CR4: 00000000003526b0 [ 37.162041][ T99] Kernel panic - not syncing: Fatal exception [ 38.254491][ T99] Shutting down cpus with NMI [ 38.259485][ T99] Kernel Offset: disabled [ 38.263985][ T99] Rebooting in 86400 seconds..