ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor1244698000 <...> syzkaller syzkaller login: [ 15.935821][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 15.935837][ T36] audit: type=1400 audit(1789638401.549:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.939974][ T36] audit: type=1400 audit(1789638401.549:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.942664][ T36] audit: type=1400 audit(1789638401.549:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2576]" dev="pipefs" ino=2576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.945591][ T36] audit: type=1400 audit(1789638401.549:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.948461][ T36] audit: type=1400 audit(1789638401.549:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor1244698000", ["ci2-android-6-12-rust/syz-executor1244698000"], 0x7ffd16231430 /* 10 vars */) = 0 brk(NULL) = 0x55558cd01000 brk(0x55558cd01d40) = 0x55558cd01d40 arch_prctl(ARCH_SET_FS, 0x55558cd013c0) = 0 set_tid_address(0x55558cd01690) = 312 set_robust_list(0x55558cd016a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor1244698000", 4096) = 50 getrandom("\x47\x33\x87\xf3\x99\xe3\x1d\x67", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558cd01d40 brk(0x55558cd22d40) = 0x55558cd22d40 brk(0x55558cd23000) = 0x55558cd23000 mprotect(0x7fe0a4bd1000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 313 attached , child_tidptr=0x55558cd01690) = 313 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] set_robust_list(0x55558cd016a0, 24 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[] [pid 313] <... set_robust_list resumed>) = 0 [pid 312] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] unshare(CLONE_NEWPID) = 0 [pid 312] <... clone resumed>, child_tidptr=0x55558cd01690) = 314 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 312] <... clone resumed>, child_tidptr=0x55558cd01690) = 315 [pid 312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 312] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 313] <... clone resumed>, child_tidptr=0x55558cd01690) = 316 ci2-android-6-12-rust/strace-static-x86_64: Process 317 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] set_robust_list(0x55558cd016a0, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 312] <... clone resumed>, child_tidptr=0x55558cd01690) = 317 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 317] unshare(CLONE_NEWPID) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 318 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x55558cd016a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] unshare(CLONE_NEWPID) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 319 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 315 attached [pid 315] set_robust_list(0x55558cd016a0, 24) = 0 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 315] unshare(CLONE_NEWPID) = 0 [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 320 [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x55558cd016a0, 24) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] getppid() = 0 [pid 316] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 316] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 316] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 316] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 316] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 316] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 316] unshare(CLONE_NEWNS) = 0 [pid 316] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 316] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 316] unshare(CLONE_NEWCGROUP) = 0 [pid 316] unshare(CLONE_NEWUTS) = 0 [pid 316] unshare(CLONE_SYSVSEM) = 0 [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 316] getpid() = 1 [pid 316] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 320] set_robust_list(0x55558cd016a0, 24 [pid 319] set_robust_list(0x55558cd016a0, 24 [pid 318] set_robust_list(0x55558cd016a0, 24 [pid 320] <... set_robust_list resumed>) = 0 [pid 319] <... set_robust_list resumed>) = 0 [pid 318] <... set_robust_list resumed>) = 0 [pid 316] <... unshare resumed>) = 0 [pid 316] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "0 65535", 7) = 7 [pid 316] close(3) = 0 [pid 316] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "100000", 6) = 6 [pid 316] close(3) = 0 [pid 316] mkdir("./syz-tmp", 0777) = 0 [pid 316] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 316] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 316] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 316] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 316] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 316] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 316] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 316] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 316] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 316] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 316] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 316] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 316] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 316] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 316] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 316] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 316] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 316] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [] [pid 319] rt_sigprocmask(SIG_SETMASK, [] [pid 316] chdir("/" [pid 320] rt_sigprocmask(SIG_SETMASK, [] [pid 319] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... chdir resumed>) = 0 [pid 316] umount2("./pivot", MNT_DETACH [pid 320] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] getppid() = 0 [pid 320] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 320] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 320] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 320] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 320] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 320] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 320] unshare(CLONE_NEWNS) = 0 [pid 320] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 320] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 320] unshare(CLONE_NEWCGROUP) = 0 [pid 320] unshare(CLONE_NEWUTS) = 0 [pid 320] unshare(CLONE_SYSVSEM) = 0 [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] getpid() = 1 [ 25.314603][ T36] audit: type=1400 audit(1789638410.929:64): avc: denied { execmem } for pid=312 comm="syz-executor124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.334470][ T36] audit: type=1400 audit(1789638410.929:65): avc: denied { mounton } for pid=316 comm="syz-executor124" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 320] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 316] <... umount2 resumed>) = 0 [pid 320] <... close resumed>) = 0 [pid 318] <... prctl resumed>) = 0 [pid 316] chroot("./newroot" [pid 320] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 316] <... chroot resumed>) = 0 [pid 320] <... openat resumed>) = 3 [pid 316] chdir("/" [pid 319] <... prctl resumed>) = 0 [pid 318] getppid( [pid 316] <... chdir resumed>) = 0 [pid 316] mkdir("/dev/gadgetfs", 0777) = 0 [pid 320] write(3, "100000", 6) = 6 [pid 320] close(3) = 0 [pid 320] mkdir("./syz-tmp", 0777) = -1 EEXIST (File exists) [pid 316] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 320] exit_group(1 [pid 316] <... mount resumed>) = -1 ENODEV (No such device) [pid 320] <... exit_group resumed>) = ? [pid 316] mkdir("/dev/binderfs", 0777) = 0 [pid 316] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 316] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 321 attached , child_tidptr=0x55558cd01690) = 2 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 321] set_robust_list(0x55558cd016a0, 24 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 321] <... set_robust_list resumed>) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 executing program [pid 321] write(1, "executing program\n", 18) = 18 [pid 321] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 321] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 321] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 321] rmdir("./config/usb_gadget/g1") = 0 [pid 321] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 321] close(3) = -1 EBADF (Bad file descriptor) [pid 321] close(4) = -1 EBADF (Bad file descriptor) [pid 321] close(5) = -1 EBADF (Bad file descriptor) [pid 321] close(6) = -1 EBADF (Bad file descriptor) [pid 321] close(7) = -1 EBADF (Bad file descriptor) [pid 321] close(8) = -1 EBADF (Bad file descriptor) [pid 321] close(9) = -1 EBADF (Bad file descriptor) [pid 321] close(10) = -1 EBADF (Bad file descriptor) [pid 321] close(11) = -1 EBADF (Bad file descriptor) [pid 321] close(12) = -1 EBADF (Bad file descriptor) [pid 321] close(13) = -1 EBADF (Bad file descriptor) [pid 321] close(14) = -1 EBADF (Bad file descriptor) [pid 321] close(15) = -1 EBADF (Bad file descriptor) [pid 321] close(16) = -1 EBADF (Bad file descriptor) [pid 321] close(17) = -1 EBADF (Bad file descriptor) [pid 321] close(18) = -1 EBADF (Bad file descriptor) [pid 321] close(19) = -1 EBADF (Bad file descriptor) [pid 321] close(20) = -1 EBADF (Bad file descriptor) [pid 321] close(21) = -1 EBADF (Bad file descriptor) [pid 321] close(22) = -1 EBADF (Bad file descriptor) [pid 321] close(23) = -1 EBADF (Bad file descriptor) [pid 321] close(24) = -1 EBADF (Bad file descriptor) [pid 321] close(25) = -1 EBADF (Bad file descriptor) [pid 321] close(26) = -1 EBADF (Bad file descriptor) [pid 321] close(27) = -1 EBADF (Bad file descriptor) [pid 321] close(28) = -1 EBADF (Bad file descriptor) [pid 321] close(29) = -1 EBADF (Bad file descriptor) [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 319] getppid() = 0 [pid 319] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 319] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 319] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 319] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 319] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 319] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 319] unshare(CLONE_NEWNS) = 0 [pid 319] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 319] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 319] unshare(CLONE_NEWCGROUP) = 0 [pid 319] unshare(CLONE_NEWUTS) = 0 [pid 319] unshare(CLONE_SYSVSEM) = 0 [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 320] +++ exited with 1 +++ [pid 318] <... getppid resumed>) = 0 [pid 318] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] <... prlimit64 resumed>, NULL) = 0 [pid 315] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=1, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 315] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 315] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 319] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 315] <... clone resumed>, child_tidptr=0x55558cd01690) = -1 ENOMEM (Cannot allocate memory) [pid 319] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 319] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 319] getpid( [pid 318] <... prlimit64 resumed>, NULL) = 0 [pid 319] <... getpid resumed>) = 1 [pid 319] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 318] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 315] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] <... restart_syscall resumed>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 3 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] <... prlimit64 resumed>, NULL) = 0 [pid 318] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 318] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 318] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 318] unshare(CLONE_NEWNS) = 0 [pid 318] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 318] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 318] unshare(CLONE_NEWCGROUP) = 0 [pid 318] unshare(CLONE_NEWUTS) = 0 [pid 318] unshare(CLONE_SYSVSEM) = 0 [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 318] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [ 25.357031][ T36] audit: type=1400 audit(1789638410.949:66): avc: denied { mounton } for pid=316 comm="syz-executor124" path="/root/syz-tmp" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.380997][ T36] audit: type=1400 audit(1789638410.949:67): avc: denied { mount } for pid=316 comm="syz-executor124" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [pid 318] getpid() = 1 [pid 318] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 324] set_robust_list(0x55558cd016a0, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] write(1, "executing program\n", 18) = 18 [pid 324] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 324] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 324] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 324] rmdir("./config/usb_gadget/g1") = 0 [pid 324] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 324] close(3) = -1 EBADF (Bad file descriptor) [pid 324] close(4) = -1 EBADF (Bad file descriptor) [pid 324] close(5) = -1 EBADF (Bad file descriptor) [pid 324] close(6) = -1 EBADF (Bad file descriptor) [pid 324] close(7) = -1 EBADF (Bad file descriptor) [pid 324] close(8) = -1 EBADF (Bad file descriptor) [pid 324] close(9) = -1 EBADF (Bad file descriptor) [pid 324] close(10) = -1 EBADF (Bad file descriptor) [pid 324] close(11) = -1 EBADF (Bad file descriptor) [pid 324] close(12) = -1 EBADF (Bad file descriptor) [pid 324] close(13) = -1 EBADF (Bad file descriptor) [pid 324] close(14) = -1 EBADF (Bad file descriptor) [pid 324] close(15) = -1 EBADF (Bad file descriptor) executing program [pid 324] close(16) = -1 EBADF (Bad file descriptor) [pid 324] close(17) = -1 EBADF (Bad file descriptor) [pid 324] close(18) = -1 EBADF (Bad file descriptor) [pid 324] close(19) = -1 EBADF (Bad file descriptor) [pid 324] close(20) = -1 EBADF (Bad file descriptor) [pid 324] close(21) = -1 EBADF (Bad file descriptor) [pid 324] close(22) = -1 EBADF (Bad file descriptor) [pid 324] close(23) = -1 EBADF (Bad file descriptor) [pid 324] close(24) = -1 EBADF (Bad file descriptor) [pid 324] close(25) = -1 EBADF (Bad file descriptor) [pid 324] close(26) = -1 EBADF (Bad file descriptor) [pid 324] close(27) = -1 EBADF (Bad file descriptor) [pid 324] close(28) = -1 EBADF (Bad file descriptor) [pid 324] close(29) = -1 EBADF (Bad file descriptor) [pid 324] exit_group(0) = ? [pid 324] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 25.407209][ T36] audit: type=1400 audit(1789638410.949:68): avc: denied { mounton } for pid=316 comm="syz-executor124" path="/root/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.431216][ T36] audit: type=1400 audit(1789638410.949:69): avc: denied { mount } for pid=316 comm="syz-executor124" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [pid 319] <... unshare resumed>) = 0 [pid 319] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "0 65535", 7) = 7 [pid 319] close(3) = 0 [pid 319] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "100000", 6) = 6 [pid 319] close(3) = 0 [pid 319] mkdir("./syz-tmp", 0777) = -1 EEXIST (File exists) [pid 319] exit_group(1) = ? [pid 318] <... unshare resumed>) = 0 [pid 318] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "0 65535", 7) = 7 [pid 318] close(3) = 0 [pid 318] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "100000", 6) = 6 [pid 318] close(3) = 0 [pid 318] mkdir("./syz-tmp", 0777) = -1 EEXIST (File exists) [pid 318] exit_group(1) = ? [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 319] +++ exited with 1 +++ [pid 318] +++ exited with 1 +++ [pid 314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=1, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = -1 ENOMEM (Cannot allocate memory) [pid 317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=1, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 314] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-12-rust/strace-static-x86_64: Process 325 attached , NULL, 8) = 0 [pid 316] <... clone resumed>, child_tidptr=0x55558cd01690) = 4 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... clone resumed>, child_tidptr=0x55558cd01690) = -1 ENOMEM (Cannot allocate memory) [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] set_robust_list(0x55558cd016a0, 24) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] write(1, "executing program\n", 18) = 18 executing program [pid 325] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 325] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 325] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 325] rmdir("./config/usb_gadget/g1") = 0 [pid 325] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 25.453200][ T36] audit: type=1400 audit(1789638410.949:70): avc: denied { mounton } for pid=316 comm="syz-executor124" path="/root/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 25.478691][ T36] audit: type=1400 audit(1789638410.949:71): avc: denied { mounton } for pid=316 comm="syz-executor124" path="/root/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [pid 325] close(3) = -1 EBADF (Bad file descriptor) [pid 325] close(4) = -1 EBADF (Bad file descriptor) [pid 325] close(5) = -1 EBADF (Bad file descriptor) [pid 325] close(6) = -1 EBADF (Bad file descriptor) [pid 325] close(7) = -1 EBADF (Bad file descriptor) [pid 325] close(8) = -1 EBADF (Bad file descriptor) [pid 325] close(9) = -1 EBADF (Bad file descriptor) [pid 325] close(10) = -1 EBADF (Bad file descriptor) [pid 325] close(11) = -1 EBADF (Bad file descriptor) [pid 325] close(12) = -1 EBADF (Bad file descriptor) [pid 325] close(13) = -1 EBADF (Bad file descriptor) [pid 325] close(14) = -1 EBADF (Bad file descriptor) [pid 325] close(15) = -1 EBADF (Bad file descriptor) [pid 325] close(16) = -1 EBADF (Bad file descriptor) [pid 325] close(17) = -1 EBADF (Bad file descriptor) [pid 325] close(18) = -1 EBADF (Bad file descriptor) [pid 325] close(19) = -1 EBADF (Bad file descriptor) [pid 325] close(20) = -1 EBADF (Bad file descriptor) [pid 325] close(21) = -1 EBADF (Bad file descriptor) [pid 325] close(22) = -1 EBADF (Bad file descriptor) [pid 325] close(23) = -1 EBADF (Bad file descriptor) [pid 325] close(24) = -1 EBADF (Bad file descriptor) [pid 325] close(25) = -1 EBADF (Bad file descriptor) [pid 325] close(26) = -1 EBADF (Bad file descriptor) [pid 325] close(27) = -1 EBADF (Bad file descriptor) [pid 325] close(28) = -1 EBADF (Bad file descriptor) [pid 325] close(29) = -1 EBADF (Bad file descriptor) [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 328 attached , child_tidptr=0x55558cd01690) = 5 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 328] set_robust_list(0x55558cd016a0, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 328] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] write(1, "executing program\n", 18) = 18 executing program [pid 328] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 328] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 328] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 328] rmdir("./config/usb_gadget/g1") = 0 [pid 328] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 328] close(3) = -1 EBADF (Bad file descriptor) [pid 328] close(4) = -1 EBADF (Bad file descriptor) [pid 328] close(5) = -1 EBADF (Bad file descriptor) [pid 328] close(6) = -1 EBADF (Bad file descriptor) [pid 328] close(7) = -1 EBADF (Bad file descriptor) [pid 328] close(8) = -1 EBADF (Bad file descriptor) [pid 328] close(9) = -1 EBADF (Bad file descriptor) [pid 328] close(10) = -1 EBADF (Bad file descriptor) [pid 328] close(11) = -1 EBADF (Bad file descriptor) [pid 328] close(12) = -1 EBADF (Bad file descriptor) [pid 328] close(13) = -1 EBADF (Bad file descriptor) [pid 328] close(14) = -1 EBADF (Bad file descriptor) [pid 328] close(15) = -1 EBADF (Bad file descriptor) [pid 328] close(16) = -1 EBADF (Bad file descriptor) [pid 328] close(17) = -1 EBADF (Bad file descriptor) [pid 328] close(18) = -1 EBADF (Bad file descriptor) [pid 328] close(19) = -1 EBADF (Bad file descriptor) [pid 328] close(20) = -1 EBADF (Bad file descriptor) [pid 328] close(21) = -1 EBADF (Bad file descriptor) [pid 328] close(22) = -1 EBADF (Bad file descriptor) [pid 328] close(23) = -1 EBADF (Bad file descriptor) [pid 328] close(24) = -1 EBADF (Bad file descriptor) [pid 328] close(25) = -1 EBADF (Bad file descriptor) [pid 328] close(26) = -1 EBADF (Bad file descriptor) [pid 328] close(27) = -1 EBADF (Bad file descriptor) [pid 328] close(28) = -1 EBADF (Bad file descriptor) [pid 328] close(29) = -1 EBADF (Bad file descriptor) [pid 328] exit_group(0) = ? [pid 328] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 6 ci2-android-6-12-rust/strace-static-x86_64: Process 329 attached [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] set_robust_list(0x55558cd016a0, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] write(1, "executing program\n", 18) = 18 executing program [pid 329] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 329] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 329] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 329] rmdir("./config/usb_gadget/g1") = 0 [pid 329] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 329] close(3) = -1 EBADF (Bad file descriptor) [pid 329] close(4) = -1 EBADF (Bad file descriptor) [pid 329] close(5) = -1 EBADF (Bad file descriptor) [pid 329] close(6) = -1 EBADF (Bad file descriptor) [pid 329] close(7) = -1 EBADF (Bad file descriptor) [pid 329] close(8) = -1 EBADF (Bad file descriptor) [pid 329] close(9) = -1 EBADF (Bad file descriptor) [pid 329] close(10) = -1 EBADF (Bad file descriptor) [pid 329] close(11) = -1 EBADF (Bad file descriptor) [pid 329] close(12) = -1 EBADF (Bad file descriptor) [pid 329] close(13) = -1 EBADF (Bad file descriptor) [pid 329] close(14) = -1 EBADF (Bad file descriptor) [pid 329] close(15) = -1 EBADF (Bad file descriptor) [pid 329] close(16) = -1 EBADF (Bad file descriptor) [pid 329] close(17) = -1 EBADF (Bad file descriptor) [pid 329] close(18) = -1 EBADF (Bad file descriptor) [pid 329] close(19) = -1 EBADF (Bad file descriptor) [pid 329] close(20) = -1 EBADF (Bad file descriptor) [pid 329] close(21) = -1 EBADF (Bad file descriptor) [pid 329] close(22) = -1 EBADF (Bad file descriptor) [pid 329] close(23) = -1 EBADF (Bad file descriptor) [pid 329] close(24) = -1 EBADF (Bad file descriptor) [pid 329] close(25) = -1 EBADF (Bad file descriptor) [pid 329] close(26) = -1 EBADF (Bad file descriptor) [pid 329] close(27) = -1 EBADF (Bad file descriptor) [pid 329] close(28) = -1 EBADF (Bad file descriptor) [pid 329] close(29) = -1 EBADF (Bad file descriptor) [pid 329] exit_group(0) = ? [pid 329] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 330 attached , child_tidptr=0x55558cd01690) = 7 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] set_robust_list(0x55558cd016a0, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 330] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 330] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 330] rmdir("./config/usb_gadget/g1") = 0 [pid 330] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 330] close(3) = -1 EBADF (Bad file descriptor) [pid 330] close(4) = -1 EBADF (Bad file descriptor) [pid 330] close(5) = -1 EBADF (Bad file descriptor) [pid 330] close(6) = -1 EBADF (Bad file descriptor) [pid 330] close(7) = -1 EBADF (Bad file descriptor) [pid 330] close(8) = -1 EBADF (Bad file descriptor) [pid 330] close(9) = -1 EBADF (Bad file descriptor) [pid 330] close(10) = -1 EBADF (Bad file descriptor) [pid 330] close(11) = -1 EBADF (Bad file descriptor) [pid 330] close(12) = -1 EBADF (Bad file descriptor) [pid 330] close(13) = -1 EBADF (Bad file descriptor) [pid 330] close(14) = -1 EBADF (Bad file descriptor) [pid 330] close(15) = -1 EBADF (Bad file descriptor) [pid 330] close(16) = -1 EBADF (Bad file descriptor) [pid 330] close(17) = -1 EBADF (Bad file descriptor) [pid 330] close(18) = -1 EBADF (Bad file descriptor) [pid 330] close(19) = -1 EBADF (Bad file descriptor) [pid 330] close(20) = -1 EBADF (Bad file descriptor) [pid 330] close(21) = -1 EBADF (Bad file descriptor) [pid 330] close(22) = -1 EBADF (Bad file descriptor) [pid 330] close(23) = -1 EBADF (Bad file descriptor) [pid 330] close(24) = -1 EBADF (Bad file descriptor) [pid 330] close(25) = -1 EBADF (Bad file descriptor) [pid 330] close(26) = -1 EBADF (Bad file descriptor) [pid 330] close(27) = -1 EBADF (Bad file descriptor) [pid 330] close(28) = -1 EBADF (Bad file descriptor) [pid 330] close(29) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 8 ci2-android-6-12-rust/strace-static-x86_64: Process 331 attached [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] set_robust_list(0x55558cd016a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] write(1, "executing program\n", 18) = 18 executing program [pid 331] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 331] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 331] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 331] rmdir("./config/usb_gadget/g1") = 0 [pid 331] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 331] close(3) = -1 EBADF (Bad file descriptor) [pid 331] close(4) = -1 EBADF (Bad file descriptor) [pid 331] close(5) = -1 EBADF (Bad file descriptor) [pid 331] close(6) = -1 EBADF (Bad file descriptor) [pid 331] close(7) = -1 EBADF (Bad file descriptor) [pid 331] close(8) = -1 EBADF (Bad file descriptor) [pid 331] close(9) = -1 EBADF (Bad file descriptor) [pid 331] close(10) = -1 EBADF (Bad file descriptor) [pid 331] close(11) = -1 EBADF (Bad file descriptor) [pid 331] close(12) = -1 EBADF (Bad file descriptor) [pid 331] close(13) = -1 EBADF (Bad file descriptor) [pid 331] close(14) = -1 EBADF (Bad file descriptor) [pid 331] close(15) = -1 EBADF (Bad file descriptor) [pid 331] close(16) = -1 EBADF (Bad file descriptor) [pid 331] close(17) = -1 EBADF (Bad file descriptor) [pid 331] close(18) = -1 EBADF (Bad file descriptor) [pid 331] close(19) = -1 EBADF (Bad file descriptor) [pid 331] close(20) = -1 EBADF (Bad file descriptor) [pid 331] close(21) = -1 EBADF (Bad file descriptor) [pid 331] close(22) = -1 EBADF (Bad file descriptor) [pid 331] close(23) = -1 EBADF (Bad file descriptor) [pid 331] close(24) = -1 EBADF (Bad file descriptor) [pid 331] close(25) = -1 EBADF (Bad file descriptor) [pid 331] close(26) = -1 EBADF (Bad file descriptor) [pid 331] close(27) = -1 EBADF (Bad file descriptor) [pid 331] close(28) = -1 EBADF (Bad file descriptor) [pid 331] close(29) = -1 EBADF (Bad file descriptor) [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 25.507324][ T36] audit: type=1400 audit(1789638410.979:72): avc: denied { unmount } for pid=316 comm="syz-executor124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.527392][ T36] audit: type=1400 audit(1789638410.999:73): avc: denied { mounton } for pid=316 comm="syz-executor124" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 332 attached , child_tidptr=0x55558cd01690) = 9 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] set_robust_list(0x55558cd016a0, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] write(1, "executing program\n", 18) = 18 executing program [pid 332] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 332] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 332] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 332] rmdir("./config/usb_gadget/g1") = 0 [pid 332] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 332] close(3) = -1 EBADF (Bad file descriptor) [pid 332] close(4) = -1 EBADF (Bad file descriptor) [pid 332] close(5) = -1 EBADF (Bad file descriptor) [pid 332] close(6) = -1 EBADF (Bad file descriptor) [pid 332] close(7) = -1 EBADF (Bad file descriptor) [pid 332] close(8) = -1 EBADF (Bad file descriptor) [pid 332] close(9) = -1 EBADF (Bad file descriptor) [pid 332] close(10) = -1 EBADF (Bad file descriptor) [pid 332] close(11) = -1 EBADF (Bad file descriptor) [pid 332] close(12) = -1 EBADF (Bad file descriptor) [pid 332] close(13) = -1 EBADF (Bad file descriptor) [pid 332] close(14) = -1 EBADF (Bad file descriptor) [pid 332] close(15) = -1 EBADF (Bad file descriptor) [pid 332] close(16) = -1 EBADF (Bad file descriptor) [pid 332] close(17) = -1 EBADF (Bad file descriptor) [pid 332] close(18) = -1 EBADF (Bad file descriptor) [pid 332] close(19) = -1 EBADF (Bad file descriptor) [pid 332] close(20) = -1 EBADF (Bad file descriptor) [pid 332] close(21) = -1 EBADF (Bad file descriptor) [pid 332] close(22) = -1 EBADF (Bad file descriptor) [pid 332] close(23) = -1 EBADF (Bad file descriptor) [pid 332] close(24) = -1 EBADF (Bad file descriptor) [pid 332] close(25) = -1 EBADF (Bad file descriptor) [pid 332] close(26) = -1 EBADF (Bad file descriptor) [pid 332] close(27) = -1 EBADF (Bad file descriptor) [pid 332] close(28) = -1 EBADF (Bad file descriptor) [pid 332] close(29) = -1 EBADF (Bad file descriptor) [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 333 attached , child_tidptr=0x55558cd01690) = 10 [pid 333] set_robust_list(0x55558cd016a0, 24 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 333] <... set_robust_list resumed>) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 333] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 executing program [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 333] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 333] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 333] rmdir("./config/usb_gadget/g1") = 0 [pid 333] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 333] close(3) = -1 EBADF (Bad file descriptor) [pid 333] close(4) = -1 EBADF (Bad file descriptor) [pid 333] close(5) = -1 EBADF (Bad file descriptor) [pid 333] close(6) = -1 EBADF (Bad file descriptor) [pid 333] close(7) = -1 EBADF (Bad file descriptor) [pid 333] close(8) = -1 EBADF (Bad file descriptor) [pid 333] close(9) = -1 EBADF (Bad file descriptor) [pid 333] close(10) = -1 EBADF (Bad file descriptor) [pid 333] close(11) = -1 EBADF (Bad file descriptor) [pid 333] close(12) = -1 EBADF (Bad file descriptor) [pid 333] close(13) = -1 EBADF (Bad file descriptor) [pid 333] close(14) = -1 EBADF (Bad file descriptor) [pid 333] close(15) = -1 EBADF (Bad file descriptor) [pid 333] close(16) = -1 EBADF (Bad file descriptor) [pid 333] close(17) = -1 EBADF (Bad file descriptor) [pid 333] close(18) = -1 EBADF (Bad file descriptor) [pid 333] close(19) = -1 EBADF (Bad file descriptor) [pid 333] close(20) = -1 EBADF (Bad file descriptor) [pid 333] close(21) = -1 EBADF (Bad file descriptor) [pid 333] close(22) = -1 EBADF (Bad file descriptor) [pid 333] close(23) = -1 EBADF (Bad file descriptor) [pid 333] close(24) = -1 EBADF (Bad file descriptor) [pid 333] close(25) = -1 EBADF (Bad file descriptor) [pid 333] close(26) = -1 EBADF (Bad file descriptor) [pid 333] close(27) = -1 EBADF (Bad file descriptor) [pid 333] close(28) = -1 EBADF (Bad file descriptor) [pid 333] close(29) = -1 EBADF (Bad file descriptor) [pid 333] exit_group(0) = ? [pid 333] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 334 attached , child_tidptr=0x55558cd01690) = 11 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] set_robust_list(0x55558cd016a0, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] write(1, "executing program\n", 18) = 18 executing program [pid 334] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 334] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 334] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 334] rmdir("./config/usb_gadget/g1") = 0 [pid 334] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 334] close(3) = -1 EBADF (Bad file descriptor) [pid 334] close(4) = -1 EBADF (Bad file descriptor) [pid 334] close(5) = -1 EBADF (Bad file descriptor) [pid 334] close(6) = -1 EBADF (Bad file descriptor) [pid 334] close(7) = -1 EBADF (Bad file descriptor) [pid 334] close(8) = -1 EBADF (Bad file descriptor) [pid 334] close(9) = -1 EBADF (Bad file descriptor) [pid 334] close(10) = -1 EBADF (Bad file descriptor) [pid 334] close(11) = -1 EBADF (Bad file descriptor) [pid 334] close(12) = -1 EBADF (Bad file descriptor) [pid 334] close(13) = -1 EBADF (Bad file descriptor) [pid 334] close(14) = -1 EBADF (Bad file descriptor) [pid 334] close(15) = -1 EBADF (Bad file descriptor) [pid 334] close(16) = -1 EBADF (Bad file descriptor) [pid 334] close(17) = -1 EBADF (Bad file descriptor) [pid 334] close(18) = -1 EBADF (Bad file descriptor) [pid 334] close(19) = -1 EBADF (Bad file descriptor) [pid 334] close(20) = -1 EBADF (Bad file descriptor) [pid 334] close(21) = -1 EBADF (Bad file descriptor) [pid 334] close(22) = -1 EBADF (Bad file descriptor) [pid 334] close(23) = -1 EBADF (Bad file descriptor) [pid 334] close(24) = -1 EBADF (Bad file descriptor) [pid 334] close(25) = -1 EBADF (Bad file descriptor) [pid 334] close(26) = -1 EBADF (Bad file descriptor) [pid 334] close(27) = -1 EBADF (Bad file descriptor) [pid 334] close(28) = -1 EBADF (Bad file descriptor) [pid 334] close(29) = -1 EBADF (Bad file descriptor) [pid 334] exit_group(0) = ? [pid 334] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558cd01690) = 12 ci2-android-6-12-rust/strace-static-x86_64: Process 335 attached [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 335] set_robust_list(0x55558cd016a0, 24) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] write(1, "executing program\n", 18) = 18 executing program [pid 335] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 335] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 335] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 335] rmdir("./config/usb_gadget/g1") = 0 [pid 335] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 335] close(3) = -1 EBADF (Bad file descriptor) [pid 335] close(4) = -1 EBADF (Bad file descriptor) [pid 335] close(5) = -1 EBADF (Bad file descriptor) [pid 335] close(6) = -1 EBADF (Bad file descriptor) [pid 335] close(7) = -1 EBADF (Bad file descriptor) [pid 335] close(8) = -1 EBADF (Bad file descriptor) [pid 335] close(9) = -1 EBADF (Bad file descriptor) [pid 335] close(10) = -1 EBADF (Bad file descriptor) [pid 335] close(11) = -1 EBADF (Bad file descriptor) [pid 335] close(12) = -1 EBADF (Bad file descriptor) [pid 335] close(13) = -1 EBADF (Bad file descriptor) [pid 335] close(14) = -1 EBADF (Bad file descriptor) [pid 335] close(15) = -1 EBADF (Bad file descriptor) [pid 335] close(16) = -1 EBADF (Bad file descriptor) [pid 335] close(17) = -1 EBADF (Bad file descriptor) [pid 335] close(18) = -1 EBADF (Bad file descriptor) [pid 335] close(19) = -1 EBADF (Bad file descriptor) [pid 335] close(20) = -1 EBADF (Bad file descriptor) [pid 335] close(21) = -1 EBADF (Bad file descriptor) [pid 335] close(22) = -1 EBADF (Bad file descriptor) [pid 335] close(23) = -1 EBADF (Bad file descriptor) [pid 335] close(24) = -1 EBADF (Bad file descriptor) [pid 335] close(25) = -1 EBADF (Bad file descriptor) [pid 335] close(26) = -1 EBADF (Bad file descriptor) [pid 335] close(27) = -1 EBADF (Bad file descriptor) [pid 335] close(28) = -1 EBADF (Bad file descriptor) [pid 335] close(29) = -1 EBADF (Bad file descriptor) [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 336 attached , child_tidptr=0x55558cd01690) = 13 [pid 336] set_robust_list(0x55558cd016a0, 24 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 336] <... set_robust_list resumed>) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 336] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] write(1, "executing program\n", 18) = 18 [pid 336] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 336] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 336] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 executing program [pid 336] rmdir("./config/usb_gadget/g1") = 0 [pid 336] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 336] close(3) = -1 EBADF (Bad file descriptor) [pid 336] close(4) = -1 EBADF (Bad file descriptor) [pid 336] close(5) = -1 EBADF (Bad file descriptor) [pid 336] close(6) = -1 EBADF (Bad file descriptor) [pid 336] close(7) = -1 EBADF (Bad file descriptor) [pid 336] close(8) = -1 EBADF (Bad file descriptor) [pid 336] close(9) = -1 EBADF (Bad file descriptor) [pid 336] close(10) = -1 EBADF (Bad file descriptor) [pid 336] close(11) = -1 EBADF (Bad file descriptor) [pid 336] close(12) = -1 EBADF (Bad file descriptor) [pid 336] close(13) = -1 EBADF (Bad file descriptor) [pid 336] close(14) = -1 EBADF (Bad file descriptor) [pid 336] close(15) = -1 EBADF (Bad file descriptor) [pid 336] close(16) = -1 EBADF (Bad file descriptor) [pid 336] close(17) = -1 EBADF (Bad file descriptor) [pid 336] close(18) = -1 EBADF (Bad file descriptor) [pid 336] close(19) = -1 EBADF (Bad file descriptor) [pid 336] close(20) = -1 EBADF (Bad file descriptor) [pid 336] close(21) = -1 EBADF (Bad file descriptor) [pid 336] close(22) = -1 EBADF (Bad file descriptor) [pid 336] close(23) = -1 EBADF (Bad file descriptor) [pid 336] close(24) = -1 EBADF (Bad file descriptor) [pid 336] close(25) = -1 EBADF (Bad file descriptor) [pid 336] close(26) = -1 EBADF (Bad file descriptor) [pid 336] close(27) = -1 EBADF (Bad file descriptor) [pid 336] close(28) = -1 EBADF (Bad file descriptor) [pid 336] close(29) = -1 EBADF (Bad file descriptor) [pid 336] exit_group(0) = ? [pid 336] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 337 attached , child_tidptr=0x55558cd01690) = 14 [pid 337] set_robust_list(0x55558cd016a0, 24) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18) = 18 executing program [pid 337] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 337] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 337] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 337] <... mkdirat resumed>) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 337] rmdir("./config/usb_gadget/g1") = 0 [pid 337] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 337] close(3) = -1 EBADF (Bad file descriptor) [pid 337] close(4) = -1 EBADF (Bad file descriptor) [pid 337] close(5) = -1 EBADF (Bad file descriptor) [pid 337] close(6) = -1 EBADF (Bad file descriptor) [pid 337] close(7) = -1 EBADF (Bad file descriptor) [pid 337] close(8) = -1 EBADF (Bad file descriptor) [pid 337] close(9) = -1 EBADF (Bad file descriptor) [pid 337] close(10) = -1 EBADF (Bad file descriptor) [pid 337] close(11) = -1 EBADF (Bad file descriptor) [pid 337] close(12) = -1 EBADF (Bad file descriptor) [pid 337] close(13) = -1 EBADF (Bad file descriptor) [pid 337] close(14) = -1 EBADF (Bad file descriptor) [pid 337] close(15) = -1 EBADF (Bad file descriptor) [pid 337] close(16) = -1 EBADF (Bad file descriptor) [pid 337] close(17) = -1 EBADF (Bad file descriptor) [pid 337] close(18) = -1 EBADF (Bad file descriptor) [pid 337] close(19) = -1 EBADF (Bad file descriptor) [pid 337] close(20) = -1 EBADF (Bad file descriptor) [pid 337] close(21) = -1 EBADF (Bad file descriptor) [pid 337] close(22) = -1 EBADF (Bad file descriptor) [pid 337] close(23) = -1 EBADF (Bad file descriptor) [pid 337] close(24) = -1 EBADF (Bad file descriptor) [pid 337] close(25) = -1 EBADF (Bad file descriptor) [pid 337] close(26) = -1 EBADF (Bad file descriptor) [pid 337] close(27) = -1 EBADF (Bad file descriptor) [pid 337] close(28) = -1 EBADF (Bad file descriptor) [pid 337] close(29) = -1 EBADF (Bad file descriptor) [pid 337] exit_group(0) = ? [pid 337] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x55558cd016a0, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... clone resumed>, child_tidptr=0x55558cd01690) = 15 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] write(1, "executing program\n", 18) = 18 [pid 338] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 338] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 338] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 338] rmdir("./config/usb_gadget/g1") = 0 [pid 338] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 338] close(3) = -1 EBADF (Bad file descriptor) [pid 338] close(4) = -1 EBADF (Bad file descriptor) [pid 338] close(5) = -1 EBADF (Bad file descriptor) [pid 338] close(6) = -1 EBADF (Bad file descriptor) [pid 338] close(7) = -1 EBADF (Bad file descriptor) [pid 338] close(8) = -1 EBADF (Bad file descriptor) [pid 338] close(9) = -1 EBADF (Bad file descriptor) [pid 338] close(10) = -1 EBADF (Bad file descriptor) [pid 338] close(11) = -1 EBADF (Bad file descriptor) [pid 338] close(12) = -1 EBADF (Bad file descriptor) [pid 338] close(13) = -1 EBADF (Bad file descriptor) [pid 338] close(14) = -1 EBADF (Bad file descriptor) [pid 338] close(15) = -1 EBADF (Bad file descriptor) [pid 338] close(16) = -1 EBADF (Bad file descriptor) [pid 338] close(17) = -1 EBADF (Bad file descriptor) [pid 338] close(18) = -1 EBADF (Bad file descriptor) [pid 338] close(19) = -1 EBADF (Bad file descriptor) [pid 338] close(20) = -1 EBADF (Bad file descriptor) [pid 338] close(21) = -1 EBADF (Bad file descriptor) [pid 338] close(22) = -1 EBADF (Bad file descriptor) [pid 338] close(23) = -1 EBADF (Bad file descriptor) [pid 338] close(24) = -1 EBADF (Bad file descriptor) [pid 338] close(25) = -1 EBADF (Bad file descriptor) [pid 338] close(26) = -1 EBADF (Bad file descriptor) [pid 338] close(27) = -1 EBADF (Bad file descriptor) [pid 338] close(28) = -1 EBADF (Bad file descriptor) [pid 338] close(29) = -1 EBADF (Bad file descriptor) [pid 338] exit_group(0) = ? [pid 338] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 339 attached , child_tidptr=0x55558cd01690) = 16 [pid 339] set_robust_list(0x55558cd016a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 339] <... openat resumed>) = 3 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] write(1, "executing program\n", 18) = 18 executing program [pid 339] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 339] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 339] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 339] rmdir("./config/usb_gadget/g1") = 0 [pid 339] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 339] close(3) = -1 EBADF (Bad file descriptor) [pid 339] close(4) = -1 EBADF (Bad file descriptor) [pid 339] close(5) = -1 EBADF (Bad file descriptor) [pid 339] close(6) = -1 EBADF (Bad file descriptor) [pid 339] close(7) = -1 EBADF (Bad file descriptor) [pid 339] close(8) = -1 EBADF (Bad file descriptor) [pid 339] close(9) = -1 EBADF (Bad file descriptor) [pid 339] close(10) = -1 EBADF (Bad file descriptor) [pid 339] close(11) = -1 EBADF (Bad file descriptor) [pid 339] close(12) = -1 EBADF (Bad file descriptor) [pid 339] close(13) = -1 EBADF (Bad file descriptor) [pid 339] close(14) = -1 EBADF (Bad file descriptor) [pid 339] close(15) = -1 EBADF (Bad file descriptor) [pid 339] close(16) = -1 EBADF (Bad file descriptor) [pid 339] close(17) = -1 EBADF (Bad file descriptor) [pid 339] close(18) = -1 EBADF (Bad file descriptor) [pid 339] close(19) = -1 EBADF (Bad file descriptor) [pid 339] close(20) = -1 EBADF (Bad file descriptor) [pid 339] close(21) = -1 EBADF (Bad file descriptor) [pid 339] close(22) = -1 EBADF (Bad file descriptor) [pid 339] close(23) = -1 EBADF (Bad file descriptor) [pid 339] close(24) = -1 EBADF (Bad file descriptor) [pid 339] close(25) = -1 EBADF (Bad file descriptor) [pid 339] close(26) = -1 EBADF (Bad file descriptor) [pid 339] close(27) = -1 EBADF (Bad file descriptor) [pid 339] close(28) = -1 EBADF (Bad file descriptor) [pid 339] close(29) = -1 EBADF (Bad file descriptor) [pid 339] exit_group(0) = ? [pid 339] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x55558cd016a0, 24) = 0 [pid 316] <... clone resumed>, child_tidptr=0x55558cd01690) = 17 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] write(1, "executing program\n", 18) = 18 executing program [pid 340] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 340] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 340] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [pid 340] rmdir("./config/usb_gadget/g1") = 0 [pid 340] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 340] close(3) = -1 EBADF (Bad file descriptor) [pid 340] close(4) = -1 EBADF (Bad file descriptor) [pid 340] close(5) = -1 EBADF (Bad file descriptor) [pid 340] close(6) = -1 EBADF (Bad file descriptor) [pid 340] close(7) = -1 EBADF (Bad file descriptor) [pid 340] close(8) = -1 EBADF (Bad file descriptor) [pid 340] close(9) = -1 EBADF (Bad file descriptor) [pid 340] close(10) = -1 EBADF (Bad file descriptor) [pid 340] close(11) = -1 EBADF (Bad file descriptor) [pid 340] close(12) = -1 EBADF (Bad file descriptor) [pid 340] close(13) = -1 EBADF (Bad file descriptor) [pid 340] close(14) = -1 EBADF (Bad file descriptor) [pid 340] close(15) = -1 EBADF (Bad file descriptor) [pid 340] close(16) = -1 EBADF (Bad file descriptor) [pid 340] close(17) = -1 EBADF (Bad file descriptor) [pid 340] close(18) = -1 EBADF (Bad file descriptor) [pid 340] close(19) = -1 EBADF (Bad file descriptor) [pid 340] close(20) = -1 EBADF (Bad file descriptor) [pid 340] close(21) = -1 EBADF (Bad file descriptor) [pid 340] close(22) = -1 EBADF (Bad file descriptor) [pid 340] close(23) = -1 EBADF (Bad file descriptor) [pid 340] close(24) = -1 EBADF (Bad file descriptor) [pid 340] close(25) = -1 EBADF (Bad file descriptor) [pid 340] close(26) = -1 EBADF (Bad file descriptor) [pid 340] close(27) = -1 EBADF (Bad file descriptor) [pid 340] close(28) = -1 EBADF (Bad file descriptor) [pid 340] close(29) = -1 EBADF (Bad file descriptor) [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ [pid 316] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 316] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x55558cd016a0, 24) = 0 [pid 316] <... clone resumed>, child_tidptr=0x55558cd01690) = 18 [pid 341] rt_sigprocmask(SIG_SETMASK, [] [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] write(1, "executing program\n", 18) = 18 executing program [pid 341] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 341] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 341] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0 [ 25.714280][ T341] BUG: scheduling while atomic: syz-executor124/341/0x00000002 [ 25.721876][ T341] Modules linked in: [ 25.725774][ T341] CPU: 0 UID: 0 PID: 341 Comm: syz-executor124 Not tainted syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 25.725791][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.725803][ T341] Call Trace: [ 25.725807][ T341] [ 25.725811][ T341] __dump_stack+0x21/0x30 [ 25.725836][ T341] dump_stack_lvl+0x140/0x1c0 [ 25.725849][ T341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.725862][ T341] dump_stack+0x19/0x20 [ 25.725874][ T341] __schedule_bug+0x12b/0x200 [ 25.725886][ T341] ? find_proxy_task+0x2460/0x2460 [ 25.725897][ T341] ? __kasan_check_read+0x15/0x20 [ 25.725908][ T341] ? psi_group_change+0xab6/0x10a0 [ 25.725921][ T341] __schedule+0xb85/0x20b0 [ 25.725932][ T341] ? update_curr+0xf1/0x9c0 [ 25.725942][ T341] ? __sched_text_start+0x10/0x10 [ 25.725952][ T341] ? __kasan_check_read+0x15/0x20 [ 25.725961][ T341] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 25.725976][ T341] ? __kasan_check_write+0x18/0x20 [ 25.725986][ T341] ? _raw_spin_lock_irq+0x93/0x120 [ 25.725995][ T341] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 25.726005][ T341] schedule+0xc5/0x240 [ 25.726014][ T341] schedule_preempt_disabled+0x14/0x30 [ 25.726024][ T341] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 25.726037][ T341] ? activate_task+0x43b/0x480 [ 25.726047][ T341] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 25.726060][ T341] ? try_to_wake_up+0x111a/0x1fd0 [ 25.726071][ T341] ? __kasan_check_write+0x18/0x20 [ 25.726080][ T341] ? wake_q_add_safe+0x29/0x100 [ 25.726096][ T341] ? __cfi_try_to_wake_up+0x10/0x10 [ 25.726107][ T341] ? rwsem_mark_wake+0x507/0x770 [ 25.726120][ T341] ? __kasan_check_write+0x18/0x20 [ 25.726130][ T341] ? rwsem_read_trylock+0x275/0x5a0 [ 25.726143][ T341] ? downgrade_write+0x470/0x470 [ 25.726156][ T341] down_write+0x163/0x2b0 [ 25.726168][ T341] ? __cfi_down_write+0x10/0x10 [ 25.726179][ T341] ? __kasan_check_write+0x18/0x20 [ 25.726189][ T341] kernfs_remove_by_name_ns+0x8c/0x180 [ 25.726203][ T341] sysfs_remove_group+0x108/0x250 [ 25.726214][ T341] dpm_sysfs_remove+0x99/0xd0 [ 25.726227][ T341] device_del+0x241/0xcf0 [ 25.726237][ T341] ? __cfi_class_find_device+0x10/0x10 [ 25.726248][ T341] ? __cfi_device_del+0x10/0x10 [ 25.726256][ T341] ? __kasan_check_write+0x18/0x20 [ 25.726266][ T341] ? kobject_put+0x1cc/0x2a0 [ 25.726275][ T341] device_destroy+0xb0/0x100 [ 25.726284][ T341] ? __cfi_device_destroy+0x10/0x10 [ 25.726294][ T341] ? __kasan_check_write+0x18/0x20 [ 25.726304][ T341] android_device_destroy+0x118/0x180 [ 25.726318][ T341] gadgets_drop+0x1d/0x30 [ 25.726328][ T341] ? __cfi_gadgets_drop+0x10/0x10 [ 25.726338][ T341] configfs_rmdir+0x8ba/0x9b0 [ 25.726351][ T341] vfs_rmdir+0x3db/0x560 [ 25.726364][ T341] do_rmdir+0x29a/0x590 [ 25.726377][ T341] ? __cfi_do_rmdir+0x10/0x10 [ 25.726389][ T341] ? __kasan_check_write+0x18/0x20 [ 25.726399][ T341] __x64_sys_rmdir+0x4b/0x60 [ 25.726412][ T341] x64_sys_call+0xaf7/0x2ee0 [ 25.726421][ T341] do_syscall_64+0x57/0xf0 [ 25.726430][ T341] ? clear_bhb_loop+0x50/0xa0 [ 25.726442][ T341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.726454][ T341] RIP: 0033:0x7fe0a4b3ed39 [ 25.726466][ T341] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 25.726474][ T341] RSP: 002b:00007ffe84936ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 25.726486][ T341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe0a4b3ed39 [ 25.726494][ T341] RDX: 00007fe0a4b3ed39 RSI: 00000000000001ff RDI: 00002000000002c0 [ 25.726501][ T341] RBP: 00000000000f4240 R08: 000000008cd02680 R09: 000000008cd02680 [ 25.726507][ T341] R10: 000000008cd02680 R11: 0000000000000246 R12: 000000000000645a [ 25.726514][ T341] R13: 00007ffe84936eb4 R14: 00007ffe84936ec0 R15: 00007ffe84936ed0 [ 25.726522][ T341] [ 25.726691][ T341] BUG: scheduling while atomic: syz-executor124/341/0x00000000 [ 26.111539][ T341] Modules linked in: [ 26.115452][ T341] CPU: 1 UID: 0 PID: 341 Comm: syz-executor124 Tainted: G W syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 26.115475][ T341] Tainted: [W]=WARN [ 26.115479][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.115485][ T341] Call Trace: [ 26.115489][ T341] [ 26.115494][ T341] __dump_stack+0x21/0x30 [ 26.115513][ T341] dump_stack_lvl+0x140/0x1c0 [ 26.115528][ T341] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.115541][ T341] dump_stack+0x19/0x20 [ 26.115553][ T341] __schedule_bug+0x12b/0x200 [ 26.115565][ T341] ? find_proxy_task+0x2460/0x2460 [ 26.115576][ T341] __schedule+0xb85/0x20b0 [ 26.115587][ T341] ? __wake_up_sync_key+0x1be/0x2c0 [ 26.115600][ T341] ? __cfi___wake_up_sync_key+0x10/0x10 [ 26.115611][ T341] ? __sched_text_start+0x10/0x10 [ 26.115621][ T341] ? __kasan_check_write+0x18/0x20 [ 26.115632][ T341] ? _raw_spin_lock_irq+0x93/0x120 [ 26.115642][ T341] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 26.115651][ T341] ? __kasan_check_read+0x15/0x20 [ 26.115661][ T341] ? cgroup_update_frozen+0x160/0x980 [ 26.115674][ T341] schedule+0xc5/0x240 [ 26.115684][ T341] ptrace_stop+0x528/0x8f0 [ 26.115695][ T341] ptrace_notify+0x1de/0x290 [ 26.115708][ T341] ? __cfi_ptrace_notify+0x10/0x10 [ 26.115721][ T341] ? __cfi_do_rmdir+0x10/0x10 [ 26.115734][ T341] ? __kasan_check_write+0x18/0x20 [ 26.115744][ T341] syscall_exit_work+0x84/0x150 [ 26.115754][ T341] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 26.115764][ T341] syscall_exit_to_user_mode+0x15/0xb0 [ 26.115776][ T341] do_syscall_64+0x63/0xf0 [ 26.115785][ T341] ? clear_bhb_loop+0x50/0xa0 [ 26.115798][ T341] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.115809][ T341] RIP: 0033:0x7fe0a4b3ed39 [ 26.115819][ T341] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 26.115828][ T341] RSP: 002b:00007ffe84936ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 26.115840][ T341] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fe0a4b3ed39 [ 26.115847][ T341] RDX: 00007fe0a4b3ed39 RSI: 00000000000001ff RDI: 00002000000002c0 [ 26.115854][ T341] RBP: 00000000000f4240 R08: 000000008cd02680 R09: 000000008cd02680 [ 26.115861][ T341] R10: 000000008cd02680 R11: 0000000000000246 R12: 000000000000645a [ 26.115868][ T341] R13: 00007ffe84936eb4 R14: 00007ffe84936ec0 R15: 00007ffe84936ed0 [ 26.115876][ T341] [ 26.115943][ T0] Oops: general protection fault, probably for non-canonical address 0xdffffbff87415ca0: 0000 [#1] PREEMPT SMP KASAN PTI [ 26.369859][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/0 Tainted: G W syzkaller #0 52749abf125da3aebe1f5771d25291006b6a1b72 [ 26.382508][ T0] Tainted: [W]=WARN [ 26.386291][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.396323][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 26.401591][ T0] Code: e8 17 58 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 5a 92 63 fb 48 89 c7 e8 d2 a0 b6 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 26.421171][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 26.427213][ T0] RAX: ffff888121c45f00 RBX: 1ffffffff0e82b92 RCX: ffffffff874156c0 [ 26.435174][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.443162][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 26.451121][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffffffff87415c90 [ 26.459078][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 26.467032][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.475937][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.482497][ T0] CR2: 00007fe0a4b7d8b0 CR3: 0000000128ac6000 CR4: 00000000003526b0 [ 26.490450][ T0] Call Trace: [ 26.493708][ T0] [ 26.496622][ T0] ? __kasan_check_read+0x15/0x20 [ 26.501627][ T0] ? ct_nmi_enter+0x9a/0xe0 [ 26.506107][ T0] ? ct_irq_enter+0xd/0x20 [ 26.510501][ T0] ? irqentry_enter+0x2c/0x40 [ 26.515155][ T0] ? sysvec_apic_timer_interrupt+0x13/0x90 [ 26.520936][ T0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 26.527066][ T0] ? ct_kernel_exit+0x7d/0xb0 [ 26.531742][ T0] ? pv_native_safe_halt+0x13/0x20 [ 26.536831][ T0] ? default_idle+0x17/0x30 [ 26.541309][ T0] ? arch_cpu_idle+0xd/0x20 [ 26.545808][ T0] ? default_idle_call+0x3e/0x80 [ 26.550725][ T0] ? do_idle+0x2fc/0x570 [ 26.554942][ T0] ? idle_inject_timer_fn+0x80/0x80 [ 26.560115][ T0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 26.565813][ T0] ? radix_tree_lookup+0x250/0x2a0 [ 26.570897][ T0] ? cpu_startup_entry+0x47/0x60 [ 26.575808][ T0] ? rest_init+0x10b/0x130 [ 26.580196][ T0] ? __cfi_x86_late_time_init+0x10/0x10 [ 26.585718][ T0] ? start_kernel+0x462/0x4bb [ 26.590371][ T0] ? x86_64_start_reservations+0x2e/0x30 [ 26.595986][ T0] ? x86_64_start_kernel+0x6a/0x7b [ 26.601092][ T0] ? common_startup_64+0x13b/0x157 [ 26.606185][ T0] [ 26.609181][ T0] Modules linked in: [ 26.613067][ T0] ---[ end trace 0000000000000000 ]--- [ 26.618496][ T0] RIP: 0010:__schedule+0x149e/0x20b0 [ 26.623764][ T0] Code: e8 17 58 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 5a 92 63 fb 48 89 c7 e8 d2 a0 b6 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36 [ 26.643342][ T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046 [ 26.649385][ T0] RAX: ffff888121c45f00 RBX: 1ffffffff0e82b92 RCX: ffffffff874156c0 [ 26.657331][ T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.665279][ T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8 [ 26.673227][ T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffffffff87415c90 [ 26.681173][ T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0 [ 26.689126][ T0] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.698034][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.704612][ T0] CR2: 00007fe0a4b7d8b0 CR3: 0000000128ac6000 CR4: 00000000003526b0 [ 26.712570][ T0] Kernel panic - not syncing: Fatal exception [ 27.779118][ T0] Shutting down cpus with NMI [ 27.784108][ T0] Kernel Offset: disabled [ 27.788416][ T0] Rebooting in 86400 seconds..