ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor3833070986 <...> Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor3833070986", ["ci2-android-6-12-rust/syz-executor3833070986"], 0x7fff4adf9eb0 /* 10 vars */) = 0 brk(NULL) = 0x55558f0c8000 brk(0x55558f0c8e00) = 0x55558f0c8e00 arch_prctl(ARCH_SET_FS, 0x55558f0c8480) = 0 set_tid_address(0x55558f0c8750) = 312 set_robust_list(0x55558f0c8760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor3833070986", 4096) = 50 getrandom("\x7f\x80\xb3\xad\xe3\x33\x5e\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f0c8e00 brk(0x55558f0e9e00) = 0x55558f0e9e00 brk(0x55558f0ea000) = 0x55558f0ea000 mprotect(0x7f8337d98000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 [ 25.376934][ T36] audit: type=1400 audit(1785936397.360:64): avc: denied { execmem } for pid=312 comm="syz-executor383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.396655][ T312] cgroup: Unknown subsys name 'net' [ 25.402464][ T36] audit: type=1400 audit(1785936397.370:65): avc: denied { mounton } for pid=312 comm="syz-executor383" path="/syzcgroup/unified" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 [ 25.404079][ T312] cgroup: Unknown subsys name 'devices' [ 25.426180][ T36] audit: type=1400 audit(1785936397.370:66): avc: denied { mount } for pid=312 comm="syz-executor383" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.453562][ T36] audit: type=1400 audit(1785936397.380:67): avc: denied { mounton } for pid=312 comm="syz-executor383" path="/syzcgroup/net" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 25.476371][ T36] audit: type=1400 audit(1785936397.380:68): avc: denied { unmount } for pid=312 comm="syz-executor383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 25.597563][ T312] cgroup: Unknown subsys name 'hugetlb' [ 25.603746][ T312] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f8337ced330, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f8337cf1000}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f8337ced330, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f8337cf1000}, NULL, 8) = 0 getrandom("\xa9\x82\x92\x86\x4e\x02\x8c\xd8", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.3xm22e", 0700) = 0 chmod("./syzkaller.3xm22e", 0777) = 0 chdir("./syzkaller.3xm22e") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f0c8750) = 313 ci2-android-6-12-rust/strace-static-x86_64: Process 313 attached [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] set_robust_list(0x55558f0c8760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 313] getppid() = 0 [pid 313] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 313] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 313] unshare(CLONE_NEWNS) = 0 [pid 313] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 313] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 313] unshare(CLONE_NEWCGROUP) = 0 [pid 313] unshare(CLONE_NEWUTS) = 0 [pid 313] unshare(CLONE_SYSVSEM) = 0 [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 313] getpid() = 1 [pid 313] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<) = 0 [pid 313] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 7 entries */, 32768) = 208 [pid 313] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 313] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./0/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./0/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4, 0x55558f0d1860 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4, 0x55558f0d1860 /* 0 entries */, 32768) = 0 [pid 313] close(4) = 0 [pid 313] rmdir("./0/config") = 0 [pid 313] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./0/binderfs") = 0 [pid 313] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./0/cgroup.net") = 0 [pid 313] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./0/cgroup.cpu") = 0 [pid 313] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./0/cgroup") = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./0") = 0 [pid 313] mkdir("./1", 0777) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f0c8750) = 3 ci2-android-6-12-rust/strace-static-x86_64: Process 316 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] set_robust_list(0x55558f0c8760, 24) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] chdir("./1") = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 316] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 316] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] read(200, 0x7ffee2edfbd0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 316] write(1, "executing program\n", 18) = 18 executing program [pid 316] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 316] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 316] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 316] rmdir("./config/usb_gadget/g1") = 0 [pid 316] close(3) = -1 EBADF (Bad file descriptor) [pid 316] close(4) = -1 EBADF (Bad file descriptor) [pid 316] close(5) = -1 EBADF (Bad file descriptor) [pid 316] close(6) = -1 EBADF (Bad file descriptor) [pid 316] close(7) = -1 EBADF (Bad file descriptor) [pid 316] close(8) = -1 EBADF (Bad file descriptor) [pid 316] close(9) = -1 EBADF (Bad file descriptor) [pid 316] close(10) = -1 EBADF (Bad file descriptor) [pid 316] close(11) = -1 EBADF (Bad file descriptor) [pid 316] close(12) = -1 EBADF (Bad file descriptor) [pid 316] close(13) = -1 EBADF (Bad file descriptor) [pid 316] close(14) = -1 EBADF (Bad file descriptor) [pid 316] close(15) = -1 EBADF (Bad file descriptor) [pid 316] close(16) = -1 EBADF (Bad file descriptor) [pid 316] close(17) = -1 EBADF (Bad file descriptor) [pid 316] close(18) = -1 EBADF (Bad file descriptor) [pid 316] close(19) = -1 EBADF (Bad file descriptor) [pid 316] close(20) = -1 EBADF (Bad file descriptor) [pid 316] close(21) = -1 EBADF (Bad file descriptor) [pid 316] close(22) = -1 EBADF (Bad file descriptor) [pid 316] close(23) = -1 EBADF (Bad file descriptor) [pid 316] close(24) = -1 EBADF (Bad file descriptor) [pid 316] close(25) = -1 EBADF (Bad file descriptor) [pid 316] close(26) = -1 EBADF (Bad file descriptor) [pid 316] close(27) = -1 EBADF (Bad file descriptor) [pid 316] close(28) = -1 EBADF (Bad file descriptor) [pid 316] close(29) = -1 EBADF (Bad file descriptor) [pid 316] exit_group(0) = ? [ 25.883575][ T36] audit: type=1400 audit(1785936397.790:73): avc: denied { mount } for pid=313 comm="syz-executor383" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [pid 316] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 313] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 7 entries */, 32768) = 208 [pid 313] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 313] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./1/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./1/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./1/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4, 0x55558f0d1860 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4, 0x55558f0d1860 /* 0 entries */, 32768) = 0 [pid 313] close(4) = 0 [pid 313] rmdir("./1/config") = 0 [pid 313] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./1/binderfs") = 0 [pid 313] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./1/cgroup.net") = 0 [pid 313] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./1/cgroup.cpu") = 0 [pid 313] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./1/cgroup") = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./1") = 0 [pid 313] mkdir("./2", 0777) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f0c8750) = 4 ci2-android-6-12-rust/strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x55558f0c8760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] <... set_robust_list resumed>) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] chdir("./2") = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 317] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 317] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] read(200, 0x7ffee2edfbd0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 317] write(1, "executing program\n", 18) = 18 executing program [pid 317] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 317] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 317] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 317] rmdir("./config/usb_gadget/g1") = 0 [pid 317] close(3) = -1 EBADF (Bad file descriptor) [pid 317] close(4) = -1 EBADF (Bad file descriptor) [pid 317] close(5) = -1 EBADF (Bad file descriptor) [pid 317] close(6) = -1 EBADF (Bad file descriptor) [pid 317] close(7) = -1 EBADF (Bad file descriptor) [pid 317] close(8) = -1 EBADF (Bad file descriptor) [pid 317] close(9) = -1 EBADF (Bad file descriptor) [pid 317] close(10) = -1 EBADF (Bad file descriptor) [pid 317] close(11) = -1 EBADF (Bad file descriptor) [pid 317] close(12) = -1 EBADF (Bad file descriptor) [pid 317] close(13) = -1 EBADF (Bad file descriptor) [pid 317] close(14) = -1 EBADF (Bad file descriptor) [pid 317] close(15) = -1 EBADF (Bad file descriptor) [pid 317] close(16) = -1 EBADF (Bad file descriptor) [pid 317] close(17) = -1 EBADF (Bad file descriptor) [pid 317] close(18) = -1 EBADF (Bad file descriptor) [pid 317] close(19) = -1 EBADF (Bad file descriptor) [pid 317] close(20) = -1 EBADF (Bad file descriptor) [pid 317] close(21) = -1 EBADF (Bad file descriptor) [pid 317] close(22) = -1 EBADF (Bad file descriptor) [pid 317] close(23) = -1 EBADF (Bad file descriptor) [pid 317] close(24) = -1 EBADF (Bad file descriptor) [pid 317] close(25) = -1 EBADF (Bad file descriptor) [pid 317] close(26) = -1 EBADF (Bad file descriptor) [pid 317] close(27) = -1 EBADF (Bad file descriptor) [pid 317] close(28) = -1 EBADF (Bad file descriptor) [pid 317] close(29) = -1 EBADF (Bad file descriptor) [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 313] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 7 entries */, 32768) = 208 [pid 313] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 313] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./2/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./2/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./2/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4, 0x55558f0d1860 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4, 0x55558f0d1860 /* 0 entries */, 32768) = 0 [pid 313] close(4) = 0 [pid 313] rmdir("./2/config") = 0 [pid 313] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./2/binderfs") = 0 [pid 313] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./2/cgroup.net") = 0 [pid 313] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./2/cgroup.cpu") = 0 [pid 313] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./2/cgroup") = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./2") = 0 [pid 313] mkdir("./3", 0777) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 318 attached , child_tidptr=0x55558f0c8750) = 5 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] set_robust_list(0x55558f0c8760, 24) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] chdir("./3") = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 318] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 318] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] read(200, 0x7ffee2edfbd0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 318] write(1, "executing program\n", 18) = 18 executing program [pid 318] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 318] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 318] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 318] rmdir("./config/usb_gadget/g1") = 0 [pid 318] close(3) = -1 EBADF (Bad file descriptor) [pid 318] close(4) = -1 EBADF (Bad file descriptor) [pid 318] close(5) = -1 EBADF (Bad file descriptor) [pid 318] close(6) = -1 EBADF (Bad file descriptor) [pid 318] close(7) = -1 EBADF (Bad file descriptor) [pid 318] close(8) = -1 EBADF (Bad file descriptor) [pid 318] close(9) = -1 EBADF (Bad file descriptor) [pid 318] close(10) = -1 EBADF (Bad file descriptor) [pid 318] close(11) = -1 EBADF (Bad file descriptor) [pid 318] close(12) = -1 EBADF (Bad file descriptor) [pid 318] close(13) = -1 EBADF (Bad file descriptor) [pid 318] close(14) = -1 EBADF (Bad file descriptor) [pid 318] close(15) = -1 EBADF (Bad file descriptor) [pid 318] close(16) = -1 EBADF (Bad file descriptor) [pid 318] close(17) = -1 EBADF (Bad file descriptor) [pid 318] close(18) = -1 EBADF (Bad file descriptor) [pid 318] close(19) = -1 EBADF (Bad file descriptor) [pid 318] close(20) = -1 EBADF (Bad file descriptor) [pid 318] close(21) = -1 EBADF (Bad file descriptor) [pid 318] close(22) = -1 EBADF (Bad file descriptor) [pid 318] close(23) = -1 EBADF (Bad file descriptor) [pid 318] close(24) = -1 EBADF (Bad file descriptor) [pid 318] close(25) = -1 EBADF (Bad file descriptor) [pid 318] close(26) = -1 EBADF (Bad file descriptor) [pid 318] close(27) = -1 EBADF (Bad file descriptor) [pid 318] close(28) = -1 EBADF (Bad file descriptor) [pid 318] close(29) = -1 EBADF (Bad file descriptor) [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 313] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 7 entries */, 32768) = 208 [pid 313] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 313] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./3/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./3/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./3/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4, 0x55558f0d1860 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4, 0x55558f0d1860 /* 0 entries */, 32768) = 0 [pid 313] close(4) = 0 [pid 313] rmdir("./3/config") = 0 [pid 313] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./3/binderfs") = 0 [pid 313] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./3/cgroup.net") = 0 [pid 313] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./3/cgroup.cpu") = 0 [pid 313] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./3/cgroup") = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./3") = 0 [pid 313] mkdir("./4", 0777) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f0c8750) = 6 ci2-android-6-12-rust/strace-static-x86_64: Process 319 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] set_robust_list(0x55558f0c8760, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] chdir("./4") = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 319] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 319] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] read(200, 0x7ffee2edfbd0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 319] write(1, "executing program\n", 18) = 18 executing program [pid 319] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 319] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 319] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 319] rmdir("./config/usb_gadget/g1") = 0 [pid 319] close(3) = -1 EBADF (Bad file descriptor) [pid 319] close(4) = -1 EBADF (Bad file descriptor) [pid 319] close(5) = -1 EBADF (Bad file descriptor) [pid 319] close(6) = -1 EBADF (Bad file descriptor) [pid 319] close(7) = -1 EBADF (Bad file descriptor) [pid 319] close(8) = -1 EBADF (Bad file descriptor) [pid 319] close(9) = -1 EBADF (Bad file descriptor) [pid 319] close(10) = -1 EBADF (Bad file descriptor) [pid 319] close(11) = -1 EBADF (Bad file descriptor) [pid 319] close(12) = -1 EBADF (Bad file descriptor) [pid 319] close(13) = -1 EBADF (Bad file descriptor) [pid 319] close(14) = -1 EBADF (Bad file descriptor) [pid 319] close(15) = -1 EBADF (Bad file descriptor) [pid 319] close(16) = -1 EBADF (Bad file descriptor) [pid 319] close(17) = -1 EBADF (Bad file descriptor) [pid 319] close(18) = -1 EBADF (Bad file descriptor) [pid 319] close(19) = -1 EBADF (Bad file descriptor) [pid 319] close(20) = -1 EBADF (Bad file descriptor) [pid 319] close(21) = -1 EBADF (Bad file descriptor) [pid 319] close(22) = -1 EBADF (Bad file descriptor) [pid 319] close(23) = -1 EBADF (Bad file descriptor) [pid 319] close(24) = -1 EBADF (Bad file descriptor) [pid 319] close(25) = -1 EBADF (Bad file descriptor) [pid 319] close(26) = -1 EBADF (Bad file descriptor) [pid 319] close(27) = -1 EBADF (Bad file descriptor) [pid 319] close(28) = -1 EBADF (Bad file descriptor) [pid 319] close(29) = -1 EBADF (Bad file descriptor) [pid 319] exit_group(0) = ? [pid 319] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 7 entries */, 32768) = 208 [pid 313] umount2("./4/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 313] umount2("./4/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./4/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./4/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./4/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4, 0x55558f0d1860 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4, 0x55558f0d1860 /* 0 entries */, 32768) = 0 [pid 313] close(4) = 0 [pid 313] rmdir("./4/config") = 0 [pid 313] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./4/binderfs") = 0 [pid 313] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./4/cgroup.net") = 0 [pid 313] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./4/cgroup.cpu") = 0 [pid 313] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./4/cgroup") = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./4") = 0 [pid 313] mkdir("./5", 0777) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 320 attached , child_tidptr=0x55558f0c8750) = 7 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 320] set_robust_list(0x55558f0c8760, 24) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] chdir("./5") = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 320] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 320] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] read(200, 0x7ffee2edfbd0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] mkdirat(AT_FDCWD, "./config", 0777) = 0 executing program [pid 320] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 320] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 320] rmdir("./config/usb_gadget/g1") = 0 [pid 320] close(3) = -1 EBADF (Bad file descriptor) [pid 320] close(4) = -1 EBADF (Bad file descriptor) [pid 320] close(5) = -1 EBADF (Bad file descriptor) [pid 320] close(6) = -1 EBADF (Bad file descriptor) [pid 320] close(7) = -1 EBADF (Bad file descriptor) [pid 320] close(8) = -1 EBADF (Bad file descriptor) [pid 320] close(9) = -1 EBADF (Bad file descriptor) [pid 320] close(10) = -1 EBADF (Bad file descriptor) [pid 320] close(11) = -1 EBADF (Bad file descriptor) [pid 320] close(12) = -1 EBADF (Bad file descriptor) [pid 320] close(13) = -1 EBADF (Bad file descriptor) [pid 320] close(14) = -1 EBADF (Bad file descriptor) [pid 320] close(15) = -1 EBADF (Bad file descriptor) [pid 320] close(16) = -1 EBADF (Bad file descriptor) [pid 320] close(17) = -1 EBADF (Bad file descriptor) [pid 320] close(18) = -1 EBADF (Bad file descriptor) [pid 320] close(19) = -1 EBADF (Bad file descriptor) [pid 320] close(20) = -1 EBADF (Bad file descriptor) [pid 320] close(21) = -1 EBADF (Bad file descriptor) [pid 320] close(22) = -1 EBADF (Bad file descriptor) [pid 320] close(23) = -1 EBADF (Bad file descriptor) [pid 320] close(24) = -1 EBADF (Bad file descriptor) [pid 320] close(25) = -1 EBADF (Bad file descriptor) [pid 320] close(26) = -1 EBADF (Bad file descriptor) [pid 320] close(27) = -1 EBADF (Bad file descriptor) [pid 320] close(28) = -1 EBADF (Bad file descriptor) [pid 320] close(29) = -1 EBADF (Bad file descriptor) [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ [pid 313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 313] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 313] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 313] fstat(3, {st_mode=S_IFDIR|0700, st_size=140, ...}) = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 7 entries */, 32768) = 208 [pid 313] umount2("./5/config", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 313] umount2("./5/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./5/config", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] umount2("./5/config", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] openat(AT_FDCWD, "./5/config", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 313] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 313] getdents64(4, 0x55558f0d1860 /* 2 entries */, 32768) = 48 [pid 313] getdents64(4, 0x55558f0d1860 /* 0 entries */, 32768) = 0 [pid 313] close(4) = 0 [pid 313] rmdir("./5/config") = 0 [pid 313] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./5/binderfs") = 0 [pid 313] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./5/cgroup.net") = 0 [pid 313] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./5/cgroup.cpu") = 0 [pid 313] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 313] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 313] unlink("./5/cgroup") = 0 [pid 313] getdents64(3, 0x55558f0c9820 /* 0 entries */, 32768) = 0 [pid 313] close(3) = 0 [pid 313] rmdir("./5") = 0 [pid 313] mkdir("./6", 0777) = 0 [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f0c8750) = 8 ci2-android-6-12-rust/strace-static-x86_64: Process 321 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] set_robust_list(0x55558f0c8760, 24) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] chdir("./6") = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 321] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 321] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] read(200, 0x7ffee2edfbd0, 1000) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 321] write(1, "executing program\n", 18) = 18 executing program [pid 321] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 321] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 321] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 26.049954][ T321] BUG: scheduling while atomic: syz-executor383/321/0x00000002 [ 26.057699][ T321] Modules linked in: [ 26.061679][ T321] CPU: 0 UID: 0 PID: 321 Comm: syz-executor383 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 26.061711][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.061731][ T321] Call Trace: [ 26.061737][ T321] [ 26.061745][ T321] __dump_stack+0x21/0x30 [ 26.061787][ T321] dump_stack_lvl+0x140/0x1c0 [ 26.061816][ T321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.061847][ T321] dump_stack+0x19/0x20 [ 26.061874][ T321] __schedule_bug+0x12b/0x200 [ 26.061898][ T321] ? find_proxy_task+0x2460/0x2460 [ 26.061921][ T321] ? update_load_avg+0x4f3/0x1980 [ 26.061947][ T321] ? __kernel_text_address+0x11/0x40 [ 26.061975][ T321] ? unwind_get_return_address+0x51/0x90 [ 26.062003][ T321] __schedule+0xb85/0x20b0 [ 26.062027][ T321] ? kvm_sched_clock_read+0x15/0x30 [ 26.062057][ T321] ? sched_clock_noinstr+0xd/0x30 [ 26.062084][ T321] ? __kasan_check_read+0x15/0x20 [ 26.062106][ T321] ? __sched_text_start+0x10/0x10 [ 26.062133][ T321] ? __kasan_check_read+0x15/0x20 [ 26.062153][ T321] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 26.062186][ T321] ? __kasan_check_write+0x18/0x20 [ 26.062207][ T321] ? _raw_spin_lock_irq+0x93/0x120 [ 26.062231][ T321] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 26.062257][ T321] schedule+0xc5/0x240 [ 26.062288][ T321] schedule_preempt_disabled+0x14/0x30 [ 26.062316][ T321] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 26.062340][ T321] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 26.062359][ T321] ? try_to_wake_up+0x111a/0x1fd0 [ 26.062383][ T321] ? __kasan_check_write+0x18/0x20 [ 26.062402][ T321] ? wake_q_add_safe+0x29/0x100 [ 26.062432][ T321] ? cpus_share_resources+0xa0/0x130 [ 26.062462][ T321] ? rwsem_mark_wake+0x507/0x770 [ 26.062499][ T321] ? rwsem_read_trylock+0x275/0x5a0 [ 26.062529][ T321] ? wake_up_q+0x10a/0x1c0 [ 26.062546][ T321] ? downgrade_write+0x470/0x470 [ 26.062583][ T321] down_write+0x163/0x2b0 [ 26.062601][ T321] ? __cfi_down_write+0x10/0x10 [ 26.062619][ T321] ? down_read+0x7f/0xe0 [ 26.062648][ T321] ? __cfi_down_read+0x10/0x10 [ 26.062681][ T321] kernfs_remove_by_name_ns+0x8c/0x180 [ 26.062715][ T321] sysfs_unmerge_group+0xd7/0x130 [ 26.062742][ T321] dpm_sysfs_remove+0x7b/0xd0 [ 26.062772][ T321] device_del+0x241/0xcf0 [ 26.062805][ T321] ? __cfi_class_find_device+0x10/0x10 [ 26.062830][ T321] ? __cfi_device_del+0x10/0x10 [ 26.062862][ T321] ? __kasan_check_write+0x18/0x20 [ 26.062885][ T321] ? kobject_put+0x1cc/0x2a0 [ 26.062911][ T321] device_destroy+0xb0/0x100 [ 26.062944][ T321] ? __cfi_device_destroy+0x10/0x10 [ 26.062978][ T321] ? __kasan_check_write+0x18/0x20 [ 26.063002][ T321] android_device_destroy+0x118/0x180 [ 26.063034][ T321] gadgets_drop+0x1d/0x30 [ 26.063054][ T321] ? __cfi_gadgets_drop+0x10/0x10 [ 26.063095][ T321] configfs_rmdir+0x8b7/0x9b0 [ 26.063126][ T321] vfs_rmdir+0x3de/0x560 [ 26.063159][ T321] do_rmdir+0x29a/0x590 [ 26.063191][ T321] ? __cfi_do_rmdir+0x10/0x10 [ 26.063223][ T321] ? __kasan_check_write+0x18/0x20 [ 26.063247][ T321] __x64_sys_rmdir+0x4b/0x60 [ 26.063279][ T321] x64_sys_call+0xaf7/0x2ee0 [ 26.063300][ T321] do_syscall_64+0x57/0xf0 [ 26.063325][ T321] ? clear_bhb_loop+0x50/0xa0 [ 26.063357][ T321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.063387][ T321] RIP: 0033:0x7f8337d08d19 [ 26.063417][ T321] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 26.063436][ T321] RSP: 002b:00007ffee2edffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 26.063460][ T321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8337d08d19 [ 26.063477][ T321] RDX: 0031672f74656764 RSI: a5e06be54067d0be RDI: 0000200000000240 [ 26.063494][ T321] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000003 [ 26.063507][ T321] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffee2edffec [ 26.063522][ T321] R13: 00007ffee2ee0000 R14: 00007ffee2ee0040 R15: 0000000000000006 [ 26.063541][ T321] [ 26.063906][ T321] BUG: scheduling while atomic: syz-executor383/321/0x00000000 [ 26.467037][ T321] Modules linked in: [ 26.471001][ T321] CPU: 1 UID: 0 PID: 321 Comm: syz-executor383 Tainted: G W syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 26.471028][ T321] Tainted: [W]=WARN [ 26.471034][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.471043][ T321] Call Trace: [ 26.471049][ T321] [ 26.471056][ T321] __dump_stack+0x21/0x30 [ 26.471082][ T321] dump_stack_lvl+0x140/0x1c0 [ 26.471105][ T321] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.471128][ T321] dump_stack+0x19/0x20 [ 26.471149][ T321] __schedule_bug+0x12b/0x200 [ 26.471166][ T321] ? find_proxy_task+0x2460/0x2460 [ 26.471185][ T321] __schedule+0xb85/0x20b0 [ 26.471205][ T321] ? preempt_schedule+0xc5/0xe0 [ 26.471225][ T321] ? __cfi_preempt_schedule+0x10/0x10 [ 26.471245][ T321] ? __cfi___wake_up_sync_key+0x10/0x10 [ 26.471264][ T321] ? preempt_schedule_thunk+0x1a/0x40 [ 26.471280][ T321] ? __sched_text_start+0x10/0x10 [ 26.471300][ T321] ? __kasan_check_write+0x18/0x20 [ 26.471316][ T321] ? _raw_spin_lock_irq+0x93/0x120 [ 26.471334][ T321] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 26.471352][ T321] ? __kasan_check_read+0x15/0x20 [ 26.471367][ T321] ? cgroup_update_frozen+0x160/0x980 [ 26.471389][ T321] schedule+0xc5/0x240 [ 26.471407][ T321] ptrace_stop+0x528/0x8f0 [ 26.471426][ T321] ptrace_notify+0x1de/0x290 [ 26.471447][ T321] ? __cfi_ptrace_notify+0x10/0x10 [ 26.471469][ T321] ? __cfi_do_rmdir+0x10/0x10 [ 26.471492][ T321] ? __kasan_check_write+0x18/0x20 [ 26.471507][ T321] syscall_exit_work+0x84/0x150 [ 26.471532][ T321] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 26.471548][ T321] syscall_exit_to_user_mode+0x15/0xb0 [ 26.471562][ T321] do_syscall_64+0x63/0xf0 [ 26.471611][ T321] ? clear_bhb_loop+0x50/0xa0 [ 26.471641][ T321] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.471669][ T321] RIP: 0033:0x7f8337d08d19 [ 26.471687][ T321] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 26.471705][ T321] RSP: 002b:00007ffee2edffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 26.471730][ T321] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f8337d08d19 [ 26.471740][ T321] RDX: 0031672f74656764 RSI: a5e06be54067d0be RDI: 0000200000000240 [ 26.471751][ T321] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000003 [ 26.471760][ T321] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffee2edffec [ 26.471770][ T321] R13: 00007ffee2ee0000 R14: 00007ffee2ee0040 R15: 0000000000000006 [ 26.471783][ T321]