ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor1922769411

<...>
Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts.
execve("ci2-android-6-12-rust/syz-executor1922769411", ["ci2-android-6-12-rust/syz-executor1922769411"], 0x7ffcb9d9fec0 /* 10 vars */) = 0
brk(NULL)                               = 0x5555746dc000
brk(0x5555746dcd40)                     = 0x5555746dcd40
arch_prctl(ARCH_SET_FS, 0x5555746dc3c0) = 0
set_tid_address(0x5555746dc690)         = 311
set_robust_list(0x5555746dc6a0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor1922769411", 4096) = 50
getrandom("\xb0\xd0\x46\x87\x87\x3d\x47\x3b", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555746dcd40
brk(0x5555746fdd40)                     = 0x5555746fdd40
brk(0x5555746fe000)                     = 0x5555746fe000
mprotect(0x7fc5fc931000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555746dc690) = 312
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3
write(3, "10000000000", 11)             = 11
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3
write(3, "20", 2)                       = 2
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3
write(3, "1", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3
ci2-android-6-12-rust/strace-static-x86_64: Process 312 attached
[pid   311] write(3, "1", 1)            = 1
[pid   312] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   311] close(3)                    = 0
[pid   312] <... set_robust_list resumed>) = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   311] <... openat resumed>)       = 3
[pid   311] write(3, "100", 3)          = 3
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "0", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "0", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "7 4 1 3", 7)      = 7
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "1", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "1", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "Y", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "Y", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "Y", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "Y", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "Y", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "Y", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "0", 1)            = 1
[pid   311] close(3)                    = 0
[pid   311] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3
[pid   311] write(3, "312", 3)          = 3
[pid   311] close(3)                    = 0
[pid   311] kill(312, SIGKILL <unfinished ...>
[pid   312] +++ killed by SIGKILL +++
<... kill resumed>)                     = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=312, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} ---
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 313 attached
, child_tidptr=0x5555746dc690) = 313
[pid   311] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   313] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   311] <... clone resumed>, child_tidptr=0x5555746dc690) = 314
ci2-android-6-12-rust/strace-static-x86_64: Process 314 attached
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 315 attached
 <unfinished ...>
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x5555746dc690) = 315
ci2-android-6-12-rust/strace-static-x86_64: Process 316 attached
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   316] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   315] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   316] <... set_robust_list resumed>) = 0
[pid   315] <... set_robust_list resumed>) = 0
[pid   314] <... clone resumed>, child_tidptr=0x5555746dc690) = 316
ci2-android-6-12-rust/strace-static-x86_64: Process 317 attached
[pid   316] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   315] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] <... clone resumed>, child_tidptr=0x5555746dc690) = 317
[pid   316] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   315] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   316] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   315] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   314] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   317] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   316] <... prctl resumed>)        = 0
[pid   315] <... prctl resumed>)        = 0
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   317] <... set_robust_list resumed>) = 0
[pid   316] setpgid(0, 0 <unfinished ...>
[pid   315] setpgid(0, 0 <unfinished ...>
[pid   316] <... setpgid resumed>)      = 0
[pid   315] <... setpgid resumed>)      = 0
[pid   311] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   317] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   311] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   317] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   311] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   317] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   315] <... openat resumed>)       = 3
[pid   316] <... openat resumed>)       = 3
[pid   316] write(3, "1000", 4)         = 4
[pid   315] write(3, "1000", 4 <unfinished ...>
[pid   316] close(3 <unfinished ...>
[pid   315] <... write resumed>)        = 4
[pid   316] <... close resumed>)        = 0
[pid   315] close(3ci2-android-6-12-rust/strace-static-x86_64: Process 318 attached
)                    = 0
[pid   316] write(1, "executing program\n", 18 <unfinished ...>
[pid   315] write(1, "executing program\n", 18 <unfinished ...>
[pid   316] <... write resumed>)        = 18
[pid   315] <... write resumed>)        = 18
[pid   316] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
executing program
executing program
[pid   315] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   317] <... rt_sigprocmask resumed>, [], 8) = 0
[   31.265361][   T36] audit: type=1400 audit(1787689599.460:64): avc:  denied  { execmem } for  pid=311 comm="syz-executor192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
executing program
[pid   318] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   316] <... mkdirat resumed>)      = 0
[pid   315] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   311] <... clone resumed>, child_tidptr=0x5555746dc690) = 318
[pid   316] mount(NULL, "./config", "configfs", 0, NULL) = 0
[pid   315] mount(NULL, "./config", "configfs", 0, NULLci2-android-6-12-rust/strace-static-x86_64: Process 319 attached
 <unfinished ...>
[pid   311] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   319] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   316] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 <unfinished ...>
[pid   319] <... set_robust_list resumed>) = 0
[pid   315] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   319] setpgid(0, 0)               = 0
[pid   319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   316] <... mkdirat resumed>)      = 0
[pid   319] <... openat resumed>)       = 3
[pid   319] write(3, "1000", 4)         = 4
[pid   319] close(3)                    = 0
[pid   316] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   319] write(1, "executing program\n", 18) = 18
[pid   319] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   316] <... rmdir resumed>)        = 0
[pid   311] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   318] <... set_robust_list resumed>) = 0
[pid   317] <... clone resumed>, child_tidptr=0x5555746dc690) = 319
[pid   319] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   316] exit_group(0 <unfinished ...>
[pid   319] mount(NULL, "./config", "configfs", 0, NULL <unfinished ...>
[pid   316] <... exit_group resumed>)   = ?
[pid   317] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   319] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   317] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   316] +++ exited with 0 +++
[pid   315] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 <unfinished ...>
[pid   319] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0
[pid   314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   319] rmdir("./config/usb_gadget/g1") = 0
[pid   319] exit_group(0)               = ?
[pid   314] <... restart_syscall resumed>) = 0
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 321 attached
 <unfinished ...>
[pid   319] +++ exited with 0 +++
[pid   314] <... clone resumed>, child_tidptr=0x5555746dc690) = 321
[pid   314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   321] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   321] setpgid(0, 0)               = 0
[pid   321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   321] write(3, "1000", 4)         = 4
[pid   321] close(3)                    = 0
[pid   321] write(1, "executing program\n", 18) = 18
[pid   321] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists)
[pid   321] mount(NULL, "./config", "configfs", 0, NULL <unfinished ...>
[pid   315] <... mkdirat resumed>)      = 0
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
executing program
[pid   317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   321] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   321] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = -1 EEXIST (File exists)
[pid   321] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   315] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   318] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   321] <... rmdir resumed>)        = 0
[pid   321] exit_group(0)               = ?
[pid   321] +++ exited with 0 +++
[pid   314] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   31.305161][   T36] audit: type=1400 audit(1787689599.500:65): avc:  denied  { mounton } for  pid=316 comm="syz-executor192" path="/root/config" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   31.329520][   T36] audit: type=1400 audit(1787689599.500:66): avc:  denied  { mount } for  pid=316 comm="syz-executor192" name="/" dev="configfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[pid   314] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   315] <... rmdir resumed>)        = -1 ENOENT (No such file or directory)
[pid   315] exit_group(0)               = ?
[pid   315] +++ exited with 0 +++
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=315, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   313] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   318] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   314] <... restart_syscall resumed>) = 0
[pid   314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   314] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   318] <... clone resumed>, child_tidptr=0x5555746dc690) = 322
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   314] <... clone resumed>, child_tidptr=0x5555746dc690) = 323
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-android-6-12-rust/strace-static-x86_64: Process 322 attached
[pid   322] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   322] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   313] <... restart_syscall resumed>) = 0
[pid   322] <... prctl resumed>)        = 0
[pid   322] setpgid(0, 0ci2-android-6-12-rust/strace-static-x86_64: Process 323 attached
)               = 0
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   323] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   322] <... openat resumed>)       = 3
[pid   322] write(3, "1000", 4)         = 4
[pid   322] close(3)                    = 0
[pid   322] write(1, "executing program\n", 18) = 18
executing program
[pid   322] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   313] <... clone resumed>, child_tidptr=0x5555746dc690) = 324
[pid   322] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   322] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   322] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0
[pid   322] rmdir("./config/usb_gadget/g1") = 0
[pid   317] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-6-12-rust/strace-static-x86_64: Process 324 attached
 <unfinished ...>
[pid   323] <... set_robust_list resumed>) = 0
[pid   317] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   322] exit_group(0)               = ?
[pid   322] +++ exited with 0 +++
[pid   318] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   318] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   324] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   324] setpgid(0, 0)               = 0
[pid   324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   324] write(3, "1000", 4)         = 4
[pid   324] close(3 <unfinished ...>
[pid   318] <... restart_syscall resumed>) = 0
[pid   324] <... close resumed>)        = 0
[pid   324] write(1, "executing program\n", 18) = 18
executing program
[   31.354503][   T36] audit: type=1400 audit(1787689599.500:67): avc:  denied  { mounton } for  pid=315 comm="syz-executor192" path="/root/config" dev="configfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   31.378663][   T36] audit: type=1400 audit(1787689599.500:68): avc:  denied  { search } for  pid=316 comm="syz-executor192" name="/" dev="configfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   324] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   318] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   324] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   318] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   324] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   324] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0
ci2-android-6-12-rust/strace-static-x86_64: Process 325 attached
[pid   323] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   318] <... clone resumed>, child_tidptr=0x5555746dc690) = 325
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   324] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   324] <... rmdir resumed>)        = 0
[pid   324] exit_group(0)               = ?
[pid   324] +++ exited with 0 +++
[pid   325] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   325] setpgid(0, 0)               = 0
[pid   325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   325] write(3, "1000", 4)         = 4
[pid   325] close(3)                    = 0
[pid   325] write(1, "executing program\n", 18) = 18
[pid   325] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists)
executing program
[pid   325] mount(NULL, "./config", "configfs", 0, NULL <unfinished ...>
[pid   313] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[pid   325] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   325] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777ci2-android-6-12-rust/strace-static-x86_64: Process 326 attached
) = 0
[pid   323] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   317] <... clone resumed>, child_tidptr=0x5555746dc690) = 326
[pid   313] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   326] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   325] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   326] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   325] <... rmdir resumed>)        = 0
[pid   326] <... prctl resumed>)        = 0
[pid   326] setpgid(0, 0)               = 0
[pid   326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[   31.401947][   T36] audit: type=1400 audit(1787689599.500:69): avc:  denied  { write } for  pid=316 comm="syz-executor192" name="usb_gadget" dev="configfs" ino=2572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   31.426164][   T36] audit: type=1400 audit(1787689599.500:70): avc:  denied  { add_name } for  pid=316 comm="syz-executor192" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[pid   325] exit_group(0 <unfinished ...>
[pid   326] write(3, "1000", 4)         = 4
[pid   325] <... exit_group resumed>)   = ?
[pid   326] close(3 <unfinished ...>
[pid   325] +++ exited with 0 +++
[pid   326] <... close resumed>)        = 0
[pid   318] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
executing program
[pid   326] write(1, "executing program\n", 18 <unfinished ...>
[pid   318] restart_syscall(<... resuming interrupted rt_sigprocmask ...> <unfinished ...>
[pid   326] <... write resumed>)        = 18
[pid   326] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists)
[pid   326] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   318] <... restart_syscall resumed>) = 0
[pid   313] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   323] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   317] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   326] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   318] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 327 attached
 <unfinished ...>
[pid   326] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   327] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   318] <... clone resumed>, child_tidptr=0x5555746dc690) = 327
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   327] <... set_robust_list resumed>) = 0
[pid   327] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   326] <... rmdir resumed>)        = 0
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   327] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   326] exit_group(0 <unfinished ...>
[pid   327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   326] <... exit_group resumed>)   = ?
[pid   327] setpgid(0, 0 <unfinished ...>
[pid   317] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   327] <... setpgid resumed>)      = 0
[pid   327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   323] <... prctl resumed>)        = 0
[pid   313] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   327] <... openat resumed>)       = 3
[pid   326] +++ exited with 0 +++
[pid   327] write(3, "1000", 4)         = 4
[pid   327] close(3)                    = 0
[pid   327] write(1, "executing program\n", 18) = 18
executing program
[pid   327] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists)
[pid   327] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   327] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777) = 0
[pid   327] rmdir("./config/usb_gadget/g1") = 0
[pid   327] exit_group(0)               = ?
[pid   327] +++ exited with 0 +++
[pid   318] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   318] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   318] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 328 attached
 <unfinished ...>
[pid   317] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
ci2-android-6-12-rust/strace-static-x86_64: Process 329 attached
[pid   328] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   323] setpgid(0, 0 <unfinished ...>
[pid   329] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   328] <... set_robust_list resumed>) = 0
[pid   318] <... clone resumed>, child_tidptr=0x5555746dc690) = 328
[pid   313] <... clone resumed>, child_tidptr=0x5555746dc690) = 329
[pid   329] <... set_robust_list resumed>) = 0
[pid   328] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   323] <... setpgid resumed>)      = 0
[pid   329] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   313] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   317] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid   323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   329] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   318] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   317] <... rt_sigprocmask resumed>, [], 8) = 0
[pid   313] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   329] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   318] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   317] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   329] <... prctl resumed>)        = 0
[pid   329] setpgid(0, 0)               = 0
[pid   328] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   323] <... openat resumed>)       = 3
[pid   329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   328] prctl(PR_SET_PDEATHSIG, SIGKILLci2-android-6-12-rust/strace-static-x86_64: Process 330 attached
) = 0
[pid   323] write(3, "1000", 4 <unfinished ...>
[pid   330] set_robust_list(0x5555746dc6a0, 24 <unfinished ...>
[pid   329] <... openat resumed>)       = 3
[pid   328] setpgid(0, 0 <unfinished ...>
[pid   330] <... set_robust_list resumed>) = 0
[pid   329] write(3, "1000", 4 <unfinished ...>
[pid   328] <... setpgid resumed>)      = 0
[pid   323] <... write resumed>)        = 4
[pid   317] <... clone resumed>, child_tidptr=0x5555746dc690) = 330
[pid   330] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   329] <... write resumed>)        = 4
[pid   328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   323] close(3 <unfinished ...>
[pid   317] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   330] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   329] close(3 <unfinished ...>
[pid   328] write(3, "1000", 4 <unfinished ...>
[pid   329] <... close resumed>)        = 0
[pid   328] <... write resumed>)        = 4
[pid   323] <... close resumed>)        = 0
[pid   330] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   329] write(1, "executing program\n", 18 <unfinished ...>
[pid   328] close(3 <unfinished ...>
executing program
[pid   323] write(1, "executing program\n", 18 <unfinished ...>
[pid   317] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   330] <... prctl resumed>)        = 0
[pid   329] <... write resumed>)        = 18
[pid   328] <... close resumed>)        = 0
[pid   323] <... write resumed>)        = 18
executing program
[pid   328] write(1, "executing program\n", 18) = 18
executing program
[pid   328] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists)
[pid   328] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   328] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 <unfinished ...>
[pid   330] setpgid(0, 0 <unfinished ...>
[pid   329] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   323] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   330] <... setpgid resumed>)      = 0
[pid   329] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   323] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   329] mount(NULL, "./config", "configfs", 0, NULL <unfinished ...>
[pid   323] mount(NULL, "./config", "configfs", 0, NULL <unfinished ...>
[pid   330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   328] <... mkdirat resumed>)      = 0
[pid   323] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   328] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   330] <... openat resumed>)       = 3
[pid   329] <... mount resumed>)        = -1 EBUSY (Device or resource busy)
[pid   323] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 <unfinished ...>
[pid   330] write(3, "1000", 4 <unfinished ...>
[pid   329] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777 <unfinished ...>
[pid   330] <... write resumed>)        = 4
[pid   330] close(3 <unfinished ...>
[pid   323] <... mkdirat resumed>)      = 0
[pid   328] <... rmdir resumed>)        = 0
[pid   328] exit_group(0)               = ?
[pid   329] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   330] <... close resumed>)        = 0
[pid   330] write(1, "executing program\n", 18) = 18
executing program
[   31.449126][   T36] audit: type=1400 audit(1787689599.500:71): avc:  denied  { create } for  pid=316 comm="syz-executor192" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[   31.470012][   T36] audit: type=1400 audit(1787689599.510:72): avc:  denied  { remove_name } for  pid=316 comm="syz-executor192" name="g1" dev="configfs" ino=2982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   31.493689][   T36] audit: type=1400 audit(1787689599.510:73): avc:  denied  { rmdir } for  pid=316 comm="syz-executor192" name="g1" dev="configfs" ino=2982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[pid   329] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   330] mkdirat(AT_FDCWD, "./config", 0777 <unfinished ...>
[pid   328] +++ exited with 0 +++
[pid   323] rmdir("./config/usb_gadget/g1" <unfinished ...>
[pid   330] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid   318] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   318] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555746dc690) = 331
[pid   318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   330] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[   31.527393][  T329] BUG: scheduling while atomic: syz-executor192/329/0x00000002
[   31.535033][  T329] Modules linked in:
[   31.538999][  T329] CPU: 0 UID: 0 PID: 329 Comm: syz-executor192 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   31.539031][  T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.539055][  T329] Call Trace:
[   31.539061][  T329]  <TASK>
[   31.539068][  T329]  __dump_stack+0x21/0x30
[   31.539101][  T329]  dump_stack_lvl+0x140/0x1c0
[pid   330] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0777ci2-android-6-12-rust/strace-static-x86_64: Process 331 attached
 <unfinished ...>
[pid   331] set_robust_list(0x5555746dc6a0, 24) = 0
[pid   331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   331] setpgid(0, 0)               = 0
[pid   331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   331] write(3, "1000", 4)         = 4
[pid   331] close(3)                    = 0
executing program
[pid   331] write(1, "executing program\n", 18) = 18
[pid   331] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists)
[pid   331] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy)
[   31.539125][  T329]  ? __cfi_dump_stack_lvl+0x10/0x10
[   31.539148][  T329]  dump_stack+0x19/0x20
[   31.539169][  T329]  __schedule_bug+0x12b/0x200
[   31.539187][  T329]  ? find_proxy_task+0x2460/0x2460
[   31.539204][  T329]  ? update_load_avg+0x4f3/0x1980
[   31.539223][  T329]  ? __kernel_text_address+0x11/0x40
[   31.539245][  T329]  ? unwind_get_return_address+0x51/0x90
[   31.539266][  T329]  __schedule+0xb85/0x20b0
[   31.539289][  T329]  ? kvm_sched_clock_read+0x15/0x30
[   31.539306][  T329]  ? sched_clock_noinstr+0xd/0x30
[   31.539321][  T329]  ? __kasan_check_read+0x15/0x20
[   31.539338][  T329]  ? __sched_text_start+0x10/0x10
[   31.539361][  T329]  ? __kasan_check_read+0x15/0x20
[   31.539376][  T329]  ? rwsem_spin_on_owner+0xa4/0x3b0
[   31.539401][  T329]  ? __kasan_check_write+0x18/0x20
[   31.539416][  T329]  ? _raw_spin_lock_irq+0x93/0x120
[   31.539437][  T329]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   31.539459][  T329]  schedule+0xc5/0x240
[   31.539481][  T329]  schedule_preempt_disabled+0x14/0x30
[   31.539504][  T329]  rwsem_down_write_slowpath+0x5c9/0x1b60
[   31.539525][  T329]  ? rwsem_down_read_slowpath+0x14c0/0x14c0
[   31.539543][  T329]  ? try_to_wake_up+0x111a/0x1fd0
[   31.539561][  T329]  ? __kasan_check_write+0x18/0x20
[   31.539576][  T329]  ? wake_q_add_safe+0x29/0x100
[   31.539590][  T329]  ? cpus_share_resources+0xa0/0x130
[   31.539614][  T329]  ? rwsem_mark_wake+0x507/0x770
[   31.539638][  T329]  ? rwsem_read_trylock+0x275/0x5a0
[   31.539661][  T329]  ? wake_up_q+0x10a/0x1c0
[   31.539674][  T329]  ? downgrade_write+0x470/0x470
[   31.539697][  T329]  down_write+0x163/0x2b0
[   31.539714][  T329]  ? __cfi_down_write+0x10/0x10
[   31.539730][  T329]  ? down_read+0x7f/0xe0
[   31.539746][  T329]  ? __cfi_down_read+0x10/0x10
[   31.539763][  T329]  kernfs_remove_by_name_ns+0x8c/0x180
[   31.539811][  T329]  sysfs_unmerge_group+0xd7/0x130
[   31.539836][  T329]  dpm_sysfs_remove+0x7b/0xd0
[   31.539863][  T329]  device_del+0x241/0xcf0
[   31.539893][  T329]  ? __cfi_class_find_device+0x10/0x10
[   31.539916][  T329]  ? __cfi_device_del+0x10/0x10
[   31.539944][  T329]  ? __kasan_check_write+0x18/0x20
[   31.539965][  T329]  ? kobject_put+0x1cc/0x2a0
[   31.539992][  T329]  device_destroy+0xb0/0x100
[   31.540012][  T329]  ? __cfi_device_destroy+0x10/0x10
[   31.540032][  T329]  ? __kasan_check_write+0x18/0x20
[   31.540059][  T329]  android_device_destroy+0x118/0x180
[   31.540083][  T329]  gadgets_drop+0x1d/0x30
[   31.540097][  T329]  ? __cfi_gadgets_drop+0x10/0x10
[   31.540115][  T329]  configfs_rmdir+0x8b7/0x9b0
[   31.540142][  T329]  vfs_rmdir+0x3db/0x560
[   31.540165][  T329]  do_rmdir+0x29a/0x590
[   31.540187][  T329]  ? __cfi_do_rmdir+0x10/0x10
[   31.540209][  T329]  ? __kasan_check_write+0x18/0x20
[   31.540226][  T329]  __x64_sys_rmdir+0x4b/0x60
[   31.540248][  T329]  x64_sys_call+0xaf7/0x2ee0
[   31.540262][  T329]  do_syscall_64+0x57/0xf0
[   31.540283][  T329]  ? clear_bhb_loop+0x50/0xa0
[   31.540299][  T329]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   31.540324][  T329] RIP: 0033:0x7fc5fc89e8b9
[   31.540344][  T329] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[   31.540357][  T329] RSP: 002b:00007ffee752de18 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[   31.540374][  T329] RAX: ffffffffffffffda RBX: 0031672f74656764 RCX: 00007fc5fc89e8b9
[   31.540386][  T329] RDX: ffffffffffffffd8 RSI: 00000000000001ff RDI: 0000200000000600
[   31.540397][  T329] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009
[   31.540407][  T329] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000007a7f
[   31.540416][  T329] R13: 00007ffee752de2c R14: 00007ffee752de40 R15: 00007ffee752de30
[   31.540430][  T329]  </TASK>
[   31.939599][  T329] BUG: scheduling while atomic: syz-executor192/329/0x00000000
[   31.947562][  T329] Modules linked in:
[   31.952006][  T329] CPU: 1 UID: 0 PID: 329 Comm: syz-executor192 Tainted: G        W          syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   31.952044][  T329] Tainted: [W]=WARN
[   31.952051][  T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   31.952064][  T329] Call Trace:
[   31.952070][  T329]  <TASK>
[   31.952084][  T329]  __dump_stack+0x21/0x30
[   31.952113][  T329]  dump_stack_lvl+0x140/0x1c0
[   31.952135][  T329]  ? __cfi_dump_stack_lvl+0x10/0x10
[   31.952159][  T329]  dump_stack+0x19/0x20
[   31.952179][  T329]  __schedule_bug+0x12b/0x200
[   31.952197][  T329]  ? find_proxy_task+0x2460/0x2460
[   31.952215][  T329]  __schedule+0xb85/0x20b0
[   31.952238][  T329]  ? __wake_up_sync_key+0x1be/0x2c0
[   31.952257][  T329]  ? __cfi___wake_up_sync_key+0x10/0x10
[   31.952275][  T329]  ? __sched_text_start+0x10/0x10
[   31.952299][  T329]  ? __kasan_check_write+0x18/0x20
[   31.952315][  T329]  ? _raw_spin_lock_irq+0x93/0x120
[   31.952336][  T329]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[   31.952358][  T329]  ? __kasan_check_read+0x15/0x20
[   31.952372][  T329]  ? cgroup_update_frozen+0x160/0x980
[   31.952394][  T329]  schedule+0xc5/0x240
[   31.952416][  T329]  ptrace_stop+0x528/0x8f0
[   31.952435][  T329]  ptrace_notify+0x1de/0x290
[   31.952456][  T329]  ? __cfi_ptrace_notify+0x10/0x10
[   31.952484][  T329]  ? __cfi_do_rmdir+0x10/0x10
[   31.952507][  T329]  ? __kasan_check_write+0x18/0x20
[   31.952523][  T329]  syscall_exit_work+0x84/0x150
[   31.952537][  T329]  syscall_exit_to_user_mode_prepare+0x21/0x40
[   31.952553][  T329]  syscall_exit_to_user_mode+0x15/0xb0
[   31.952571][  T329]  do_syscall_64+0x63/0xf0
[   31.952592][  T329]  ? clear_bhb_loop+0x50/0xa0
[   31.952608][  T329]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   31.952633][  T329] RIP: 0033:0x7fc5fc89e8b9
[   31.952647][  T329] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[   31.952660][  T329] RSP: 002b:00007ffee752de18 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[   31.952677][  T329] RAX: 0000000000000000 RBX: 0031672f74656764 RCX: 00007fc5fc89e8b9
[   31.952688][  T329] RDX: ffffffffffffffd8 RSI: 00000000000001ff RDI: 0000200000000600
[   31.952699][  T329] RBP: 00000000000f4240 R08: 0000000000000009 R09: 0000000000000009
[   31.952708][  T329] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000007a7f
[   31.952718][  T329] R13: 00007ffee752de2c R14: 00007ffee752de40 R15: 00007ffee752de30
[   31.952731][  T329]  </TASK>
[   31.952799][    T0] Oops: general protection fault, probably for non-canonical address 0xdfff8481f6e50680: 0000 [#1] PREEMPT SMP KASAN PTI
[   32.209702][    T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/0 Tainted: G        W          syzkaller #0 2456bfd0916d80188827445f664284f1a044436b
[   32.222402][    T0] Tainted: [W]=WARN
[   32.226206][    T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   32.236452][    T0] RIP: 0010:__schedule+0x149e/0x20b0
[   32.241769][    T0] Code: e8 67 f8 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 9a 42 64 fb 48 89 c7 e8 82 50 b7 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36
[   32.261478][    T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046
[   32.267576][    T0] RAX: ffff8881217e0000 RBX: ffffffff87415c90 RCX: ffffffff874156c0
[   32.275574][    T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   32.283546][    T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8
[   32.291907][    T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670
[   32.299901][    T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0
[   32.307892][    T0] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   32.316846][    T0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   32.323533][    T0] CR2: 0000200000000000 CR3: 000000012ad8c000 CR4: 00000000003526b0
[   32.331606][    T0] Call Trace:
[   32.334914][    T0]  <TASK>
[   32.337852][    T0]  ? __kasan_check_read+0x15/0x20
[   32.342907][    T0]  ? ct_nmi_enter+0x9a/0xe0
[   32.347525][    T0]  ? ct_irq_enter+0xd/0x20
[   32.351964][    T0]  ? irqentry_enter+0x2c/0x40
[   32.356646][    T0]  ? sysvec_apic_timer_interrupt+0x13/0x90
[   32.362491][    T0]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[   32.368740][    T0]  ? ct_kernel_exit+0x7d/0xb0
[   32.373455][    T0]  ? pv_native_safe_halt+0x13/0x20
[   32.378601][    T0]  ? default_idle+0x17/0x30
[   32.383148][    T0]  ? arch_cpu_idle+0xd/0x20
[   32.387687][    T0]  ? default_idle_call+0x3e/0x80
[   32.392637][    T0]  ? do_idle+0x2fc/0x570
[   32.396982][    T0]  ? idle_inject_timer_fn+0x80/0x80
[   32.402186][    T0]  ? cpu_startup_entry+0x47/0x60
[   32.407126][    T0]  ? rest_init+0x10b/0x130
[   32.411550][    T0]  ? __cfi_x86_late_time_init+0x10/0x10
[   32.417112][    T0]  ? start_kernel+0x462/0x4bb
[   32.421799][    T0]  ? x86_64_start_reservations+0x2e/0x30
[   32.427441][    T0]  ? x86_64_start_kernel+0x6a/0x7b
[   32.432566][    T0]  ? common_startup_64+0x13b/0x157
[   32.437705][    T0]  </TASK>
[   32.440724][    T0] Modules linked in:
[   32.444656][    T0] ---[ end trace 0000000000000000 ]---
[   32.450121][    T0] RIP: 0010:__schedule+0x149e/0x20b0
[   32.455440][    T0] Code: e8 67 f8 3a fc 4c 8b 74 24 18 49 c7 06 00 00 00 00 48 8b 1c 24 48 89 df 48 8b 74 24 08 e8 9a 42 64 fb 48 89 c7 e8 82 50 b7 fb <43> c6 44 2c 10 f8 43 c6 44 2c 0c f8 48 c7 84 24 c0 00 00 00 0e 36
[   32.475077][    T0] RSP: 0018:ffffffff87407be0 EFLAGS: 00010046
[   32.481169][    T0] RAX: ffff8881217e0000 RBX: ffffffff87415c90 RCX: ffffffff874156c0
[   32.489244][    T0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   32.497316][    T0] RBP: ffffffff87407da8 R08: ffffffff874156c7 R09: 1ffffffff0e82ad8
[   32.505308][    T0] R10: dffffc0000000000 R11: fffffbfff0e82ad9 R12: ffff8881f6e50670
[   32.513350][    T0] R13: dffffc0000000000 R14: 1ffffffff0e80f94 R15: ffffffff874156c0
[   32.521335][    T0] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   32.530279][    T0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   32.536885][    T0] CR2: 0000200000000000 CR3: 000000012ad8c000 CR4: 00000000003526b0
[   32.544891][    T0] Kernel panic - not syncing: Fatal exception
[   33.654313][    T0] Shutting down cpus with NMI
[   33.659660][    T0] Kernel Offset: disabled
[   33.664014][    T0] Rebooting in 86400 seconds..