ci2-android-6-1/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1/syz-executor599917013

<...>
Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts.
execve("ci2-android-6-1/syz-executor599917013", ["ci2-android-6-1/syz-executor599917013"], 0x7ffd0c94f990 /* 10 vars */) = 0
brk(NULL)                               = 0x5555829dd000
brk(0x5555829dde00)                     = 0x5555829dde00
arch_prctl(ARCH_SET_FS, 0x5555829dd480) = 0
set_tid_address(0x5555829dd750)         = 305
set_robust_list(0x5555829dd760, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1/syz-executor599917013", 4096) = 43
getrandom("\x93\x18\x08\x18\x8d\x12\xda\x71", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555829dde00
brk(0x5555829fee00)                     = 0x5555829fee00
brk(0x5555829ff000)                     = 0x5555829ff000
mprotect(0x7fb064724000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fb064664cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fb064664cf0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 306
ci2-android-6-1/strace-static-x86_64: Process 306 attached
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   306] set_robust_list(0x5555829dd760, 24) = 0
[pid   306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] <... clone resumed>, child_tidptr=0x5555829dd750) = 307
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   305] <... clone resumed>, child_tidptr=0x5555829dd750) = 308
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 308 attached
 <unfinished ...>
[pid   306] <... clone resumed>, child_tidptr=0x5555829dd750) = 309
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   308] set_robust_list(0x5555829dd760, 24 <unfinished ...>
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   308] <... set_robust_list resumed>) = 0
ci2-android-6-1/strace-static-x86_64: Process 309 attached
[pid   305] <... clone resumed>, child_tidptr=0x5555829dd750) = 310
[pid   308] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] set_robust_list(0x5555829dd760, 24 <unfinished ...>
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] <... set_robust_list resumed>) = 0
[pid   305] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   308] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   308] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] <... prctl resumed>)        = 0
[pid   308] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] setpgid(0, 0 <unfinished ...>
[pid   305] <... clone resumed>, child_tidptr=0x5555829dd750) = 311
[pid   309] <... setpgid resumed>)      = 0
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 311 attached
[pid   311] set_robust_list(0x5555829dd760, 24 <unfinished ...>
[pid   309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   311] <... set_robust_list resumed>) = 0
[pid   311] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 310 attached
 <unfinished ...>
[pid   310] set_robust_list(0x5555829dd760, 24) = 0
[pid   310] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   310] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   310] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 312 attached
ci2-android-6-1/strace-static-x86_64: Process 307 attached
[pid   310] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   309] <... openat resumed>)       = 3
[pid   310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   308] <... clone resumed>, child_tidptr=0x5555829dd750) = 312
[pid   309] write(3, "1000", 4 <unfinished ...>
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   308] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... write resumed>)        = 4
[pid   308] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] close(3)                    = 0
executing program
[pid   309] write(1, "executing program\n", 18) = 18
[pid   310] <... clone resumed>, child_tidptr=0x5555829dd750) = 313
[pid   310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   311] <... clone resumed>, child_tidptr=0x5555829dd750) = 314
ci2-android-6-1/strace-static-x86_64: Process 314 attached
ci2-android-6-1/strace-static-x86_64: Process 313 attached
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   307] set_robust_list(0x5555829dd760, 24) = 0
[pid   307] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... futex resumed>)        = 0
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   309] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0} <unfinished ...>
[pid   313] set_robust_list(0x5555829dd760, 24 <unfinished ...>
[pid   314] set_robust_list(0x5555829dd760, 24 <unfinished ...>
[pid   307] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   309] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   314] <... set_robust_list resumed>) = 0
[pid   313] <... set_robust_list resumed>) = 0
[pid   309] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] <... clone resumed>, child_tidptr=0x5555829dd750) = 315
[pid   309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] set_robust_list(0x5555829dd760, 24) = 0
[pid   314] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... mmap resumed>)         = 0x7fb06463a000
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   309] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   313] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   312] setpgid(0, 0)               = 0
[pid   312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   314] <... prctl resumed>)        = 0
[pid   309] <... mprotect resumed>)     = 0
[pid   313] <... prctl resumed>)        = 0
[pid   312] <... openat resumed>)       = 3
[pid   314] setpgid(0, 0 <unfinished ...>
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   313] setpgid(0, 0 <unfinished ...>
[pid   312] write(3, "1000", 4)         = 4
[pid   312] close(3)                    = 0
[pid   312] write(1, "executing program\n", 18 <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
executing program
[pid   309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} <unfinished ...>
[pid   312] <... write resumed>)        = 18
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0} <unfinished ...>
[pid   309] <... clone3 resumed> => {parent_tid=[316]}, 88) = 316
[pid   312] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   314] <... setpgid resumed>)      = 0
[pid   313] <... setpgid resumed>)      = 0
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   309] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... futex resumed>)        = 0
[pid   312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   314] <... openat resumed>)       = 3
[pid   313] <... openat resumed>)       = 3
[pid   312] <... mmap resumed>)         = 0x7fb06463a000
[pid   312] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   312] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-1/strace-static-x86_64: Process 316 attached
 <unfinished ...>
[pid   314] write(3, "1000", 4 <unfinished ...>
[pid   313] write(3, "1000", 4 <unfinished ...>
[pid   312] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} <unfinished ...>
[pid   313] <... write resumed>)        = 4
[pid   314] <... write resumed>)        = 4
[pid   316] set_robust_list(0x7fb06465a9a0, 24ci2-android-6-1/strace-static-x86_64: Process 315 attached
 <unfinished ...>
[pid   315] set_robust_list(0x5555829dd760, 24) = 0
[pid   314] close(3 <unfinished ...>
[pid   313] close(3 <unfinished ...>
[pid   314] <... close resumed>)        = 0
[pid   313] <... close resumed>)        = 0
[pid   313] write(1, "executing program\n", 18 <unfinished ...>
executing program
executing program
[pid   314] write(1, "executing program\n", 18) = 18
[pid   313] <... write resumed>)        = 18
[pid   313] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] <... futex resumed>)        = 0
[pid   313] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0} <unfinished ...>
[pid   314] <... futex resumed>)        = 0
[pid   312] <... clone3 resumed> => {parent_tid=[317]}, 88) = 317
[pid   315] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0} <unfinished ...>
[pid   313] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   316] <... set_robust_list resumed>) = 0
[pid   314] <... rt_sigaction resumed>, NULL, 8) = 0
[pid   313] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   316] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   316] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] <... mmap resumed>)         = 0x7fb06463a000
[pid   316] mkdirat(AT_FDCWD, "./my_configfs", 0777 <unfinished ...>
[pid   313] <... mmap resumed>)         = 0x7fb06463a000
[pid   314] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   313] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   312] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] <... mprotect resumed>)     = 0
[pid   313] <... mprotect resumed>)     = 0
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   314] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} <unfinished ...>
[pid   313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} <unfinished ...>
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   314] <... clone3 resumed> => {parent_tid=[318]}, 88) = 318
[pid   313] <... clone3 resumed> => {parent_tid=[319]}, 88) = 319
[pid   314] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] <... futex resumed>)        = 0
[pid   313] <... futex resumed>)        = 0
[pid   316] <... mkdirat resumed>)      = 0
[pid   314] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   316] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   315] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] <... futex resumed>)        = 0
[pid   316] <... futex resumed>)        = 1
[pid   309] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   316] mount(NULL, "./my_configfs", "configfs", 0, NULL <unfinished ...>
[   23.208513][   T28] audit: type=1400 audit(1786361125.518:64): avc:  denied  { execmem } for  pid=305 comm="syz-executor599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid   315] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   309] <... futex resumed>)        = 0
executing program
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   315] <... prctl resumed>)        = 0
[pid   315] setpgid(0, 0)               = 0
[pid   315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   315] write(3, "1000", 4)         = 4
[pid   315] close(3)                    = 0
[pid   315] write(1, "executing program\n", 18) = 18
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   315] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   315] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   315] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   315] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[320]}, 88) = 320
[pid   315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 317 attached
 <unfinished ...>
[pid   317] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   317] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   317] <... futex resumed>)        = 1
[pid   317] mount(NULL, "./my_configfs", "configfs", 0, NULL) = 0
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   317] <... futex resumed>)        = 1
[pid   317] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777ci2-android-6-1/strace-static-x86_64: Process 320 attached
 <unfinished ...>
[pid   320] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   320] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... futex resumed>)        = 1
[pid   320] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   317] <... mkdirat resumed>)      = 0
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... futex resumed>)        = 1
[pid   320] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... futex resumed>)        = 1
[pid   320] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   317] <... futex resumed>)        = 1
[pid   317] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777ci2-android-6-1/strace-static-x86_64: Process 318 attached
 <unfinished ...>
[pid   318] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   318] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   318] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   318] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-6-1/strace-static-x86_64: Process 319 attached
 <unfinished ...>
[pid   319] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   319] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   319] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   316] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   316] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   316] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   320] <... mkdirat resumed>)      = 0
[pid   317] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   312] <... futex resumed>)        = 0
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   317] mkdirat(AT_FDCWD, "./dev", 0777 <unfinished ...>
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] <... futex resumed>)        = 1
[pid   317] <... mkdirat resumed>)      = 0
[pid   315] <... futex resumed>)        = 0
[pid   312] <... futex resumed>)        = 0
[pid   320] mkdirat(AT_FDCWD, "./dev", 0777 <unfinished ...>
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   317] <... futex resumed>)        = 1
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   320] <... futex resumed>)        = 0
[pid   317] mount(NULL, "./dev", "devtmpfs", 0, NULL <unfinished ...>
[pid   315] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] mount(NULL, "./dev", "devtmpfs", 0, NULL <unfinished ...>
[pid   317] <... mount resumed>)        = 0
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   320] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   317] <... futex resumed>)        = 0
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   320] <... futex resumed>)        = 0
[pid   317] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   315] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   317] <... openat resumed>)       = 3
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   320] <... openat resumed>)       = 3
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] <... futex resumed>)        = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   317] <... futex resumed>)        = 0
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   320] <... futex resumed>)        = 0
[pid   317] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" <unfinished ...>
[pid   315] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   312] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" <unfinished ...>
[pid   315] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   312] <... futex resumed>)        = 0
[pid   315] <... futex resumed>)        = 0
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   315] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   313] <... futex resumed>)        = 0
[pid   309] <... futex resumed>)        = 0
[pid   314] <... futex resumed>)        = 0
[pid   313] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   313] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   319] <... futex resumed>)        = 0
[pid   319] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   319] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   313] <... futex resumed>)        = 0
[pid   313] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   313] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   319] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   319] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   313] <... futex resumed>)        = 0
[pid   313] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   313] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   319] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   309] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   316] <... futex resumed>)        = 0
[pid   316] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   316] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   309] <... futex resumed>)        = 0
[pid   309] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   316] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   314] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] <... futex resumed>)        = 0
[pid   314] <... futex resumed>)        = 1
[pid   318] mount(NULL, "./my_configfs", "configfs", 0, NULL <unfinished ...>
[pid   314] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   318] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   318] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   314] <... futex resumed>)        = 0
[pid   318] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 <unfinished ...>
[pid   314] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   314] <... futex resumed>)        = 0
[pid   318] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   318] <... futex resumed>)        = 0
[pid   314] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   318] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   314] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   23.261975][   T28] audit: type=1400 audit(1786361125.568:65): avc:  denied  { mounton } for  pid=309 comm="syz-executor599" path="/root/my_configfs" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   23.285548][   T28] audit: type=1400 audit(1786361125.568:66): avc:  denied  { mount } for  pid=312 comm="syz-executor599" name="/" dev="configfs" ino=12785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[pid   314] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   312] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   315] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   312] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid   313] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   313] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid   313] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   309] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} <unfinished ...>
[pid   313] <... mmap resumed>)         = 0x7fb064619000
[pid   309] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   314] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   313] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   309] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] <... mprotect resumed>)     = 0
[pid   309] <... futex resumed>)        = 0
[pid   314] <... futex resumed>)        = 0
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   309] <... mmap resumed>)         = 0x7fb064619000
[pid   314] <... mmap resumed>)         = 0x7fb064619000
[pid   313] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} <unfinished ...>
[pid   309] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   314] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   309] <... mprotect resumed>)     = 0
[pid   314] <... mprotect resumed>)     = 0
[pid   313] <... clone3 resumed> => {parent_tid=[322]}, 88) = 322
[pid   309] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   314] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} <unfinished ...>
[pid   314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} <unfinished ...>
[pid   313] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   309] <... clone3 resumed> => {parent_tid=[323]}, 88) = 323
[pid   314] <... clone3 resumed> => {parent_tid=[324]}, 88) = 324
[pid   313] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   309] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   309] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   309] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   314] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   309] <... futex resumed>)        = 0
[pid   314] <... futex resumed>)        = 0
[pid   309] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   314] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 322 attached
 <unfinished ...>
[pid   322] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   322] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   322] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   313] <... futex resumed>)        = 0
[pid   322] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   313] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   322] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   313] <... futex resumed>)        = 0
[pid   322] mount(NULL, "./dev", "devtmpfs", 0, NULL <unfinished ...>
[pid   313] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   322] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   322] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   313] <... futex resumed>)        = 0
[pid   322] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   313] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   322] <... openat resumed>)       = -1 ENODEV (No such device)
[pid   313] <... futex resumed>)        = 0
[pid   322] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 324 attached
ci2-android-6-1/strace-static-x86_64: Process 323 attached
 <unfinished ...>
[pid   322] <... futex resumed>)        = 0
[pid   313] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   322] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   313] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   322] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   313] <... futex resumed>)        = 0
[pid   322] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" <unfinished ...>
[pid   313] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   324] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   324] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   324] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   314] <... futex resumed>)        = 0
[pid   324] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   314] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   324] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   314] <... futex resumed>)        = 0
[pid   324] mount(NULL, "./dev", "devtmpfs", 0, NULL <unfinished ...>
[pid   314] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   324] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   324] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   314] <... futex resumed>)        = 0
[pid   324] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   314] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   324] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   314] <... futex resumed>)        = 0
[   23.308552][   T28] audit: type=1400 audit(1786361125.568:67): avc:  denied  { search } for  pid=312 comm="syz-executor599" name="/" dev="configfs" ino=12785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   23.330991][   T28] audit: type=1400 audit(1786361125.568:68): avc:  denied  { write } for  pid=312 comm="syz-executor599" name="usb_gadget" dev="configfs" ino=12786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[pid   324] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   314] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   324] <... openat resumed>)       = -1 ENODEV (No such device)
[pid   322] <... rmdir resumed>)        = 0
[pid   320] <... rmdir resumed>)        = -1 ENOENT (No such file or directory)
[pid   319] <... mkdirat resumed>)      = 0
[pid   318] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   317] <... rmdir resumed>)        = 0
[pid   316] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   324] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   322] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   320] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   319] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   317] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   316] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   315] exit_group(0 <unfinished ...>
[pid   324] <... futex resumed>)        = 1
[pid   322] <... futex resumed>)        = 1
[pid   320] <... futex resumed>)        = ?
[pid   319] <... futex resumed>)        = 0
[pid   318] <... futex resumed>)        = 0
[pid   317] <... futex resumed>)        = 0
[pid   316] <... futex resumed>)        = 0
[pid   315] <... exit_group resumed>)   = ?
[pid   314] <... futex resumed>)        = 0
[pid   313] <... futex resumed>)        = 0
[pid   324] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   323] set_robust_list(0x7fb0646399a0, 24 <unfinished ...>
[pid   322] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   320] +++ exited with 0 +++
[pid   319] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   318] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   317] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   316] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   323] <... set_robust_list resumed>) = 0
[pid   323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   323] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   323] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   309] <... futex resumed>)        = 0
[pid   323] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   309] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   314] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   313] exit_group(0 <unfinished ...>
[   23.354379][   T28] audit: type=1400 audit(1786361125.568:69): avc:  denied  { add_name } for  pid=312 comm="syz-executor599" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   23.367960][  T315] ==================================================================
[   23.376874][   T28] audit: type=1400 audit(1786361125.568:70): avc:  denied  { create } for  pid=312 comm="syz-executor599" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   23.383037][  T315] BUG: KASAN: use-after-free in check_tty_count+0x1a8/0x330
[pid   312] exit_group(0 <unfinished ...>
[pid   319] <... futex resumed>)        = ?
[pid   318] <... futex resumed>)        = 0
[pid   317] <... futex resumed>)        = ?
[pid   314] <... futex resumed>)        = 1
[pid   313] <... exit_group resumed>)   = ?
[pid   312] <... exit_group resumed>)   = ?
[pid   319] +++ exited with 0 +++
[pid   318] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" <unfinished ...>
[pid   317] +++ exited with 0 +++
[pid   314] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   318] <... rmdir resumed>)        = -1 ENOENT (No such file or directory)
[pid   318] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   314] <... futex resumed>)        = 0
[pid   318] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   314] exit_group(0 <unfinished ...>
[pid   318] <... futex resumed>)        = ?
[pid   314] <... exit_group resumed>)   = ?
[pid   318] +++ exited with 0 +++
[pid   316] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   309] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[   23.383094][  T315] Read of size 8 at addr ffff888110526910 by task syz-executor599/315
[   23.418359][   T28] audit: type=1400 audit(1786361125.568:71): avc:  denied  { mounton } for  pid=315 comm="syz-executor599" path="/root/my_configfs" dev="configfs" ino=12785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   23.418634][  T315] 
[   23.418641][  T315] CPU: 0 PID: 315 Comm: syz-executor599 Not tainted syzkaller #0
[   23.446201][   T28] audit: type=1400 audit(1786361125.568:72): avc:  denied  { mount } for  pid=312 comm="syz-executor599" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   23.452693][  T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   23.452711][  T315] Call Trace:
[   23.452718][  T315]  <TASK>
[   23.452724][  T315]  __dump_stack+0x21/0x24
[   23.452753][  T315]  dump_stack_lvl+0x110/0x170
[   23.481641][   T28] audit: type=1400 audit(1786361125.568:73): avc:  denied  { mounton } for  pid=315 comm="syz-executor599" path="/root/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   23.485200][  T315]  ? __cfi_dump_stack_lvl+0x8/0x8
[   23.528024][  T315]  ? stack_trace_save+0xa6/0xf0
[   23.532901][  T315]  ? check_tty_count+0x1a8/0x330
[   23.537840][  T315]  print_address_description+0x71/0x200
[   23.543414][  T315]  print_report+0x4a/0x60
[   23.547750][  T315]  kasan_report+0x122/0x150
[   23.552271][  T315]  ? check_tty_count+0x1a8/0x330
[   23.557238][  T315]  kasan_check_range+0x249/0x2a0
[   23.562185][  T315]  __kasan_check_read+0x11/0x20
[   23.567031][  T315]  check_tty_count+0x1a8/0x330
[   23.571801][  T315]  tty_release+0x88/0x11d0
[   23.576238][  T315]  ? __cfi_tty_release+0x10/0x10
[   23.581264][  T315]  __fput+0x1fd/0x8f0
[   23.585248][  T315]  ____fput+0x15/0x20
[   23.589316][  T315]  task_work_run+0x1e1/0x250
[   23.593910][  T315]  ? __cfi_task_work_run+0x10/0x10
[   23.599021][  T315]  ? __kasan_check_write+0x14/0x20
[   23.604130][  T315]  do_exit+0xaf2/0x2850
[   23.608289][  T315]  ? ttwu_do_wakeup+0x102/0x490
[   23.613146][  T315]  ? __cfi_do_exit+0x10/0x10
[   23.617735][  T315]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   23.623631][  T315]  ? try_to_wake_up+0x622/0x1250
[   23.628585][  T315]  ? _raw_spin_lock_irq+0x95/0xf0
[   23.633618][  T315]  ? wake_up_state+0xb/0x10
[   23.638134][  T315]  ? zap_other_threads+0x2b7/0x2f0
[   23.643245][  T315]  do_group_exit+0x21b/0x2e0
[   23.647838][  T315]  __x64_sys_exit_group+0x3f/0x40
[   23.652861][  T315]  x64_sys_call+0x7b4/0x9a0
[   23.657367][  T315]  do_syscall_64+0x4c/0xa0
[   23.661781][  T315]  ? clear_bhb_loop+0x30/0x80
[   23.666480][  T315]  ? clear_bhb_loop+0x30/0x80
[   23.671424][  T315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   23.677341][  T315] RIP: 0033:0x7fb064679a85
[   23.681784][  T315] Code: Unable to access opcode bytes at 0x7fb064679a5b.
[   23.688799][  T315] RSP: 002b:00007ffd2d8fe9f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[   23.697227][  T315] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb064679a85
[   23.705216][  T315] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000
[   23.713187][  T315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   23.721157][  T315] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   23.729128][  T315] R13: 00007fb064729120 R14: 00007fb06472b548 R15: 00007fb06472b560
[   23.737101][  T315]  </TASK>
[   23.740128][  T315] 
[   23.742539][  T315] Allocated by task 320:
[   23.746774][  T315]  kasan_set_track+0x4b/0x70
[   23.751380][  T315]  kasan_save_alloc_info+0x1f/0x30
[   23.756591][  T315]  __kasan_kmalloc+0x95/0xb0
[   23.761205][  T315]  kmalloc_trace+0x40/0xb0
[   23.765640][  T315]  gserial_alloc_line_no_console+0x238/0x700
[   23.771626][  T315]  obex_alloc_inst+0x86/0xe0
[   23.776221][  T315]  usb_get_function_instance+0xf3/0x310
[   23.781773][  T315]  function_make+0x118/0x360
[   23.786367][  T315]  configfs_mkdir+0x518/0x9e0
[   23.791042][  T315]  vfs_mkdir+0x39c/0x580
[   23.795284][  T315]  do_mkdirat+0x174/0x4d0
[   23.799624][  T315]  __x64_sys_mkdirat+0x89/0xa0
[   23.804389][  T315]  x64_sys_call+0x73d/0x9a0
[   23.808889][  T315]  do_syscall_64+0x4c/0xa0
[   23.813307][  T315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   23.819212][  T315] 
[   23.821551][  T315] Freed by task 317:
[   23.825437][  T315]  kasan_set_track+0x4b/0x70
[   23.830028][  T315]  kasan_save_free_info+0x2b/0x40
[   23.835054][  T315]  ____kasan_slab_free+0x132/0x180
[   23.840163][  T315]  __kasan_slab_free+0x11/0x20
[   23.844923][  T315]  slab_free_freelist_hook+0xc2/0x190
[   23.850294][  T315]  __kmem_cache_free+0xb7/0x1b0
[   23.855146][  T315]  kfree+0x6f/0xf0
[   23.858862][  T315]  gserial_free_port+0x240/0x2d0
[   23.863817][  T315]  gserial_free_line+0x9b/0x1a0
[   23.868662][  T315]  obex_free_inst+0x39/0x60
[   23.873163][  T315]  usb_put_function_instance+0x9b/0xc0
[   23.878621][  T315]  obex_attr_release+0x15/0x20
[   23.883378][  T315]  config_item_put+0x166/0x210
[   23.888140][  T315]  configfs_rmdir+0x8c9/0x980
[   23.892810][  T315]  vfs_rmdir+0x381/0x4f0
[   23.897053][  T315]  do_rmdir+0x261/0x6b0
[   23.901207][  T315]  __x64_sys_rmdir+0x49/0x50
[   23.905800][  T315]  x64_sys_call+0x68e/0x9a0
[   23.910298][  T315]  do_syscall_64+0x4c/0xa0
[   23.914712][  T315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   23.920617][  T315] 
[   23.922939][  T315] The buggy address belongs to the object at ffff888110526800
[   23.922939][  T315]  which belongs to the cache kmalloc-1k of size 1024
[   23.936983][  T315] The buggy address is located 272 bytes inside of
[   23.936983][  T315]  1024-byte region [ffff888110526800, ffff888110526c00)
[   23.950342][  T315] 
[   23.952659][  T315] The buggy address belongs to the physical page:
[   23.959083][  T315] page:ffffea0004414800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110520
[   23.969337][  T315] head:ffffea0004414800 order:3 compound_mapcount:0 compound_pincount:0
[   23.977655][  T315] flags: 0x4000000000010200(slab|head|zone=1)
[   23.983896][  T315] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080
[   23.992472][  T315] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   24.001051][  T315] page dumped because: kasan: bad access detected
[   24.007473][  T315] page_owner tracks the page as allocated
[   24.013177][  T315] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 92, tgid 92 (klogd), ts 4563478972, free_ts 0
[   24.032623][  T315]  post_alloc_hook+0x1f5/0x210
[   24.037392][  T315]  prep_new_page+0x1c/0x110
[   24.041892][  T315]  get_page_from_freelist+0x2ca9/0x2d20
[   24.047443][  T315]  __alloc_pages+0x1fa/0x610
[   24.052033][  T315]  alloc_slab_page+0x6e/0xf0
[   24.056626][  T315]  new_slab+0x98/0x3e0
[   24.060686][  T315]  ___slab_alloc+0x70f/0xb70
[   24.065274][  T315]  __slab_alloc+0x5e/0xa0
[   24.069606][  T315]  __kmem_cache_alloc_node+0x204/0x2d0
[   24.075063][  T315]  kmalloc_trace+0x29/0xb0
[   24.079505][  T315]  syslog_print+0x11f/0x600
[   24.084093][  T315]  do_syslog+0x6e1/0x7a0
[   24.088331][  T315]  __x64_sys_syslog+0x7c/0x90
[   24.093003][  T315]  x64_sys_call+0x610/0x9a0
[   24.097507][  T315]  do_syscall_64+0x4c/0xa0
[   24.101922][  T315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   24.107823][  T315] page_owner free stack trace missing
[   24.113182][  T315] 
[   24.115503][  T315] Memory state around the buggy address:
[   24.121308][  T315]  ffff888110526800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   24.129360][  T315]  ffff888110526880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   24.137428][  T315] >ffff888110526900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   24.145483][  T315]                          ^
[   24.150063][  T315]  ffff888110526980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[pid   316] mount(NULL, "./dev", "devtmpfs", 0, NULL <unfinished ...>
[pid   309] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   323] <... futex resumed>)        = 0
[pid   316] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   309] <... futex resumed>)        = 1
[pid   323] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   316] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   309] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   323] <... openat resumed>)       = -1 ENOENT (No such file or directory)
[pid   316] <... futex resumed>)        = 0
[pid   323] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   316] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   323] <... futex resumed>)        = 1
[pid   309] <... futex resumed>)        = 0
[pid   323] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   309] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   316] <... futex resumed>)        = 0
[pid   309] <... futex resumed>)        = 1
[pid   316] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1" <unfinished ...>
[pid   309] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   316] <... rmdir resumed>)        = -1 ENOENT (No such file or directory)
[pid   316] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   309] <... futex resumed>)        = 0
[pid   316] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   309] exit_group(0 <unfinished ...>
[pid   323] <... futex resumed>)        = ?
[pid   316] <... futex resumed>)        = ?
[pid   309] <... exit_group resumed>)   = ?
[pid   323] +++ exited with 0 +++
[pid   316] +++ exited with 0 +++
[pid   309] +++ exited with 0 +++
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 325
[pid   306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 325 attached
[pid   325] set_robust_list(0x5555829dd760, 24) = 0
[pid   325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   325] setpgid(0, 0)               = 0
[pid   325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   325] write(3, "1000", 4)         = 4
[pid   325] close(3)                    = 0
[pid   325] write(1, "executing program\n", 18) = 18
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   325] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   325] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[326]}, 88) = 326
[pid   325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   324] <... futex resumed>)        = ?
[pid   324] +++ exited with 0 +++
[pid   314] +++ exited with 0 +++
[pid   322] <... futex resumed>)        = ?
[pid   322] +++ exited with 0 +++
[pid   313] +++ exited with 0 +++
[pid   310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=313, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   310] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 327
[pid   310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 327 attached
[pid   327] set_robust_list(0x5555829dd760, 24) = 0
[pid   327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   327] setpgid(0, 0)               = 0
[pid   327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   327] write(3, "1000", 4)         = 4
[pid   327] close(3)                    = 0
[pid   327] write(1, "executing program\n", 18) = 18
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   327] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   327] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   327] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[328]}, 88) = 328
[pid   327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 328 attached
 <unfinished ...>
[pid   328] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   328] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   328] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... futex resumed>)        = 1
[pid   328] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   328] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... futex resumed>)        = 1
[pid   328] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   328] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... futex resumed>)        = 1
[pid   328] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   311] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 329
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 326 attached
[pid   326] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   326] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   326] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   326] <... futex resumed>)        = 1
[pid   326] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   326] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   326] <... futex resumed>)        = 1
[pid   326] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   326] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   326] <... futex resumed>)        = 1
[pid   326] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   328] <... mkdirat resumed>)      = 0
[pid   328] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... futex resumed>)        = 1
[pid   328] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   328] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... futex resumed>)        = 1
[pid   328] mount(NULL, "./dev", "devtmpfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   328] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   327] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   327] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   328] <... futex resumed>)        = 1
[pid   328] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWRci2-android-6-1/strace-static-x86_64: Process 329 attached
 <unfinished ...>
[pid   326] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   326] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   326] <... futex resumed>)        = 1
[pid   329] set_robust_list(0x5555829dd760, 24 <unfinished ...>
[pid   326] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   326] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   329] <... set_robust_list resumed>) = 0
[pid   326] <... futex resumed>)        = 1
[pid   329] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   326] mount(NULL, "./dev", "devtmpfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   329] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   329] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   326] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   325] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   326] <... futex resumed>)        = 1
[pid   326] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   329] <... prctl resumed>)        = 0
[pid   329] setpgid(0, 0)               = 0
[pid   329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   329] write(3, "1000", 4)         = 4
[pid   329] close(3)                    = 0
[pid   329] write(1, "executing program\n", 18) = 18
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   329] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   329] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   329] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[330]}, 88) = 330
[pid   329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   329] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
executing program
executing program
executing program
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   327] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   325] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   327] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   327] <... futex resumed>)        = 0
[pid   325] <... futex resumed>)        = 0
[pid   329] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   329] <... futex resumed>)        = 0
[pid   327] <... mmap resumed>)         = 0x7fb064619000
[pid   325] <... mmap resumed>)         = 0x7fb064619000
[pid   329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   327] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   325] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   327] <... mprotect resumed>)     = 0
[pid   325] <... mprotect resumed>)     = 0
[pid   329] <... mmap resumed>)         = 0x7fb064619000
[pid   329] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   327] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   325] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   327] <... rt_sigprocmask resumed>, [], 8) = 0
ci2-android-6-1/strace-static-x86_64: Process 330 attached
[pid   329] <... mprotect resumed>)     = 0
[pid   327] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} <unfinished ...>
[pid   325] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   330] set_robust_list(0x7fb06465a9a0, 24 <unfinished ...>
[pid   329] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   330] <... set_robust_list resumed>) = 0
[pid   329] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0}ci2-android-6-1/strace-static-x86_64: Process 331 attached
 <unfinished ...>
[pid   331] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   331] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   330] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} <unfinished ...>
[pid   327] <... clone3 resumed> => {parent_tid=[331]}, 88) = 331
[pid   330] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   327] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 332 attached
 <unfinished ...>
[pid   330] mkdirat(AT_FDCWD, "./my_configfs", 0777 <unfinished ...>
[pid   329] <... clone3 resumed> => {parent_tid=[333]}, 88) = 333
[pid   327] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   325] <... clone3 resumed> => {parent_tid=[332]}, 88) = 332
[pid   330] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   329] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   327] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   330] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   327] <... futex resumed>)        = 1
[pid   330] <... futex resumed>)        = 0
[pid   329] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   330] futex(0x7fb06472ab28, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   329] <... futex resumed>)        = 0
[pid   329] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   331] <... futex resumed>)        = 0
[pid   331] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = 0
[pid   331] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   327] <... futex resumed>)        = 0
[pid   331] <... futex resumed>)        = 1
[pid   331] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULLci2-android-6-1/strace-static-x86_64: Process 333 attached
 <unfinished ...>
[pid   333] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   333] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   333] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] <... futex resumed>)        = 0
[pid   329] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   330] <... futex resumed>)        = 0
[pid   329] <... futex resumed>)        = 1
[pid   330] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777 <unfinished ...>
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   330] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   330] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   329] <... futex resumed>)        = 0
[pid   330] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   329] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   330] <... mkdirat resumed>)      = 0
[pid   329] <... futex resumed>)        = 0
[pid   330] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   330] <... futex resumed>)        = 0
[pid   329] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   330] mkdirat(AT_FDCWD, "./dev", 0777 <unfinished ...>
[pid   329] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   330] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   329] <... futex resumed>)        = 0
[pid   330] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   330] <... futex resumed>)        = 0
[pid   329] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   330] mount(NULL, "./dev", "devtmpfs", 0, NULL <unfinished ...>
[pid   329] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   330] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   329] <... futex resumed>)        = 0
[pid   330] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   330] <... futex resumed>)        = 0
[pid   329] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   330] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   329] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   333] <... futex resumed>)        = 1
[   24.158118][  T315]  ffff888110526a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   24.166168][  T315] ==================================================================
[   24.180616][  T315] Disabling lock debugging due to kernel taint
[   24.188089][  T315] ------------[ cut here ]------------
[   24.193585][  T315] WARNING: CPU: 0 PID: 315 at drivers/usb/gadget/function/u_serial.c:694 gs_close+0x17d/0x9b0
[   24.203846][  T315] Modules linked in:
[pid   333] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   325] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   325] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   332] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   332] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = 0
[pid   332] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   325] <... futex resumed>)        = 0
[pid   332] <... futex resumed>)        = 1
[pid   332] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   329] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   329] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid   329] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   329] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   333] <... futex resumed>)        = 0
[pid   333] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = -1 ENOENT (No such file or directory)
[pid   333] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   329] <... futex resumed>)        = 0
[pid   333] <... futex resumed>)        = 1
[   24.207746][  T315] CPU: 0 PID: 315 Comm: syz-executor599 Tainted: G    B              syzkaller #0
[   24.216932][  T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   24.226997][  T315] RIP: 0010:gs_close+0x17d/0x9b0
[   24.231945][  T315] Code: 74 23 fe 41 ff cc 42 0f b6 04 2b 84 c0 0f 85 cf 06 00 00 48 8b 44 24 20 44 89 20 48 8b 5c 24 38 e9 cb 02 00 00 e8 93 74 23 fe <0f> 0b 48 8b 5c 24 38 e9 ba 02 00 00 e8 82 74 23 fe 49 8d bf a8 02
[   24.251571][  T315] RSP: 0018:ffffc90000e979e0 EFLAGS: 00010093
[   24.257644][  T315] RAX: ffffffff834df1ad RBX: 1ffff110220a4d1a RCX: ffff88811f328000
[pid   333] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   327] exit_group(0 <unfinished ...>
[pid   331] <... futex resumed>)        = ?
[pid   328] <... openat resumed>)       = ?
[pid   327] <... exit_group resumed>)   = ?
[pid   331] +++ exited with 0 +++
[pid   328] +++ exited with 0 +++
[pid   327] +++ exited with 0 +++
[   24.265629][  T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   24.273612][  T315] RBP: ffffc90000e97b00 R08: 0000000000000003 R09: 0000000000000004
[   24.281577][  T315] R10: dffffc0000000000 R11: fffff520001d2f2c R12: 0000000000000000
[   24.289546][  T315] R13: dffffc0000000000 R14: 1ffff920001d2f44 R15: ffff888110526800
[   24.297507][  T315] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   24.306445][  T315] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[pid   310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   310] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[   24.313023][  T315] CR2: 00007fb064639d58 CR3: 0000000122162000 CR4: 00000000003506b0
[   24.321019][  T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   24.329005][  T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   24.336972][  T315] Call Trace:
[   24.340255][  T315]  <TASK>
[   24.343189][  T315]  ? __kasan_check_write+0x14/0x20
[   24.348304][  T315]  ? _raw_spin_lock+0x94/0xf0
[   24.353009][  T315]  ? __cfi__raw_spin_lock+0x10/0x10
[   24.358212][  T315]  ? __cfi_gs_close+0x10/0x10
[   24.362885][  T315]  ? _raw_spin_unlock+0x4c/0x70
[   24.367735][  T315]  ? fasync_remove_entry+0x19c/0x1d0
[   24.373021][  T315]  ? __cfi_gs_close+0x10/0x10
[   24.377702][  T315]  tty_release+0x32b/0x11d0
[   24.382212][  T315]  ? __cfi_tty_release+0x10/0x10
[   24.387153][  T315]  __fput+0x1fd/0x8f0
[   24.391138][  T315]  ____fput+0x15/0x20
[   24.395120][  T315]  task_work_run+0x1e1/0x250
[   24.399721][  T315]  ? __cfi_task_work_run+0x10/0x10
[   24.404860][  T315]  ? __kasan_check_write+0x14/0x20
[   24.410011][  T315]  do_exit+0xaf2/0x2850
[   24.414175][  T315]  ? ttwu_do_wakeup+0x102/0x490
[   24.419032][  T315]  ? __cfi_do_exit+0x10/0x10
[   24.423624][  T315]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   24.429432][  T315]  ? try_to_wake_up+0x622/0x1250
[   24.434372][  T315]  ? _raw_spin_lock_irq+0x95/0xf0
[   24.439418][  T315]  ? wake_up_state+0xb/0x10
[   24.443924][  T315]  ? zap_other_threads+0x2b7/0x2f0
[   24.449035][  T315]  do_group_exit+0x21b/0x2e0
[   24.453718][  T315]  __x64_sys_exit_group+0x3f/0x40
[   24.458747][  T315]  x64_sys_call+0x7b4/0x9a0
[pid   310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 334
[pid   310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   325] exit_group(0 <unfinished ...>
[pid   332] <... futex resumed>)        = ?
[pid   326] <... openat resumed>)       = ?
[pid   325] <... exit_group resumed>)   = ?
[   24.463249][  T315]  do_syscall_64+0x4c/0xa0
[   24.467662][  T315]  ? clear_bhb_loop+0x30/0x80
[   24.472353][  T315]  ? clear_bhb_loop+0x30/0x80
[   24.477027][  T315]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   24.482922][  T315] RIP: 0033:0x7fb064679a85
[   24.487329][  T315] Code: Unable to access opcode bytes at 0x7fb064679a5b.
[   24.494337][  T315] RSP: 002b:00007ffd2d8fe9f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[   24.502750][  T315] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb064679a85
[pid   332] +++ exited with 0 +++
[pid   326] +++ exited with 0 +++
ci2-android-6-1/strace-static-x86_64: Process 334 attached
[pid   334] set_robust_list(0x5555829dd760, 24) = 0
[pid   334] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   325] +++ exited with 0 +++
[pid   315] +++ exited with 0 +++
[pid   334] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[pid   334] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   334] <... prctl resumed>)        = 0
[pid   334] setpgid(0, 0)               = 0
[pid   334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   334] write(3, "1000", 4)         = 4
[pid   334] close(3)                    = 0
[pid   334] write(1, "executing program\n", 18) = 18
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   334] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[335]}, 88) = 335
[pid   334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
executing program
[pid   306] restart_syscall(<... resuming interrupted rt_sigprocmask ...>ci2-android-6-1/strace-static-x86_64: Process 335 attached
 <unfinished ...>
[pid   335] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   335] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   335] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   335] <... futex resumed>)        = 1
[pid   335] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   335] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   335] <... futex resumed>)        = 1
[pid   335] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   335] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   335] <... futex resumed>)        = 1
[pid   335] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777 <unfinished ...>
[pid   306] <... restart_syscall resumed>) = 0
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 336
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   307] <... restart_syscall resumed>) = 0
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555829dd750) = 337
[pid   307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   335] <... mkdirat resumed>)      = 0
[pid   335] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   335] <... futex resumed>)        = 1
[   24.510719][  T315] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000
[   24.518688][  T315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   24.526656][  T315] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   24.534621][  T315] R13: 00007fb064729120 R14: 00007fb06472b548 R15: 00007fb06472b560
[   24.542590][  T315]  </TASK>
[   24.545605][  T315] ---[ end trace 0000000000000000 ]---
[   24.554549][  T312] ------------[ cut here ]------------
[pid   335] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   335] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   335] <... futex resumed>)        = 1
[pid   335] mount(NULL, "./dev", "devtmpfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   335] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   334] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   335] <... futex resumed>)        = 1
[pid   335] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWRci2-android-6-1/strace-static-x86_64: Process 336 attached
 <unfinished ...>
[pid   336] set_robust_list(0x5555829dd760, 24) = 0
[pid   336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   336] setpgid(0, 0)               = 0
[pid   336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   336] write(3, "1000", 4)         = 4
[pid   336] close(3)                    = 0
executing program
[pid   336] write(1, "executing program\n", 18) = 18
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   336] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[338]}, 88) = 338
[pid   336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 338 attached
 <unfinished ...>
[pid   338] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   338] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   338] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   338] <... futex resumed>)        = 1
[pid   338] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   338] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   338] <... futex resumed>)        = 1
[pid   338] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   338] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   338] <... futex resumed>)        = 1
[pid   338] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777) = -1 EEXIST (File exists)
[pid   338] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   338] <... futex resumed>)        = 1
[pid   338] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   338] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   338] <... futex resumed>)        = 1
[pid   338] mount(NULL, "./dev", "devtmpfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   338] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   336] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   338] <... futex resumed>)        = 1
[pid   338] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWRci2-android-6-1/strace-static-x86_64: Process 337 attached
 <unfinished ...>
[pid   337] set_robust_list(0x5555829dd760, 24) = 0
[pid   337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   337] setpgid(0, 0)               = 0
[pid   337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   337] write(3, "1000", 4)         = 4
[pid   337] close(3)                    = 0
executing program
[pid   337] write(1, "executing program\n", 18) = 18
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] rt_sigaction(SIGRT_1, {sa_handler=0x7fb06468e150, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb0646680f0}, NULL, 8) = 0
[pid   337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb06463a000
[pid   337] mprotect(0x7fb06463b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb06465a990, parent_tid=0x7fb06465a990, exit_signal=0, stack=0x7fb06463a000, stack_size=0x20240, tls=0x7fb06465a6c0} => {parent_tid=[339]}, 88) = 339
[pid   337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 339 attached
 <unfinished ...>
[pid   339] set_robust_list(0x7fb06465a9a0, 24) = 0
[pid   339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   339] mkdirat(AT_FDCWD, "./my_configfs", 0777) = -1 EEXIST (File exists)
[pid   339] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   339] <... futex resumed>)        = 1
[pid   339] mount(NULL, "./my_configfs", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   339] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   339] <... futex resumed>)        = 1
[pid   339] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   339] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   339] <... futex resumed>)        = 1
[pid   339] mkdirat(AT_FDCWD, "./my_configfs/usb_gadget/g1/functions/obex.usb1", 0777) = -1 EEXIST (File exists)
[pid   339] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   339] <... futex resumed>)        = 1
[pid   339] mkdirat(AT_FDCWD, "./dev", 0777) = -1 EEXIST (File exists)
[pid   339] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   339] <... futex resumed>)        = 1
[pid   339] mount(NULL, "./dev", "devtmpfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   339] futex(0x7fb06472ab2c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   337] futex(0x7fb06472ab28, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   339] <... futex resumed>)        = 1
[   24.560046][  T312] WARNING: CPU: 1 PID: 312 at drivers/usb/gadget/function/u_serial.c:694 gs_close+0x17d/0x9b0
[   24.570328][  T312] Modules linked in:
[   24.574243][  T312] CPU: 1 PID: 312 Comm: syz-executor599 Tainted: G    B   W          syzkaller #0
[   24.583451][  T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   24.593566][  T312] RIP: 0010:gs_close+0x17d/0x9b0
[pid   339] openat(AT_FDCWD, "./dev/ttyGS0", O_RDWR <unfinished ...>
[pid   334] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid   334] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid   334] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb064619000
[pid   334] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} => {parent_tid=[340]}, 88) = 340
[pid   334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   334] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   334] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 340 attached
 <unfinished ...>
[pid   340] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   340] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = 0
[pid   340] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   334] <... futex resumed>)        = 0
[pid   340] <... futex resumed>)        = 1
[pid   340] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   336] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   336] futex(0x7fb06472ab2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid   336] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb064619000
[pid   336] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} => {parent_tid=[341]}, 88) = 341
[pid   336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   336] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   336] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 341 attached
 <unfinished ...>
[pid   341] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   341] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = -1 ENOENT (No such file or directory)
[pid   341] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   336] <... futex resumed>)        = 0
[pid   341] <... futex resumed>)        = 1
[pid   341] futex(0x7fb06472ab38, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   337] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   337] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb064619000
[pid   337] mprotect(0x7fb06461a000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   337] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb064639990, parent_tid=0x7fb064639990, exit_signal=0, stack=0x7fb064619000, stack_size=0x20240, tls=0x7fb0646396c0} => {parent_tid=[342]}, 88) = 342
[pid   337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   337] futex(0x7fb06472ab38, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   337] futex(0x7fb06472ab3c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 342 attached
 <unfinished ...>
[pid   342] set_robust_list(0x7fb0646399a0, 24) = 0
[pid   342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   342] rmdir("./my_configfs/usb_gadget/g1/functions/obex.usb1") = -1 ENOENT (No such file or directory)
[pid   342] futex(0x7fb06472ab3c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   337] <... futex resumed>)        = 0
[pid   342] <... futex resumed>)        = 1
[   24.598531][  T312] Code: 74 23 fe 41 ff cc 42 0f b6 04 2b 84 c0 0f 85 cf 06 00 00 48 8b 44 24 20 44 89 20 48 8b 5c 24 38 e9 cb 02 00 00 e8 93 74 23 fe <0f> 0b 48 8b 5c 24 38 e9 ba 02 00 00 e8 82 74 23 fe 49 8d bf a8 02
[   24.618164][  T312] RSP: 0018:ffffc90000db79e0 EFLAGS: 00010093
[   24.624256][  T312] RAX: ffffffff834df1ad RBX: 1ffff110220a4d1a RCX: ffff888110362880
[   24.632263][  T312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   24.640231][  T312] RBP: ffffc90000db7b00 R08: 0000000000000003 R09: 0000000000000004
[   24.648201][  T312] R10: dffffc0000000000 R11: fffff520001b6f2c R12: 0000000000000000
[   24.656173][  T312] R13: dffffc0000000000 R14: 1ffff920001b6f44 R15: ffff888110526800
[   24.664147][  T312] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   24.673091][  T312] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   24.679683][  T312] CR2: 00007fb0646f5b7c CR3: 00000001105ef000 CR4: 00000000003506a0
[   24.687651][  T312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   24.695612][  T312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   24.703575][  T312] Call Trace:
[   24.706854][  T312]  <TASK>
[   24.709783][  T312]  ? __kasan_check_write+0x14/0x20
[   24.714913][  T312]  ? _raw_spin_lock+0x94/0xf0
[   24.719600][  T312]  ? __cfi__raw_spin_lock+0x10/0x10
[   24.724796][  T312]  ? __cfi_gs_close+0x10/0x10
[   24.729599][  T312]  ? _raw_spin_unlock+0x4c/0x70
[   24.734476][  T312]  ? fasync_remove_entry+0x19c/0x1d0
[   24.739780][  T312]  ? __cfi_gs_close+0x10/0x10
[   24.744455][  T312]  tty_release+0x32b/0x11d0
[   24.748963][  T312]  ? __cfi_tty_release+0x10/0x10
[   24.753905][  T312]  __fput+0x1fd/0x8f0
[   24.757894][  T312]  ____fput+0x15/0x20
[   24.761884][  T312]  task_work_run+0x1e1/0x250
[   24.766481][  T312]  ? __cfi_task_work_run+0x10/0x10
[   24.771591][  T312]  ? __kasan_check_write+0x14/0x20
[   24.776700][  T312]  do_exit+0xaf2/0x2850
[   24.780860][  T312]  ? ttwu_do_wakeup+0x102/0x490
[   24.785711][  T312]  ? __cfi_do_exit+0x10/0x10
[   24.790300][  T312]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   24.796107][  T312]  ? try_to_wake_up+0x622/0x1250
[   24.801049][  T312]  ? _raw_spin_lock_irq+0x95/0xf0
[   24.806098][  T312]  ? wake_up_state+0xb/0x10
[   24.810617][  T312]  ? zap_other_threads+0x2b7/0x2f0
[   24.815729][  T312]  do_group_exit+0x21b/0x2e0
[   24.820322][  T312]  __x64_sys_exit_group+0x3f/0x40
[   24.825347][  T312]  x64_sys_call+0x7b4/0x9a0
[   24.829848][  T312]  do_syscall_64+0x4c/0xa0
[   24.834262][  T312]  ? clear_bhb_loop+0x30/0x80
[   24.839025][  T312]  ? clear_bhb_loop+0x30/0x80
[   24.843698][  T312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   24.849691][  T312] RIP: 0033:0x7fb064679a85
[   24.854116][  T312] Code: Unable to access opcode bytes at 0x7fb064679a5b.
[   24.861139][  T312] RSP: 002b:00007ffd2d8fe9f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[   24.869561][  T312] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb064679a85
[   24.877537][  T312] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000
[   24.885506][  T312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   24.893476][  T312] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   24.901549][  T312] R13: 00007fb064729120 R14: 00007fb06472b548 R15: 00007fb06472b560
[   24.909535][  T312]  </TASK>
[   24.912554][  T312] ---[ end trace 0000000000000000 ]---
[   24.932689][  T312] general protection fault, probably for non-canonical address 0xe0a31c2360000020: 0000 [#1] PREEMPT SMP KASAN
[   24.944435][  T312] KASAN: maybe wild-memory-access in range [0x0519011b00000100-0x0519011b00000107]
[   24.953727][  T312] CPU: 1 PID: 312 Comm: syz-executor599 Tainted: G    B   W          syzkaller #0
[   24.962924][  T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   24.972993][  T312] RIP: 0010:try_to_grab_pending+0x1be/0x580
[   24.978900][  T312] Code: 00 e8 36 3d 29 00 e9 0a 01 00 00 e8 2c 3d 29 00 31 c0 e9 98 01 00 00 e8 20 3d 29 00 49 81 e6 00 ff ff ff 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 b4 c7 6e 00 49 8b 06 48 85 c0 0f 84
[   24.998513][  T312] RSP: 0018:ffffc90000db7880 EFLAGS: 00010002
[   25.004586][  T312] RAX: 00a3202360000020 RBX: dffffc0000000000 RCX: ffff888110362880
[   25.012587][  T312] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[   25.020550][  T312] RBP: ffffc90000db7930 R08: 0000000000000007 R09: 00000000fffffffb
[   25.028532][  T312] R10: dffffc0000000000 R11: ffffed10220a4d01 R12: ffff888110526808
[   25.036495][  T312] R13: ffffc90000db7958 R14: 0519011b00000100 R15: 1ffff920001b6f2b
[   25.044464][  T312] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   25.053380][  T312] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   25.059956][  T312] CR2: 00007fb0646f5b7c CR3: 0000000110058000 CR4: 00000000003506a0
[   25.067918][  T312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   25.075876][  T312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   25.083834][  T312] Call Trace:
[   25.087121][  T312]  <TASK>
[   25.090043][  T312]  ? mod_delayed_work_on+0xe0/0xe0
[   25.095160][  T312]  __cancel_work_timer+0xb5/0x4d0
[   25.100204][  T312]  ? cancel_work_sync+0x20/0x20
[   25.105048][  T312]  cancel_work_sync+0x17/0x20
[   25.109730][  T312]  tty_buffer_cancel_work+0x19/0x20
[   25.114933][  T312]  release_tty+0x487/0x830
[   25.119345][  T312]  tty_release_struct+0xbf/0xe0
[   25.124188][  T312]  tty_release+0xbb7/0x11d0
[   25.128699][  T312]  ? __cfi_tty_release+0x10/0x10
[   25.133625][  T312]  __fput+0x1fd/0x8f0
[   25.137599][  T312]  ____fput+0x15/0x20
[   25.141572][  T312]  task_work_run+0x1e1/0x250
[   25.146149][  T312]  ? __cfi_task_work_run+0x10/0x10
[   25.151265][  T312]  ? __kasan_check_write+0x14/0x20
[   25.156366][  T312]  do_exit+0xaf2/0x2850
[   25.160519][  T312]  ? ttwu_do_wakeup+0x102/0x490
[   25.165375][  T312]  ? __cfi_do_exit+0x10/0x10
[   25.169957][  T312]  ? _raw_spin_unlock_irqrestore+0x5a/0x80
[   25.175752][  T312]  ? try_to_wake_up+0x622/0x1250
[   25.180680][  T312]  ? _raw_spin_lock_irq+0x95/0xf0
[   25.185690][  T312]  ? wake_up_state+0xb/0x10
[   25.190182][  T312]  ? zap_other_threads+0x2b7/0x2f0
[   25.195285][  T312]  do_group_exit+0x21b/0x2e0
[   25.199866][  T312]  __x64_sys_exit_group+0x3f/0x40
[   25.204883][  T312]  x64_sys_call+0x7b4/0x9a0
[   25.209376][  T312]  do_syscall_64+0x4c/0xa0
[   25.213781][  T312]  ? clear_bhb_loop+0x30/0x80
[   25.218444][  T312]  ? clear_bhb_loop+0x30/0x80
[   25.223107][  T312]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   25.228989][  T312] RIP: 0033:0x7fb064679a85
[   25.233389][  T312] Code: Unable to access opcode bytes at 0x7fb064679a5b.
[   25.240387][  T312] RSP: 002b:00007ffd2d8fe9f8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7
[   25.248784][  T312] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fb064679a85
[   25.256741][  T312] RDX: 00000000000000e7 RSI: ffffffffffffffd0 RDI: 0000000000000000
[   25.264720][  T312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   25.272681][  T312] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[   25.280727][  T312] R13: 00007fb064729120 R14: 00007fb06472b548 R15: 00007fb06472b560
[   25.288687][  T312]  </TASK>
[   25.291692][  T312] Modules linked in:
[   25.295573][  T312] ---[ end trace 0000000000000000 ]---
[   25.301010][  T312] RIP: 0010:try_to_grab_pending+0x1be/0x580
[   25.306902][  T312] Code: 00 e8 36 3d 29 00 e9 0a 01 00 00 e8 2c 3d 29 00 31 c0 e9 98 01 00 00 e8 20 3d 29 00 49 81 e6 00 ff ff ff 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 b4 c7 6e 00 49 8b 06 48 85 c0 0f 84
[   25.326505][  T312] RSP: 0018:ffffc90000db7880 EFLAGS: 00010002
[   25.332563][  T312] RAX: 00a3202360000020 RBX: dffffc0000000000 RCX: ffff888110362880
[   25.340522][  T312] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000
[   25.348482][  T312] RBP: ffffc90000db7930 R08: 0000000000000007 R09: 00000000fffffffb
[   25.356441][  T312] R10: dffffc0000000000 R11: ffffed10220a4d01 R12: ffff888110526808
[   25.364568][  T312] R13: ffffc90000db7958 R14: 0519011b00000100 R15: 1ffff920001b6f2b
[   25.372740][  T312] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   25.381695][  T312] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   25.388275][  T312] CR2: 00007fb0646f5b7c CR3: 0000000110058000 CR4: 00000000003506a0
[   25.396242][  T312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   25.404201][  T312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   25.412160][  T312] Kernel panic - not syncing: Fatal exception
[   25.418322][  T312] Kernel Offset: disabled
[   25.422635][  T312] Rebooting in 86400 seconds..