ci2-android-6-12-rust/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-12-rust/syz-executor95452171 <...> [ 6.855713][ T36] audit: type=1400 audit(1790956357.149:58): avc: denied { read } for pid=203 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 16.545849][ T36] audit: type=1400 audit(1790956366.859:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.549900][ T36] audit: type=1400 audit(1790956366.859:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.553030][ T36] audit: type=1400 audit(1790956366.859:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[2364]" dev="pipefs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 16.556635][ T36] audit: type=1400 audit(1790956366.859:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.559271][ T36] audit: type=1400 audit(1790956366.859:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. execve("ci2-android-6-12-rust/syz-executor95452171", ["ci2-android-6-12-rust/syz-executor95452171"], 0x7fff9b3b8770 /* 10 vars */) = 0 brk(NULL) = 0x555565efd000 brk(0x555565efde00) = 0x555565efde00 arch_prctl(ARCH_SET_FS, 0x555565efd480) = 0 set_tid_address(0x555565efd750) = 313 set_robust_list(0x555565efd760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-12-rust/syz-executor95452171", 4096) = 48 getrandom("\x55\x69\x10\xf9\xfb\xbd\x15\xd9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555565efde00 brk(0x555565f1ee00) = 0x555565f1ee00 brk(0x555565f1f000) = 0x555565f1f000 mprotect(0x7f83e7375000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f83e72d09b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f83e72d3a50}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f83e72d09b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f83e72d3a50}, NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 314 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x555565efd760, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 314] mkdirat(AT_FDCWD, "./config", 0777) = 0 [pid 314] mount(NULL, "./config", "configfs", 0, NULL) = 0 [pid 314] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 314] rmdir("./config/usb_gadget/g1") = 0 [pid 314] exit_group(0) = ? [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 316 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 316 attached [pid 316] set_robust_list(0x555565efd760, 24) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 executing program [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] write(1, "executing program\n", 18) = 18 [pid 316] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 316] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 316] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 316] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 316] rmdir("./config/usb_gadget/g1") = 0 [pid 316] exit_group(0) = ? [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 executing program clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 317 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x555565efd760, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 317] setpgid(0, 0) = 0 [pid 317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 317] write(3, "1000", 4) = 4 [pid 317] close(3) = 0 [pid 317] write(1, "executing program\n", 18) = 18 [pid 317] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 317] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 317] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 317] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 317] rmdir("./config/usb_gadget/g1") = 0 [pid 317] exit_group(0) = ? [pid 317] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=317, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 318 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x555565efd760, 24) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] write(1, "executing program\n", 18) = 18 [pid 318] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 318] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 318] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 318] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 318] rmdir("./config/usb_gadget/g1") = 0 [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 26.751521][ T36] audit: type=1400 audit(1790956377.059:64): avc: denied { execmem } for pid=313 comm="syz-executor954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.771499][ T36] audit: type=1400 audit(1790956377.059:65): avc: denied { mounton } for pid=314 comm="syz-executor954" path="/root/config" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 319 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x555565efd760, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 319] setpgid(0, 0) = 0 [pid 319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 319] write(3, "1000", 4) = 4 [pid 319] close(3) = 0 [pid 319] write(1, "executing program\n", 18) = 18 executing program [pid 319] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 319] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 319] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 319] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 319] rmdir("./config/usb_gadget/g1") = 0 [pid 319] exit_group(0) = ? [pid 319] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=319, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 320 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x555565efd760, 24) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] write(1, "executing program\n", 18) = 18 [pid 320] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 320] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 320] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 320] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 320] rmdir("./config/usb_gadget/g1") = 0 [pid 320] exit_group(0) = ? [pid 320] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 321 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x555565efd760, 24) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 321] setpgid(0, 0) = 0 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 321] write(3, "1000", 4) = 4 [pid 321] close(3) = 0 [pid 321] write(1, "executing program\n", 18) = 18 [pid 321] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 321] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 321] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 321] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 321] rmdir("./config/usb_gadget/g1") = 0 [pid 321] exit_group(0) = ? [pid 321] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 322 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 322 attached [pid 322] set_robust_list(0x555565efd760, 24) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 [pid 322] write(1, "executing program\n", 18) = 18 [pid 322] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 322] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 322] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 322] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 322] rmdir("./config/usb_gadget/g1") = 0 [pid 322] exit_group(0) = ? [pid 322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 323 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 26.794963][ T36] audit: type=1400 audit(1790956377.059:66): avc: denied { mount } for pid=314 comm="syz-executor954" name="/" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.819834][ T36] audit: type=1400 audit(1790956377.059:67): avc: denied { search } for pid=314 comm="syz-executor954" name="/" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 ci2-android-6-12-rust/strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x555565efd760, 24) = 0 [pid 323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 323] setpgid(0, 0) = 0 [pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 323] write(3, "1000", 4) = 4 [pid 323] close(3) = 0 [pid 323] write(1, "executing program\n", 18) = 18 [pid 323] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 323] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 323] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) executing program [pid 323] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 323] rmdir("./config/usb_gadget/g1") = 0 [pid 323] exit_group(0) = ? [pid 323] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 324 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x555565efd760, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] write(1, "executing program\n", 18) = 18 executing program [pid 324] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 324] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 324] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 324] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 324] rmdir("./config/usb_gadget/g1") = 0 [pid 324] exit_group(0) = ? [pid 324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 325 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x555565efd760, 24) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 325] setpgid(0, 0) = 0 [pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 325] write(3, "1000", 4) = 4 [pid 325] close(3) = 0 [pid 325] write(1, "executing program\n", 18) = 18 [pid 325] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 325] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 325] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 325] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 325] rmdir("./config/usb_gadget/g1") = 0 [pid 325] exit_group(0) = ? [pid 325] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 326 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x555565efd760, 24) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 executing program [pid 326] write(1, "executing program\n", 18) = 18 [pid 326] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 326] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 326] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 326] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 326] rmdir("./config/usb_gadget/g1") = 0 [pid 326] exit_group(0) = ? [pid 326] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 327 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x555565efd760, 24) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 327] setpgid(0, 0) = 0 [pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 327] write(3, "1000", 4) = 4 [pid 327] close(3) = 0 [pid 327] write(1, "executing program\n", 18) = 18 executing program [pid 327] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 327] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 327] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [ 26.843956][ T36] audit: type=1400 audit(1790956377.059:68): avc: denied { write } for pid=314 comm="syz-executor954" name="usb_gadget" dev="configfs" ino=2124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.868945][ T36] audit: type=1400 audit(1790956377.059:69): avc: denied { add_name } for pid=314 comm="syz-executor954" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [pid 327] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 327] rmdir("./config/usb_gadget/g1") = 0 [pid 327] exit_group(0) = ? [pid 327] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=327, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 328 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x555565efd760, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] write(1, "executing program\n", 18) = 18 [pid 328] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 328] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 328] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 328] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 328] rmdir("./config/usb_gadget/g1") = 0 [pid 328] exit_group(0) = ? [pid 328] +++ exited with 0 +++ executing program --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 329 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x555565efd760, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 executing program [pid 329] write(1, "executing program\n", 18) = 18 [pid 329] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 329] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 329] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 329] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 329] rmdir("./config/usb_gadget/g1") = 0 [pid 329] exit_group(0) = ? [pid 329] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 26.891149][ T36] audit: type=1400 audit(1790956377.059:70): avc: denied { create } for pid=314 comm="syz-executor954" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 26.912677][ T36] audit: type=1400 audit(1790956377.059:71): avc: denied { remove_name } for pid=314 comm="syz-executor954" name="g1" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 330 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x555565efd760, 24) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] write(1, "executing program\n", 18) = 18 executing program [pid 330] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 330] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 330] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 330] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 330] rmdir("./config/usb_gadget/g1") = 0 [pid 330] exit_group(0) = ? [pid 330] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 331 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x555565efd760, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 331] setpgid(0, 0) = 0 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 331] write(3, "1000", 4) = 4 [pid 331] close(3) = 0 [pid 331] write(1, "executing program\n", 18) = 18 [pid 331] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 331] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 331] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) executing program [pid 331] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 331] rmdir("./config/usb_gadget/g1") = 0 [pid 331] exit_group(0) = ? [pid 331] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=331, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x555565efd760, 24 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 332 [pid 332] <... set_robust_list resumed>) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 332] <... openat resumed>) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] write(1, "executing program\n", 18) = 18 [pid 332] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 332] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 332] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 332] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 332] rmdir("./config/usb_gadget/g1") = 0 [pid 332] exit_group(0) = ? [pid 332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x555565efd760, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 333] setpgid(0, 0) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 333 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 333] write(3, "1000", 4) = 4 [pid 333] close(3) = 0 executing program [pid 333] write(1, "executing program\n", 18) = 18 [pid 333] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 333] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 333] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 333] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 333] rmdir("./config/usb_gadget/g1") = 0 [pid 333] exit_group(0) = ? [pid 333] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=333, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 334 attached [pid 334] set_robust_list(0x555565efd760, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 334 [pid 334] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 334] <... openat resumed>) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] write(1, "executing program\n", 18) = 18 executing program [pid 334] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 334] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 334] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 334] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 334] rmdir("./config/usb_gadget/g1") = 0 [pid 334] exit_group(0) = ? [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 335 ci2-android-6-12-rust/strace-static-x86_64: Process 335 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 335] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 335] <... set_robust_list resumed>) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 335] setpgid(0, 0) = 0 [pid 335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 335] write(3, "1000", 4) = 4 [pid 335] close(3) = 0 [pid 335] write(1, "executing program\n", 18) = 18 executing program [pid 335] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 335] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 335] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 335] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 335] rmdir("./config/usb_gadget/g1") = 0 [pid 335] exit_group(0) = ? [pid 335] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=335, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 26.937453][ T36] audit: type=1400 audit(1790956377.059:72): avc: denied { rmdir } for pid=314 comm="syz-executor954" name="g1" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.960208][ T36] audit: type=1400 audit(1790956377.089:73): avc: denied { mounton } for pid=316 comm="syz-executor954" path="/root/config" dev="configfs" ino=2123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 336 ci2-android-6-12-rust/strace-static-x86_64: Process 336 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] set_robust_list(0x555565efd760, 24) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] write(1, "executing program\n", 18) = 18 [pid 336] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 336] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 336] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 336] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 336] rmdir("./config/usb_gadget/g1") = 0 [pid 336] exit_group(0) = ? [pid 336] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 337 [pid 337] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 337] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 337] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 337] setpgid(0, 0) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 337] write(3, "1000", 4) = 4 [pid 337] close(3) = 0 [pid 337] write(1, "executing program\n", 18) = 18 [pid 337] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 337] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 337] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 337] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 337] rmdir("./config/usb_gadget/g1") = 0 [pid 337] exit_group(0) = ? [pid 337] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=337, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 338 attached , child_tidptr=0x555565efd750) = 338 [pid 338] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] <... set_robust_list resumed>) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] write(1, "executing program\n", 18) = 18 executing program [pid 338] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 338] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 338] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 338] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 338] rmdir("./config/usb_gadget/g1") = 0 [pid 338] exit_group(0) = ? [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 339 attached , child_tidptr=0x555565efd750) = 339 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 339] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 339] <... set_robust_list resumed>) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 339] setpgid(0, 0) = 0 [pid 339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 339] write(3, "1000", 4) = 4 [pid 339] close(3) = 0 [pid 339] write(1, "executing program\n", 18) = 18 [pid 339] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 339] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 339] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 339] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 339] rmdir("./config/usb_gadget/g1") = 0 [pid 339] exit_group(0) = ? [pid 339] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=339, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 340 ci2-android-6-12-rust/strace-static-x86_64: Process 340 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] set_robust_list(0x555565efd760, 24) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] write(1, "executing program\n", 18) = 18 executing program [pid 340] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 340] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 340] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 340] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 340] rmdir("./config/usb_gadget/g1") = 0 [pid 340] exit_group(0) = ? [pid 340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 341 [pid 341] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 341] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 341] write(1, "executing program\n", 18) = 18 executing program [pid 341] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 341] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 341] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 341] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 341] rmdir("./config/usb_gadget/g1") = 0 [pid 341] exit_group(0) = ? [pid 341] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=341, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 342 ci2-android-6-12-rust/strace-static-x86_64: Process 342 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] set_robust_list(0x555565efd760, 24) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 342] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 342] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 342] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 342] rmdir("./config/usb_gadget/g1") = 0 [pid 342] exit_group(0) = ? [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 343 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-12-rust/strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x555565efd760, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 343] setpgid(0, 0) = 0 [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 343] write(3, "1000", 4) = 4 [pid 343] close(3) = 0 [pid 343] write(1, "executing program\n", 18) = 18 executing program [pid 343] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 343] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 343] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 343] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 343] rmdir("./config/usb_gadget/g1") = 0 [pid 343] exit_group(0) = ? [pid 343] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=343, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 344 ci2-android-6-12-rust/strace-static-x86_64: Process 344 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 344] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 344] <... set_robust_list resumed>) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] write(1, "executing program\n", 18) = 18 executing program [pid 344] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 344] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 344] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 344] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 27.133819][ T344] BUG: scheduling while atomic: syz-executor954/344/0x00000002 [ 27.141489][ T344] Modules linked in: [ 27.145508][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz-executor954 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 27.145533][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.145551][ T344] Call Trace: [ 27.145557][ T344] [ 27.145563][ T344] __dump_stack+0x21/0x30 [ 27.145600][ T344] dump_stack_lvl+0x140/0x1c0 [ 27.145623][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.145648][ T344] dump_stack+0x19/0x20 [ 27.145671][ T344] __schedule_bug+0x12b/0x200 [ 27.145691][ T344] ? find_proxy_task+0x2460/0x2460 [ 27.145711][ T344] ? update_load_avg+0x4f3/0x1980 [ 27.145736][ T344] ? __kernel_text_address+0x11/0x40 [ 27.145837][ T344] ? unwind_get_return_address+0x51/0x90 [ 27.145906][ T344] __schedule+0xb85/0x20b0 [ 27.145928][ T344] ? kvm_sched_clock_read+0x15/0x30 [ 27.145949][ T344] ? sched_clock_noinstr+0xd/0x30 [ 27.145971][ T344] ? __kasan_check_read+0x15/0x20 [ 27.145990][ T344] ? __sched_text_start+0x10/0x10 [ 27.146010][ T344] ? __kasan_check_read+0x15/0x20 [ 27.146028][ T344] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 27.146046][ T344] ? __kasan_check_write+0x18/0x20 [ 27.146065][ T344] ? _raw_spin_lock_irq+0x93/0x120 [ 27.146086][ T344] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 27.146106][ T344] schedule+0xc5/0x240 [ 27.146126][ T344] schedule_preempt_disabled+0x14/0x30 [ 27.146147][ T344] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 27.146174][ T344] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 27.146200][ T344] ? try_to_wake_up+0x111a/0x1fd0 [ 27.146223][ T344] ? __kasan_check_write+0x18/0x20 [ 27.146243][ T344] ? wake_q_add_safe+0x29/0x100 [ 27.146261][ T344] ? __cfi_try_to_wake_up+0x10/0x10 [ 27.146282][ T344] ? rwsem_mark_wake+0x507/0x770 [ 27.146310][ T344] ? rwsem_read_trylock+0x275/0x5a0 [ 27.146337][ T344] ? wake_up_q+0x10a/0x1c0 [ 27.146355][ T344] ? downgrade_write+0x470/0x470 [ 27.146395][ T344] down_write+0x163/0x2b0 [ 27.146421][ T344] ? __cfi_down_write+0x10/0x10 [ 27.146448][ T344] ? down_read+0x7f/0xe0 [ 27.146472][ T344] ? __cfi_down_read+0x10/0x10 [ 27.146497][ T344] kernfs_remove_by_name_ns+0x8c/0x180 [ 27.146524][ T344] sysfs_unmerge_group+0xd7/0x130 [ 27.146547][ T344] dpm_sysfs_remove+0x7b/0xd0 [ 27.146574][ T344] device_del+0x241/0xcf0 [ 27.146592][ T344] ? __cfi_class_find_device+0x10/0x10 [ 27.146615][ T344] ? __cfi_device_del+0x10/0x10 [ 27.146634][ T344] ? __kasan_check_write+0x18/0x20 [ 27.146655][ T344] ? kobject_put+0x1cc/0x2a0 [ 27.146676][ T344] device_destroy+0xb0/0x100 [ 27.146696][ T344] ? __cfi_device_destroy+0x10/0x10 [ 27.146716][ T344] ? __kasan_check_write+0x18/0x20 [ 27.146740][ T344] android_device_destroy+0x118/0x180 [ 27.146768][ T344] gadgets_drop+0x1d/0x30 [ 27.146787][ T344] ? __cfi_gadgets_drop+0x10/0x10 [ 27.146806][ T344] configfs_rmdir+0x8ba/0x9b0 [ 27.146832][ T344] vfs_rmdir+0x3de/0x560 [ 27.146873][ T344] do_rmdir+0x29a/0x590 [ 27.146899][ T344] ? __cfi_do_rmdir+0x10/0x10 [ 27.146925][ T344] ? __kasan_check_write+0x18/0x20 [ 27.146946][ T344] __x64_sys_rmdir+0x4b/0x60 [ 27.146972][ T344] x64_sys_call+0xaf7/0x2ee0 [ 27.146990][ T344] do_syscall_64+0x57/0xf0 [ 27.147010][ T344] ? clear_bhb_loop+0x50/0xa0 [ 27.147035][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.147065][ T344] RIP: 0033:0x7f83e72e3749 [ 27.147095][ T344] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 27.147111][ T344] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 27.147132][ T344] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 27.147146][ T344] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 27.147160][ T344] RBP: 00000000000069d5 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 27.147174][ T344] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 27.147188][ T344] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 27.147204][ T344] [ 27.147523][ T344] BUG: scheduling while atomic: syz-executor954/344/0x00000000 [ 27.559222][ T344] Modules linked in: [ 27.563131][ T344] CPU: 0 UID: 0 PID: 344 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 27.563163][ T344] Tainted: [W]=WARN [ 27.563170][ T344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.563181][ T344] Call Trace: [ 27.563225][ T344] [ 27.563234][ T344] __dump_stack+0x21/0x30 [ 27.563264][ T344] dump_stack_lvl+0x140/0x1c0 [ 27.563289][ T344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.563315][ T344] dump_stack+0x19/0x20 [ 27.563405][ T344] __schedule_bug+0x12b/0x200 [ 27.563424][ T344] ? find_proxy_task+0x2460/0x2460 [ 27.563443][ T344] __schedule+0xb85/0x20b0 [ 27.563465][ T344] ? __wake_up_sync_key+0x1be/0x2c0 [ 27.563488][ T344] ? __cfi___wake_up_sync_key+0x10/0x10 [ 27.563509][ T344] ? __sched_text_start+0x10/0x10 [ 27.563530][ T344] ? __kasan_check_write+0x18/0x20 [ 27.563549][ T344] ? _raw_spin_lock_irq+0x93/0x120 [ 27.563569][ T344] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 27.563587][ T344] ? __kasan_check_read+0x15/0x20 [ 27.563607][ T344] ? cgroup_update_frozen+0x160/0x980 [ 27.563632][ T344] schedule+0xc5/0x240 [ 27.563652][ T344] ptrace_stop+0x528/0x8f0 [ 27.563675][ T344] ptrace_notify+0x1de/0x290 [ 27.563700][ T344] ? __cfi_ptrace_notify+0x10/0x10 [ 27.563725][ T344] ? __cfi_do_rmdir+0x10/0x10 [ 27.563752][ T344] ? __kasan_check_write+0x18/0x20 [ 27.563772][ T344] syscall_exit_work+0x84/0x150 [ 27.563791][ T344] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 27.563810][ T344] syscall_exit_to_user_mode+0x15/0xb0 [ 27.563833][ T344] do_syscall_64+0x63/0xf0 [ 27.563850][ T344] ? clear_bhb_loop+0x50/0xa0 [ 27.563875][ T344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.563898][ T344] RIP: 0033:0x7f83e72e3749 [ 27.563916][ T344] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 27.563932][ T344] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 27.563954][ T344] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 27.563967][ T344] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [pid 344] rmdir("./config/usb_gadget/g1") = 0 [pid 344] exit_group(0) = ? [pid 344] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 345 attached , child_tidptr=0x555565efd750) = 345 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] set_robust_list(0x555565efd760, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 345] setpgid(0, 0) = 0 [pid 345] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 345] write(3, "1000", 4) = 4 [pid 345] close(3) = 0 [pid 345] write(1, "executing program\n", 18) = 18 executing program [pid 345] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 345] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 345] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 345] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 345] rmdir("./config/usb_gadget/g1") = 0 [pid 345] exit_group(0) = ? [pid 345] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=345, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 346 ci2-android-6-12-rust/strace-static-x86_64: Process 346 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] set_robust_list(0x555565efd760, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] write(1, "executing program\n", 18) = 18 executing program [pid 346] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 346] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 346] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 346] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 346] rmdir("./config/usb_gadget/g1") = 0 [pid 346] exit_group(0) = ? [pid 346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 347 attached , child_tidptr=0x555565efd750) = 347 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 347] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 347] <... set_robust_list resumed>) = 0 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 347] setpgid(0, 0) = 0 [pid 347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 347] write(3, "1000", 4) = 4 [pid 347] close(3) = 0 [pid 347] write(1, "executing program\n", 18) = 18 executing program [pid 347] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 347] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 347] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 347] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 27.563982][ T344] RBP: 00000000000069d5 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 27.563995][ T344] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 27.564010][ T344] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 27.564026][ T344] [ 27.851637][ T347] BUG: scheduling while atomic: syz-executor954/347/0x00000002 [ 27.859218][ T347] Modules linked in: [ 27.863109][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 27.863129][ T347] Tainted: [W]=WARN [ 27.863132][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.863139][ T347] Call Trace: [ 27.863144][ T347] [ 27.863150][ T347] __dump_stack+0x21/0x30 [ 27.863170][ T347] dump_stack_lvl+0x140/0x1c0 [ 27.863185][ T347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.863200][ T347] ? stack_trace_save+0xaa/0x100 [ 27.863213][ T347] dump_stack+0x19/0x20 [ 27.863226][ T347] __schedule_bug+0x12b/0x200 [ 27.863239][ T347] ? find_proxy_task+0x2460/0x2460 [ 27.863250][ T347] ? kasan_save_stack+0x4d/0x60 [ 27.863263][ T347] ? kasan_save_stack+0x3e/0x60 [ 27.863274][ T347] ? __kasan_record_aux_stack+0xb2/0xd0 [ 27.863284][ T347] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 27.863294][ T347] ? call_rcu+0x14/0x20 [ 27.863305][ T347] ? kernfs_put+0x1de/0x360 [ 27.863324][ T347] ? kernfs_remove_by_name_ns+0x108/0x180 [ 27.863338][ T347] ? sysfs_delete_link+0x10f/0x140 [ 27.863350][ T347] __schedule+0xb85/0x20b0 [ 27.863362][ T347] ? __kasan_check_write+0x18/0x20 [ 27.863373][ T347] ? _raw_spin_trylock+0xb5/0x140 [ 27.863383][ T347] ? __cfi__raw_spin_trylock+0x10/0x10 [ 27.863394][ T347] ? _raw_spin_unlock+0x45/0x60 [ 27.863405][ T347] ? __sched_text_start+0x10/0x10 [ 27.863416][ T347] ? __kasan_check_write+0x18/0x20 [ 27.863426][ T347] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 27.863437][ T347] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 27.863448][ T347] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 27.863459][ T347] schedule+0xc5/0x240 [ 27.863470][ T347] kernfs_drain+0x278/0x420 [ 27.863485][ T347] ? kernfs_show+0x280/0x280 [ 27.863499][ T347] ? __cfi_autoremove_wake_function+0x10/0x10 [ 27.863510][ T347] ? __cfi_down_write+0x10/0x10 [ 27.863525][ T347] __kernfs_remove+0x402/0x940 [ 27.863540][ T347] kernfs_remove_by_name_ns+0x100/0x180 [ 27.863555][ T347] sysfs_remove_file_ns+0x68/0x80 [ 27.863565][ T347] device_del+0x56c/0xcf0 [ 27.863575][ T347] ? __cfi_device_del+0x10/0x10 [ 27.863585][ T347] ? __kasan_check_write+0x18/0x20 [ 27.863595][ T347] ? kobject_put+0x1cc/0x2a0 [ 27.863606][ T347] device_destroy+0xb0/0x100 [ 27.863616][ T347] ? __cfi_device_destroy+0x10/0x10 [ 27.863626][ T347] ? __kasan_check_write+0x18/0x20 [ 27.863637][ T347] android_device_destroy+0x118/0x180 [ 27.863653][ T347] gadgets_drop+0x1d/0x30 [ 27.863664][ T347] ? __cfi_gadgets_drop+0x10/0x10 [ 27.863674][ T347] configfs_rmdir+0x8ba/0x9b0 [ 27.863689][ T347] vfs_rmdir+0x3de/0x560 [ 27.863705][ T347] do_rmdir+0x29a/0x590 [ 27.863719][ T347] ? __cfi_do_rmdir+0x10/0x10 [ 27.863734][ T347] ? __kasan_check_write+0x18/0x20 [ 27.863745][ T347] __x64_sys_rmdir+0x4b/0x60 [ 27.863759][ T347] x64_sys_call+0xaf7/0x2ee0 [ 27.863769][ T347] do_syscall_64+0x57/0xf0 [ 27.863780][ T347] ? clear_bhb_loop+0x50/0xa0 [ 27.863794][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.863808][ T347] RIP: 0033:0x7f83e72e3749 [ 27.863818][ T347] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 27.863827][ T347] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 27.863839][ T347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [pid 347] rmdir("./config/usb_gadget/g1") = 0 [pid 347] exit_group(0) = ? [pid 347] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=347, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 27.863847][ T347] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 27.863855][ T347] RBP: 0000000000006ca2 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 27.863862][ T347] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 27.863869][ T347] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 27.863878][ T347] [ 28.234149][ T347] BUG: scheduling while atomic: syz-executor954/347/0x00000000 [ 28.241887][ T347] Modules linked in: [ 28.245845][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 28.245874][ T347] Tainted: [W]=WARN [ 28.245880][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.245890][ T347] Call Trace: [ 28.245896][ T347] [ 28.245902][ T347] __dump_stack+0x21/0x30 [ 28.245931][ T347] dump_stack_lvl+0x140/0x1c0 [ 28.245955][ T347] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.245982][ T347] dump_stack+0x19/0x20 [ 28.246004][ T347] __schedule_bug+0x12b/0x200 [ 28.246025][ T347] ? find_proxy_task+0x2460/0x2460 [ 28.246046][ T347] __schedule+0xb85/0x20b0 [ 28.246067][ T347] ? __wake_up_sync_key+0x1be/0x2c0 [ 28.246090][ T347] ? __cfi___wake_up_sync_key+0x10/0x10 [ 28.246112][ T347] ? __sched_text_start+0x10/0x10 [ 28.246132][ T347] ? __kasan_check_write+0x18/0x20 [ 28.246152][ T347] ? _raw_spin_lock_irq+0x93/0x120 [ 28.246170][ T347] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.246189][ T347] ? __kasan_check_read+0x15/0x20 [ 28.246207][ T347] ? cgroup_update_frozen+0x160/0x980 [ 28.246232][ T347] schedule+0xc5/0x240 [ 28.246252][ T347] ptrace_stop+0x528/0x8f0 [ 28.246273][ T347] ptrace_notify+0x1de/0x290 [ 28.246297][ T347] ? __cfi_ptrace_notify+0x10/0x10 [ 28.246321][ T347] ? __cfi_do_rmdir+0x10/0x10 [ 28.246347][ T347] ? __kasan_check_write+0x18/0x20 [ 28.246366][ T347] syscall_exit_work+0x84/0x150 [ 28.246384][ T347] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 28.246409][ T347] syscall_exit_to_user_mode+0x15/0xb0 [ 28.246434][ T347] do_syscall_64+0x63/0xf0 [ 28.246452][ T347] ? clear_bhb_loop+0x50/0xa0 [ 28.246476][ T347] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.246498][ T347] RIP: 0033:0x7f83e72e3749 [ 28.246515][ T347] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 28.246531][ T347] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 348 ci2-android-6-12-rust/strace-static-x86_64: Process 348 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] set_robust_list(0x555565efd760, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 executing program [pid 348] write(1, "executing program\n", 18) = 18 [pid 348] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 348] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 348] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 348] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 348] rmdir("./config/usb_gadget/g1") = 0 [pid 348] exit_group(0) = ? [pid 348] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 349 ci2-android-6-12-rust/strace-static-x86_64: Process 349 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 349] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 349] <... set_robust_list resumed>) = 0 [pid 349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 executing program [pid 349] write(1, "executing program\n", 18) = 18 [pid 349] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 349] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 349] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 349] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 349] rmdir("./config/usb_gadget/g1") = 0 [pid 349] exit_group(0) = ? [pid 349] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=349, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 350 attached , child_tidptr=0x555565efd750) = 350 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 350] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] <... set_robust_list resumed>) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4) = 4 [pid 350] close(3) = 0 [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 350] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 350] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 350] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 350] rmdir("./config/usb_gadget/g1") = 0 [pid 350] exit_group(0) = ? [pid 350] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 351 attached , child_tidptr=0x555565efd750) = 351 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 351] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 351] <... set_robust_list resumed>) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 28.246550][ T347] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 28.246563][ T347] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 28.246577][ T347] RBP: 0000000000006ca2 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 28.246590][ T347] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 28.246603][ T347] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 28.246619][ T347] [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 [pid 351] write(1, "executing program\n", 18) = 18 executing program [pid 351] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 351] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 351] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 351] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 351] rmdir("./config/usb_gadget/g1") = 0 [pid 351] exit_group(0) = ? [pid 351] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=351, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 352 attached , child_tidptr=0x555565efd750) = 352 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 352] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 352] <... set_robust_list resumed>) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] write(1, "executing program\n", 18) = 18 executing program [pid 352] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 352] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 352] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 352] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 352] rmdir("./config/usb_gadget/g1") = 0 [pid 352] exit_group(0) = ? [pid 352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 353 attached , child_tidptr=0x555565efd750) = 353 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] set_robust_list(0x555565efd760, 24) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 353] setpgid(0, 0) = 0 [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 353] write(3, "1000", 4) = 4 [pid 353] close(3) = 0 executing program [pid 353] write(1, "executing program\n", 18) = 18 [pid 353] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 353] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 353] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 353] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 353] rmdir("./config/usb_gadget/g1") = 0 [pid 353] exit_group(0) = ? [pid 353] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=353, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 354 attached , child_tidptr=0x555565efd750) = 354 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 354] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 354] <... set_robust_list resumed>) = 0 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 executing program [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 354] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 354] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 354] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 354] rmdir("./config/usb_gadget/g1") = 0 [pid 354] exit_group(0) = ? [pid 354] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=354, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 355 attached , child_tidptr=0x555565efd750) = 355 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] set_robust_list(0x555565efd760, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 executing program [pid 355] write(1, "executing program\n", 18) = 18 [pid 355] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 355] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 355] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 355] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 355] rmdir("./config/usb_gadget/g1") = 0 [pid 355] exit_group(0) = ? [pid 355] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=355, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 356 attached , child_tidptr=0x555565efd750) = 356 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] set_robust_list(0x555565efd760, 24) = 0 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 executing program [pid 356] write(1, "executing program\n", 18) = 18 [pid 356] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 356] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 356] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 356] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 356] rmdir("./config/usb_gadget/g1") = 0 [pid 356] exit_group(0) = ? [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 357 ci2-android-6-12-rust/strace-static-x86_64: Process 357 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] set_robust_list(0x555565efd760, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 357] write(3, "1000", 4) = 4 [pid 357] close(3) = 0 [pid 357] write(1, "executing program\n", 18) = 18 executing program [pid 357] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 357] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 357] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 357] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 28.608335][ T357] BUG: scheduling while atomic: syz-executor954/357/0x00000002 [ 28.615945][ T357] Modules linked in: [ 28.619908][ T357] CPU: 0 UID: 0 PID: 357 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 28.619938][ T357] Tainted: [W]=WARN [ 28.619943][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.619953][ T357] Call Trace: [ 28.619959][ T357] [ 28.619966][ T357] __dump_stack+0x21/0x30 [ 28.619997][ T357] dump_stack_lvl+0x140/0x1c0 [ 28.620014][ T357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.620030][ T357] dump_stack+0x19/0x20 [ 28.620043][ T357] __schedule_bug+0x12b/0x200 [ 28.620056][ T357] ? find_proxy_task+0x2460/0x2460 [ 28.620067][ T357] ? update_load_avg+0x4f3/0x1980 [ 28.620081][ T357] ? __kernel_text_address+0x11/0x40 [ 28.620096][ T357] ? unwind_get_return_address+0x51/0x90 [ 28.620110][ T357] __schedule+0xb85/0x20b0 [ 28.620123][ T357] ? kvm_sched_clock_read+0x15/0x30 [ 28.620137][ T357] ? sched_clock_noinstr+0xd/0x30 [ 28.620153][ T357] ? __kasan_check_read+0x15/0x20 [ 28.620164][ T357] ? __sched_text_start+0x10/0x10 [ 28.620176][ T357] ? __kasan_check_read+0x15/0x20 [ 28.620186][ T357] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 28.620196][ T357] ? __kasan_check_write+0x18/0x20 [ 28.620206][ T357] ? _raw_spin_lock_irq+0x93/0x120 [ 28.620217][ T357] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.620228][ T357] schedule+0xc5/0x240 [ 28.620239][ T357] schedule_preempt_disabled+0x14/0x30 [ 28.620252][ T357] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 28.620268][ T357] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 28.620283][ T357] ? try_to_wake_up+0x111a/0x1fd0 [ 28.620296][ T357] ? __kasan_check_write+0x18/0x20 [ 28.620306][ T357] ? wake_q_add_safe+0x29/0x100 [ 28.620316][ T357] ? __cfi_try_to_wake_up+0x10/0x10 [ 28.620327][ T357] ? rwsem_mark_wake+0x507/0x770 [ 28.620344][ T357] ? rwsem_read_trylock+0x275/0x5a0 [ 28.620359][ T357] ? wake_up_q+0x10a/0x1c0 [ 28.620368][ T357] ? downgrade_write+0x470/0x470 [ 28.620383][ T357] down_write+0x163/0x2b0 [ 28.620397][ T357] ? __cfi_down_write+0x10/0x10 [ 28.620411][ T357] ? down_read+0x7f/0xe0 [ 28.620424][ T357] ? __cfi_down_read+0x10/0x10 [ 28.620438][ T357] kernfs_remove_by_name_ns+0x8c/0x180 [ 28.620454][ T357] sysfs_unmerge_group+0xd7/0x130 [ 28.620467][ T357] dpm_sysfs_remove+0x7b/0xd0 [ 28.620482][ T357] device_del+0x241/0xcf0 [ 28.620492][ T357] ? __cfi_class_find_device+0x10/0x10 [ 28.620505][ T357] ? __cfi_device_del+0x10/0x10 [ 28.620514][ T357] ? __kasan_check_write+0x18/0x20 [ 28.620524][ T357] ? kobject_put+0x1cc/0x2a0 [ 28.620535][ T357] device_destroy+0xb0/0x100 [ 28.620545][ T357] ? __cfi_device_destroy+0x10/0x10 [ 28.620555][ T357] ? __kasan_check_write+0x18/0x20 [ 28.620566][ T357] android_device_destroy+0x118/0x180 [ 28.620582][ T357] gadgets_drop+0x1d/0x30 [ 28.620593][ T357] ? __cfi_gadgets_drop+0x10/0x10 [ 28.620604][ T357] configfs_rmdir+0x8ba/0x9b0 [ 28.620618][ T357] vfs_rmdir+0x3de/0x560 [ 28.620634][ T357] do_rmdir+0x29a/0x590 [ 28.620671][ T357] ? __cfi_do_rmdir+0x10/0x10 [ 28.620686][ T357] ? __kasan_check_write+0x18/0x20 [ 28.620697][ T357] __x64_sys_rmdir+0x4b/0x60 [ 28.620711][ T357] x64_sys_call+0xaf7/0x2ee0 [ 28.620721][ T357] do_syscall_64+0x57/0xf0 [ 28.620731][ T357] ? clear_bhb_loop+0x50/0xa0 [ 28.620745][ T357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.620759][ T357] RIP: 0033:0x7f83e72e3749 [ 28.620770][ T357] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 28.620779][ T357] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 28.620791][ T357] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 28.620799][ T357] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 28.620807][ T357] RBP: 0000000000006f9a R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 28.620814][ T357] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 28.620821][ T357] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 28.620831][ T357] [ 28.621159][ T357] BUG: scheduling while atomic: syz-executor954/357/0x00000000 [ 29.028761][ T357] Modules linked in: [ 29.032666][ T357] CPU: 1 UID: 0 PID: 357 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 29.032722][ T357] Tainted: [W]=WARN [ 29.032726][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.032735][ T357] Call Trace: [ 29.032739][ T357] [ 29.032745][ T357] __dump_stack+0x21/0x30 [ 29.032765][ T357] dump_stack_lvl+0x140/0x1c0 [ 29.032780][ T357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.032796][ T357] dump_stack+0x19/0x20 [ 29.032810][ T357] __schedule_bug+0x12b/0x200 [ 29.032822][ T357] ? find_proxy_task+0x2460/0x2460 [ 29.032835][ T357] __schedule+0xb85/0x20b0 [ 29.032847][ T357] ? __wake_up_sync_key+0x1be/0x2c0 [ 29.032861][ T357] ? __cfi___wake_up_sync_key+0x10/0x10 [ 29.032873][ T357] ? __sched_text_start+0x10/0x10 [ 29.032885][ T357] ? __kasan_check_write+0x18/0x20 [ 29.032896][ T357] ? _raw_spin_lock_irq+0x93/0x120 [ 29.032907][ T357] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.032917][ T357] ? __kasan_check_read+0x15/0x20 [ 29.032927][ T357] ? cgroup_update_frozen+0x160/0x980 [ 29.032942][ T357] schedule+0xc5/0x240 [ 29.032954][ T357] ptrace_stop+0x528/0x8f0 [ 29.032967][ T357] ptrace_notify+0x1de/0x290 [ 29.032981][ T357] ? __cfi_ptrace_notify+0x10/0x10 [ 29.032995][ T357] ? __cfi_do_rmdir+0x10/0x10 [ 29.033011][ T357] ? __kasan_check_write+0x18/0x20 [ 29.033022][ T357] syscall_exit_work+0x84/0x150 [ 29.033042][ T357] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 29.033053][ T357] syscall_exit_to_user_mode+0x15/0xb0 [ 29.033068][ T357] do_syscall_64+0x63/0xf0 [ 29.033078][ T357] ? clear_bhb_loop+0x50/0xa0 [ 29.033093][ T357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.033106][ T357] RIP: 0033:0x7f83e72e3749 [ 29.033117][ T357] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 29.033126][ T357] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.033138][ T357] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 29.033146][ T357] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 29.033154][ T357] RBP: 0000000000006f9a R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [pid 357] rmdir("./config/usb_gadget/g1") = 0 [pid 357] exit_group(0) = ? [pid 357] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=357, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 358 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 358] <... prctl resumed>) = 0 [pid 358] setpgid(0, 0) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 358] write(3, "1000", 4) = 4 [pid 358] close(3) = 0 [pid 358] write(1, "executing program\n", 18) = 18 [pid 358] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 358] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 358] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 358] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 358] rmdir("./config/usb_gadget/g1") = 0 [pid 358] exit_group(0) = ? [pid 358] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=358, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 359 attached , child_tidptr=0x555565efd750) = 359 [pid 359] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] <... set_robust_list resumed>) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] write(1, "executing program\n", 18) = 18 executing program [pid 359] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 359] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 359] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 359] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 359] rmdir("./config/usb_gadget/g1") = 0 [pid 359] exit_group(0) = ? [pid 359] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=359, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 360 attached , child_tidptr=0x555565efd750) = 360 [pid 360] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] <... set_robust_list resumed>) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] write(1, "executing program\n", 18) = 18 executing program [pid 360] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 360] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 360] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 360] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 360] rmdir("./config/usb_gadget/g1") = 0 [pid 360] exit_group(0) = ? [pid 360] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=360, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 29.033161][ T357] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 29.033168][ T357] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 29.033179][ T357] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 361 [pid 361] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3) = 0 [pid 361] write(1, "executing program\n", 18) = 18 executing program [pid 361] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 361] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 361] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 361] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 361] rmdir("./config/usb_gadget/g1") = 0 [pid 361] exit_group(0) = ? [pid 361] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=361, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 362 ci2-android-6-12-rust/strace-static-x86_64: Process 362 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 362] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 362] <... set_robust_list resumed>) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 executing program [pid 362] write(1, "executing program\n", 18) = 18 [pid 362] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 362] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 362] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 362] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 362] rmdir("./config/usb_gadget/g1") = 0 [pid 362] exit_group(0) = ? [pid 362] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 363 [pid 363] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 363] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] write(1, "executing program\n", 18) = 18 executing program [pid 363] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 363] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 363] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 363] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 363] rmdir("./config/usb_gadget/g1") = 0 [pid 363] exit_group(0) = ? [pid 363] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=363, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 364 [pid 364] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 364] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] write(1, "executing program\n", 18) = 18 [pid 364] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 364] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 364] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 364] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 29.362145][ T364] BUG: scheduling while atomic: syz-executor954/364/0x00000002 [ 29.369736][ T364] Modules linked in: [ 29.373623][ T364] CPU: 0 UID: 0 PID: 364 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 29.373643][ T364] Tainted: [W]=WARN [ 29.373647][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.373654][ T364] Call Trace: [ 29.373659][ T364] [ 29.373664][ T364] __dump_stack+0x21/0x30 [ 29.373684][ T364] dump_stack_lvl+0x140/0x1c0 [ 29.373699][ T364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.373714][ T364] ? stack_trace_save+0xaa/0x100 [ 29.373727][ T364] dump_stack+0x19/0x20 [ 29.373741][ T364] __schedule_bug+0x12b/0x200 [ 29.373753][ T364] ? find_proxy_task+0x2460/0x2460 [ 29.373764][ T364] ? kasan_save_stack+0x4d/0x60 [ 29.373777][ T364] ? kasan_save_stack+0x3e/0x60 [ 29.373788][ T364] ? __kasan_record_aux_stack+0xb2/0xd0 [ 29.373798][ T364] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 29.373808][ T364] ? call_rcu+0x14/0x20 [ 29.373819][ T364] ? kernfs_put+0x1de/0x360 [ 29.373833][ T364] ? kernfs_remove_by_name_ns+0x108/0x180 [ 29.373847][ T364] ? sysfs_delete_link+0x10f/0x140 [ 29.373859][ T364] __schedule+0xb85/0x20b0 [ 29.373872][ T364] ? __kasan_check_write+0x18/0x20 [ 29.373883][ T364] ? _raw_spin_trylock+0xb5/0x140 [ 29.373893][ T364] ? __cfi__raw_spin_trylock+0x10/0x10 [ 29.373904][ T364] ? _raw_spin_unlock+0x45/0x60 [ 29.373915][ T364] ? __sched_text_start+0x10/0x10 [ 29.373927][ T364] ? __kasan_check_write+0x18/0x20 [ 29.373937][ T364] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 29.373948][ T364] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 29.373960][ T364] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 29.373971][ T364] schedule+0xc5/0x240 [ 29.373982][ T364] kernfs_drain+0x278/0x420 [ 29.373997][ T364] ? kernfs_show+0x280/0x280 [ 29.374010][ T364] ? __cfi_autoremove_wake_function+0x10/0x10 [ 29.374022][ T364] ? __cfi_down_write+0x10/0x10 [ 29.374037][ T364] __kernfs_remove+0x402/0x940 [ 29.374058][ T364] kernfs_remove_by_name_ns+0x100/0x180 [ 29.374080][ T364] sysfs_remove_file_ns+0x68/0x80 [ 29.374096][ T364] device_del+0x56c/0xcf0 [ 29.374111][ T364] ? __cfi_device_del+0x10/0x10 [ 29.374126][ T364] ? __kasan_check_write+0x18/0x20 [ 29.374141][ T364] ? kobject_put+0x1cc/0x2a0 [ 29.374158][ T364] device_destroy+0xb0/0x100 [ 29.374174][ T364] ? __cfi_device_destroy+0x10/0x10 [ 29.374192][ T364] ? __kasan_check_write+0x18/0x20 [ 29.374212][ T364] android_device_destroy+0x118/0x180 [ 29.374249][ T364] gadgets_drop+0x1d/0x30 [ 29.374267][ T364] ? __cfi_gadgets_drop+0x10/0x10 [ 29.374286][ T364] configfs_rmdir+0x8ba/0x9b0 [ 29.374305][ T364] vfs_rmdir+0x3de/0x560 [ 29.374322][ T364] do_rmdir+0x29a/0x590 [ 29.374337][ T364] ? __cfi_do_rmdir+0x10/0x10 [ 29.374351][ T364] ? __kasan_check_write+0x18/0x20 [ 29.374362][ T364] __x64_sys_rmdir+0x4b/0x60 [ 29.374377][ T364] x64_sys_call+0xaf7/0x2ee0 [ 29.374387][ T364] do_syscall_64+0x57/0xf0 [ 29.374398][ T364] ? clear_bhb_loop+0x50/0xa0 [ 29.374412][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.374426][ T364] RIP: 0033:0x7f83e72e3749 [ 29.374436][ T364] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 29.374445][ T364] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.374458][ T364] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 29.374466][ T364] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 29.374474][ T364] RBP: 000000000000728b R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 29.374481][ T364] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 29.374488][ T364] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 29.374497][ T364] [ 29.748553][ T364] BUG: scheduling while atomic: syz-executor954/364/0x00000000 [ 29.756634][ T364] Modules linked in: [ 29.760548][ T364] CPU: 0 UID: 0 PID: 364 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 29.760571][ T364] Tainted: [W]=WARN [ 29.760574][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.760582][ T364] Call Trace: [ 29.760586][ T364] [ 29.760591][ T364] __dump_stack+0x21/0x30 [ 29.760614][ T364] dump_stack_lvl+0x140/0x1c0 [ 29.760630][ T364] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.760646][ T364] dump_stack+0x19/0x20 [ 29.760660][ T364] __schedule_bug+0x12b/0x200 [ 29.760673][ T364] ? find_proxy_task+0x2460/0x2460 [ 29.760685][ T364] __schedule+0xb85/0x20b0 [ 29.760698][ T364] ? __wake_up_sync_key+0x1be/0x2c0 [ 29.760711][ T364] ? __cfi___wake_up_sync_key+0x10/0x10 [ 29.760723][ T364] ? __sched_text_start+0x10/0x10 [ 29.760735][ T364] ? __kasan_check_write+0x18/0x20 [ 29.760747][ T364] ? _raw_spin_lock_irq+0x93/0x120 [ 29.760758][ T364] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 29.760769][ T364] ? __kasan_check_read+0x15/0x20 [ 29.760779][ T364] ? cgroup_update_frozen+0x160/0x980 [ 29.760794][ T364] schedule+0xc5/0x240 [ 29.760805][ T364] ptrace_stop+0x528/0x8f0 [ 29.760819][ T364] ptrace_notify+0x1de/0x290 [ 29.760833][ T364] ? __cfi_ptrace_notify+0x10/0x10 [ 29.760847][ T364] ? __cfi_do_rmdir+0x10/0x10 [ 29.760863][ T364] ? __kasan_check_write+0x18/0x20 [ 29.760874][ T364] syscall_exit_work+0x84/0x150 [ 29.760885][ T364] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 29.760895][ T364] syscall_exit_to_user_mode+0x15/0xb0 [ 29.760910][ T364] do_syscall_64+0x63/0xf0 [ 29.760920][ T364] ? clear_bhb_loop+0x50/0xa0 [ 29.760935][ T364] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.760949][ T364] RIP: 0033:0x7f83e72e3749 [ 29.760959][ T364] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [pid 364] rmdir("./config/usb_gadget/g1") = 0 [pid 364] exit_group(0) = ? [pid 364] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=364, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 365 attached , child_tidptr=0x555565efd750) = 365 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] set_robust_list(0x555565efd760, 24) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 executing program [pid 365] write(1, "executing program\n", 18) = 18 [pid 365] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 365] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 365] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 365] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 365] rmdir("./config/usb_gadget/g1") = 0 [pid 365] exit_group(0) = ? [pid 365] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 366 attached , child_tidptr=0x555565efd750) = 366 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 366] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 366] <... set_robust_list resumed>) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] write(1, "executing program\n", 18) = 18 executing program [pid 366] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 366] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 366] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 366] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 366] rmdir("./config/usb_gadget/g1") = 0 [pid 366] exit_group(0) = ? [pid 366] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=366, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 367 attached , child_tidptr=0x555565efd750) = 367 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] set_robust_list(0x555565efd760, 24) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3) = 0 [pid 367] write(1, "executing program\n", 18) = 18 executing program [pid 367] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 367] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 367] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 367] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 367] rmdir("./config/usb_gadget/g1") = 0 [pid 367] exit_group(0) = ? [pid 367] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=367, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 29.760968][ T364] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 29.760980][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 29.760988][ T364] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 29.760995][ T364] RBP: 000000000000728b R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 29.761003][ T364] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 29.761010][ T364] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 29.761018][ T364] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 368 attached , child_tidptr=0x555565efd750) = 368 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] set_robust_list(0x555565efd760, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] write(1, "executing program\n", 18) = 18 executing program [pid 368] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 368] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 368] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 368] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 368] rmdir("./config/usb_gadget/g1") = 0 [pid 368] exit_group(0) = ? [pid 368] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 369 attached , child_tidptr=0x555565efd750) = 369 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] set_robust_list(0x555565efd760, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] write(1, "executing program\n", 18) = 18 executing program [pid 369] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 369] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 369] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 369] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 30.067603][ T369] BUG: scheduling while atomic: syz-executor954/369/0x00000002 [ 30.075270][ T369] Modules linked in: [ 30.079180][ T369] CPU: 0 UID: 0 PID: 369 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 30.079202][ T369] Tainted: [W]=WARN [ 30.079205][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.079212][ T369] Call Trace: [ 30.079223][ T369] [ 30.079229][ T369] __dump_stack+0x21/0x30 [ 30.079249][ T369] dump_stack_lvl+0x140/0x1c0 [ 30.079263][ T369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.079279][ T369] dump_stack+0x19/0x20 [ 30.079293][ T369] __schedule_bug+0x12b/0x200 [ 30.079305][ T369] ? find_proxy_task+0x2460/0x2460 [ 30.079316][ T369] ? kernel_text_address+0xa9/0xe0 [ 30.079331][ T369] ? __kernel_text_address+0x11/0x40 [ 30.079345][ T369] ? unwind_get_return_address+0x51/0x90 [ 30.079360][ T369] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.079373][ T369] __schedule+0xb85/0x20b0 [ 30.079386][ T369] ? stack_trace_save+0xaa/0x100 [ 30.079398][ T369] ? __sched_text_start+0x10/0x10 [ 30.079410][ T369] ? __kasan_check_read+0x15/0x20 [ 30.079421][ T369] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 30.079431][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079441][ T369] ? _raw_spin_lock_irq+0x93/0x120 [ 30.079452][ T369] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.079463][ T369] schedule+0xc5/0x240 [ 30.079474][ T369] schedule_preempt_disabled+0x14/0x30 [ 30.079486][ T369] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 30.079503][ T369] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 30.079517][ T369] ? try_to_wake_up+0x111a/0x1fd0 [ 30.079530][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079540][ T369] ? wake_q_add_safe+0x29/0x100 [ 30.079550][ T369] ? __cfi_try_to_wake_up+0x10/0x10 [ 30.079562][ T369] ? rwsem_mark_wake+0x507/0x770 [ 30.079578][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079589][ T369] ? rwsem_read_trylock+0x275/0x5a0 [ 30.079604][ T369] ? downgrade_write+0x470/0x470 [ 30.079620][ T369] down_write+0x163/0x2b0 [ 30.079634][ T369] ? __cfi_down_write+0x10/0x10 [ 30.079648][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079659][ T369] kernfs_remove_by_name_ns+0x8c/0x180 [ 30.079681][ T369] sysfs_remove_group+0x108/0x250 [ 30.079694][ T369] dpm_sysfs_remove+0x99/0xd0 [ 30.079709][ T369] device_del+0x241/0xcf0 [ 30.079721][ T369] ? __cfi_class_find_device+0x10/0x10 [ 30.079734][ T369] ? __cfi_device_del+0x10/0x10 [ 30.079743][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079754][ T369] ? kobject_put+0x1cc/0x2a0 [ 30.079767][ T369] device_destroy+0xb0/0x100 [ 30.079777][ T369] ? __cfi_device_destroy+0x10/0x10 [ 30.079788][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079799][ T369] android_device_destroy+0x118/0x180 [ 30.079815][ T369] gadgets_drop+0x1d/0x30 [ 30.079826][ T369] ? __cfi_gadgets_drop+0x10/0x10 [ 30.079837][ T369] configfs_rmdir+0x8ba/0x9b0 [ 30.079851][ T369] vfs_rmdir+0x3de/0x560 [ 30.079867][ T369] do_rmdir+0x29a/0x590 [ 30.079882][ T369] ? __cfi_do_rmdir+0x10/0x10 [ 30.079897][ T369] ? __kasan_check_write+0x18/0x20 [ 30.079908][ T369] __x64_sys_rmdir+0x4b/0x60 [ 30.079923][ T369] x64_sys_call+0xaf7/0x2ee0 [ 30.079932][ T369] do_syscall_64+0x57/0xf0 [ 30.079943][ T369] ? clear_bhb_loop+0x50/0xa0 [ 30.079957][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.079974][ T369] RIP: 0033:0x7f83e72e3749 [ 30.079986][ T369] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 30.079998][ T369] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 30.080012][ T369] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 30.080020][ T369] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 30.080028][ T369] RBP: 000000000000754b R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 30.080035][ T369] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 30.080043][ T369] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 30.080051][ T369] [ 30.080348][ T369] BUG: scheduling while atomic: syz-executor954/369/0x00000000 [ 30.489903][ T369] Modules linked in: [ 30.493836][ T369] CPU: 1 UID: 0 PID: 369 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 30.493858][ T369] Tainted: [W]=WARN [ 30.493862][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.493869][ T369] Call Trace: [ 30.493874][ T369] [ 30.493880][ T369] __dump_stack+0x21/0x30 [ 30.493901][ T369] dump_stack_lvl+0x140/0x1c0 [ 30.493915][ T369] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.493931][ T369] dump_stack+0x19/0x20 [ 30.493945][ T369] __schedule_bug+0x12b/0x200 [ 30.493957][ T369] ? find_proxy_task+0x2460/0x2460 [ 30.493969][ T369] __schedule+0xb85/0x20b0 [ 30.493982][ T369] ? __wake_up_sync_key+0x1be/0x2c0 [ 30.493995][ T369] ? __cfi___wake_up_sync_key+0x10/0x10 [ 30.494008][ T369] ? __sched_text_start+0x10/0x10 [ 30.494056][ T369] ? __kasan_check_write+0x18/0x20 [ 30.494074][ T369] ? _raw_spin_lock_irq+0x93/0x120 [ 30.494091][ T369] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.494107][ T369] ? __kasan_check_read+0x15/0x20 [ 30.494123][ T369] ? cgroup_update_frozen+0x160/0x980 [ 30.494149][ T369] schedule+0xc5/0x240 [ 30.494170][ T369] ptrace_stop+0x528/0x8f0 [ 30.494187][ T369] ptrace_notify+0x1de/0x290 [ 30.494201][ T369] ? __cfi_ptrace_notify+0x10/0x10 [ 30.494215][ T369] ? __cfi_do_rmdir+0x10/0x10 [ 30.494232][ T369] ? __kasan_check_write+0x18/0x20 [ 30.494243][ T369] syscall_exit_work+0x84/0x150 [ 30.494253][ T369] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 30.494264][ T369] syscall_exit_to_user_mode+0x15/0xb0 [ 30.494279][ T369] do_syscall_64+0x63/0xf0 [ 30.494289][ T369] ? clear_bhb_loop+0x50/0xa0 [ 30.494304][ T369] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.494317][ T369] RIP: 0033:0x7f83e72e3749 [ 30.494328][ T369] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 30.494337][ T369] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 30.494349][ T369] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 30.494357][ T369] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [pid 369] rmdir("./config/usb_gadget/g1") = 0 [pid 369] exit_group(0) = ? [pid 369] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=0, si_status=0, si_utime=0, si_stime=41 /* 0.41 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x555565efd760, 24 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 370 [pid 370] <... set_robust_list resumed>) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 370] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 370] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] write(1, "executing program\n", 18) = 18 [pid 370] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 370] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 370] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 370] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 370] rmdir("./config/usb_gadget/g1") = 0 [pid 370] exit_group(0) = ? [pid 370] +++ exited with 0 +++ executing program --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 371 [pid 371] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 [pid 371] write(1, "executing program\n", 18) = 18 executing program [pid 371] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 371] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 371] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 371] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 371] rmdir("./config/usb_gadget/g1") = 0 [pid 371] exit_group(0) = ? [pid 371] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 372 attached , child_tidptr=0x555565efd750) = 372 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] set_robust_list(0x555565efd760, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] write(1, "executing program\n", 18) = 18 executing program [pid 372] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 372] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 372] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [ 30.494365][ T369] RBP: 000000000000754b R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 30.494372][ T369] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 30.494379][ T369] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 30.494388][ T369] [pid 372] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 372] rmdir("./config/usb_gadget/g1") = 0 [pid 372] exit_group(0) = ? [pid 372] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=372, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 373 attached , child_tidptr=0x555565efd750) = 373 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 373] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 373] <... set_robust_list resumed>) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] setpgid(0, 0) = 0 [pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] write(3, "1000", 4) = 4 [pid 373] close(3) = 0 [pid 373] write(1, "executing program\n", 18) = 18 [pid 373] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 373] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 373] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 373] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 373] rmdir("./config/usb_gadget/g1") = 0 [pid 373] exit_group(0) = ? [pid 373] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x555565efd760, 24 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 374 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 374] <... set_robust_list resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] write(1, "executing program\n", 18) = 18 [pid 374] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 374] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 374] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 374] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 374] rmdir("./config/usb_gadget/g1") = 0 [pid 374] exit_group(0) = ? [pid 374] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 375 attached , child_tidptr=0x555565efd750) = 375 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] set_robust_list(0x555565efd760, 24) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3) = 0 [pid 375] write(1, "executing program\n", 18) = 18 [pid 375] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 375] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 375] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 375] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 30.816814][ T375] BUG: scheduling while atomic: syz-executor954/375/0x00000002 [ 30.824594][ T375] Modules linked in: [ 30.828534][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 30.828555][ T375] Tainted: [W]=WARN [ 30.828559][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.828566][ T375] Call Trace: [ 30.828571][ T375] [ 30.828575][ T375] __dump_stack+0x21/0x30 [ 30.828596][ T375] dump_stack_lvl+0x140/0x1c0 [ 30.828620][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.828657][ T375] dump_stack+0x19/0x20 [ 30.828671][ T375] __schedule_bug+0x12b/0x200 [ 30.828684][ T375] ? find_proxy_task+0x2460/0x2460 [ 30.828695][ T375] ? __kasan_check_read+0x15/0x20 [ 30.828707][ T375] ? psi_group_change+0xab6/0x10a0 [ 30.828722][ T375] __schedule+0xb85/0x20b0 [ 30.828735][ T375] ? update_curr+0xf1/0x9c0 [ 30.828746][ T375] ? __sched_text_start+0x10/0x10 [ 30.828758][ T375] ? __kasan_check_read+0x15/0x20 [ 30.828768][ T375] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 30.828778][ T375] ? __kasan_check_write+0x18/0x20 [ 30.828788][ T375] ? _raw_spin_lock_irq+0x93/0x120 [ 30.828799][ T375] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 30.828810][ T375] schedule+0xc5/0x240 [ 30.828821][ T375] schedule_preempt_disabled+0x14/0x30 [ 30.828833][ T375] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 30.828848][ T375] ? activate_task+0x43b/0x480 [ 30.828859][ T375] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 30.828874][ T375] ? try_to_wake_up+0x111a/0x1fd0 [ 30.828886][ T375] ? __kasan_check_write+0x18/0x20 [ 30.828897][ T375] ? wake_q_add_safe+0x29/0x100 [ 30.828906][ T375] ? __cfi_try_to_wake_up+0x10/0x10 [ 30.828917][ T375] ? rwsem_mark_wake+0x507/0x770 [ 30.828934][ T375] ? rwsem_read_trylock+0x275/0x5a0 [ 30.828949][ T375] ? wake_up_q+0x10a/0x1c0 [ 30.828958][ T375] ? downgrade_write+0x470/0x470 [ 30.828973][ T375] down_write+0x163/0x2b0 [ 30.828987][ T375] ? __cfi_down_write+0x10/0x10 [ 30.829001][ T375] ? down_read+0x7f/0xe0 [ 30.829014][ T375] ? __cfi_down_read+0x10/0x10 [ 30.829028][ T375] kernfs_remove_by_name_ns+0x8c/0x180 [ 30.829044][ T375] sysfs_unmerge_group+0xd7/0x130 [ 30.829057][ T375] dpm_sysfs_remove+0x7b/0xd0 [ 30.829072][ T375] device_del+0x241/0xcf0 [ 30.829082][ T375] ? __cfi_class_find_device+0x10/0x10 [ 30.829099][ T375] ? __cfi_device_del+0x10/0x10 [ 30.829109][ T375] ? __kasan_check_write+0x18/0x20 [ 30.829119][ T375] ? kobject_put+0x1cc/0x2a0 [ 30.829130][ T375] device_destroy+0xb0/0x100 [ 30.829143][ T375] ? __cfi_device_destroy+0x10/0x10 [ 30.829154][ T375] ? __kasan_check_write+0x18/0x20 [ 30.829165][ T375] android_device_destroy+0x118/0x180 [ 30.829181][ T375] gadgets_drop+0x1d/0x30 [ 30.829192][ T375] ? __cfi_gadgets_drop+0x10/0x10 [ 30.829203][ T375] configfs_rmdir+0x8ba/0x9b0 [ 30.829217][ T375] vfs_rmdir+0x3de/0x560 [ 30.829233][ T375] do_rmdir+0x29a/0x590 [ 30.829248][ T375] ? __cfi_do_rmdir+0x10/0x10 [ 30.829263][ T375] ? __kasan_check_write+0x18/0x20 [ 30.829273][ T375] __x64_sys_rmdir+0x4b/0x60 [ 30.829288][ T375] x64_sys_call+0xaf7/0x2ee0 [ 30.829298][ T375] do_syscall_64+0x57/0xf0 [ 30.829308][ T375] ? clear_bhb_loop+0x50/0xa0 [ 30.829323][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.829336][ T375] RIP: 0033:0x7f83e72e3749 [ 30.829347][ T375] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 30.829356][ T375] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 30.829409][ T375] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 30.829418][ T375] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 30.829426][ T375] RBP: 0000000000007839 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 30.829433][ T375] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 30.829441][ T375] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [pid 375] rmdir("./config/usb_gadget/g1") = 0 [pid 375] exit_group(0) = ? [pid 375] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=375, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} --- [ 30.829449][ T375] [ 30.829782][ T375] BUG: scheduling while atomic: syz-executor954/375/0x00000000 [ 31.227479][ T375] Modules linked in: [ 31.231416][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 31.231452][ T375] Tainted: [W]=WARN [ 31.231457][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.231470][ T375] Call Trace: [ 31.231478][ T375] [ 31.231487][ T375] __dump_stack+0x21/0x30 [ 31.231519][ T375] dump_stack_lvl+0x140/0x1c0 [ 31.231543][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.231569][ T375] dump_stack+0x19/0x20 [ 31.231592][ T375] __schedule_bug+0x12b/0x200 [ 31.231610][ T375] ? find_proxy_task+0x2460/0x2460 [ 31.231631][ T375] __schedule+0xb85/0x20b0 [ 31.231652][ T375] ? __wake_up_sync_key+0x1be/0x2c0 [ 31.231674][ T375] ? __cfi___wake_up_sync_key+0x10/0x10 [ 31.231695][ T375] ? __sched_text_start+0x10/0x10 [ 31.231716][ T375] ? __kasan_check_write+0x18/0x20 [ 31.231736][ T375] ? _raw_spin_lock_irq+0x93/0x120 [ 31.231755][ T375] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.231774][ T375] ? __kasan_check_read+0x15/0x20 [ 31.231796][ T375] ? cgroup_update_frozen+0x160/0x980 [ 31.231821][ T375] schedule+0xc5/0x240 [ 31.231840][ T375] ptrace_stop+0x528/0x8f0 [ 31.231863][ T375] ptrace_notify+0x1de/0x290 [ 31.231891][ T375] ? __cfi_ptrace_notify+0x10/0x10 [ 31.231915][ T375] ? __cfi_do_rmdir+0x10/0x10 [ 31.231941][ T375] ? __kasan_check_write+0x18/0x20 [ 31.231960][ T375] syscall_exit_work+0x84/0x150 [ 31.231978][ T375] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 31.231997][ T375] syscall_exit_to_user_mode+0x15/0xb0 [ 31.232022][ T375] do_syscall_64+0x63/0xf0 [ 31.232040][ T375] ? clear_bhb_loop+0x50/0xa0 [ 31.232064][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.232087][ T375] RIP: 0033:0x7f83e72e3749 [ 31.232111][ T375] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 31.232126][ T375] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 31.232147][ T375] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 31.232160][ T375] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 31.232174][ T375] RBP: 0000000000007839 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 376 attached , child_tidptr=0x555565efd750) = 376 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 376] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 376] <... set_robust_list resumed>) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] write(1, "executing program\n", 18) = 18 [pid 376] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 376] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 376] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 376] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 376] rmdir("./config/usb_gadget/g1") = 0 [pid 376] exit_group(0) = ? [pid 376] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 377 attached , child_tidptr=0x555565efd750) = 377 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] set_robust_list(0x555565efd760, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] write(1, "executing program\n", 18) = 18 [pid 377] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 377] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 377] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 377] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 377] rmdir("./config/usb_gadget/g1") = 0 [pid 377] exit_group(0) = ? [pid 377] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=377, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 378 attached , child_tidptr=0x555565efd750) = 378 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] set_robust_list(0x555565efd760, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] write(1, "executing program\n", 18) = 18 executing program [pid 378] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 378] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 378] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 378] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 378] rmdir("./config/usb_gadget/g1") = 0 [pid 378] exit_group(0) = ? [pid 378] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 379 ci2-android-6-12-rust/strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x555565efd760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 379] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 379] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 379] setpgid(0, 0) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] write(3, "1000", 4) = 4 [pid 379] close(3) = 0 [pid 379] write(1, "executing program\n", 18) = 18 [pid 379] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 379] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 379] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 379] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 31.232187][ T375] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 31.232201][ T375] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 31.232216][ T375] [ 31.523064][ T379] BUG: scheduling while atomic: syz-executor954/379/0x00000002 [ 31.530732][ T379] Modules linked in: [ 31.535242][ T379] CPU: 0 UID: 0 PID: 379 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 31.535276][ T379] Tainted: [W]=WARN [ 31.535283][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.535295][ T379] Call Trace: [ 31.535303][ T379] [ 31.535312][ T379] __dump_stack+0x21/0x30 [ 31.535339][ T379] dump_stack_lvl+0x140/0x1c0 [ 31.535359][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.535382][ T379] dump_stack+0x19/0x20 [ 31.535403][ T379] __schedule_bug+0x12b/0x200 [ 31.535424][ T379] ? find_proxy_task+0x2460/0x2460 [ 31.535441][ T379] ? kernel_text_address+0xa9/0xe0 [ 31.535462][ T379] ? __kernel_text_address+0x11/0x40 [ 31.535484][ T379] ? unwind_get_return_address+0x51/0x90 [ 31.535508][ T379] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 31.535531][ T379] __schedule+0xb85/0x20b0 [ 31.535554][ T379] ? stack_trace_save+0xaa/0x100 [ 31.535575][ T379] ? __sched_text_start+0x10/0x10 [ 31.535597][ T379] ? __kasan_check_read+0x15/0x20 [ 31.535615][ T379] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 31.535633][ T379] ? __kasan_check_write+0x18/0x20 [ 31.535652][ T379] ? _raw_spin_lock_irq+0x93/0x120 [ 31.535671][ T379] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.535691][ T379] schedule+0xc5/0x240 [ 31.535711][ T379] schedule_preempt_disabled+0x14/0x30 [ 31.535732][ T379] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 31.535760][ T379] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 31.535787][ T379] ? try_to_wake_up+0x111a/0x1fd0 [ 31.535810][ T379] ? __kasan_check_write+0x18/0x20 [ 31.535830][ T379] ? wake_q_add_safe+0x29/0x100 [ 31.535849][ T379] ? __cfi_try_to_wake_up+0x10/0x10 [ 31.535871][ T379] ? rwsem_mark_wake+0x507/0x770 [ 31.535899][ T379] ? __kasan_check_write+0x18/0x20 [ 31.535917][ T379] ? rwsem_read_trylock+0x275/0x5a0 [ 31.535944][ T379] ? downgrade_write+0x470/0x470 [ 31.535971][ T379] down_write+0x163/0x2b0 [ 31.535995][ T379] ? __cfi_down_write+0x10/0x10 [ 31.536020][ T379] ? __kasan_check_write+0x18/0x20 [ 31.536039][ T379] kernfs_remove_by_name_ns+0x8c/0x180 [ 31.536066][ T379] sysfs_remove_group+0x108/0x250 [ 31.536088][ T379] dpm_sysfs_remove+0x99/0xd0 [ 31.536157][ T379] device_del+0x241/0xcf0 [ 31.536180][ T379] ? __cfi_class_find_device+0x10/0x10 [ 31.536203][ T379] ? __cfi_device_del+0x10/0x10 [ 31.536220][ T379] ? __kasan_check_write+0x18/0x20 [ 31.536244][ T379] ? kobject_put+0x1cc/0x2a0 [ 31.536263][ T379] device_destroy+0xb0/0x100 [ 31.536281][ T379] ? __cfi_device_destroy+0x10/0x10 [ 31.536300][ T379] ? __kasan_check_write+0x18/0x20 [ 31.536320][ T379] android_device_destroy+0x118/0x180 [ 31.536348][ T379] gadgets_drop+0x1d/0x30 [ 31.536367][ T379] ? __cfi_gadgets_drop+0x10/0x10 [ 31.536387][ T379] configfs_rmdir+0x8ba/0x9b0 [ 31.536412][ T379] vfs_rmdir+0x3de/0x560 [ 31.536438][ T379] do_rmdir+0x29a/0x590 [ 31.536464][ T379] ? __cfi_do_rmdir+0x10/0x10 [ 31.536489][ T379] ? __kasan_check_write+0x18/0x20 [ 31.536509][ T379] __x64_sys_rmdir+0x4b/0x60 [ 31.536535][ T379] x64_sys_call+0xaf7/0x2ee0 [ 31.536553][ T379] do_syscall_64+0x57/0xf0 [ 31.536571][ T379] ? clear_bhb_loop+0x50/0xa0 [ 31.536595][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.536619][ T379] RIP: 0033:0x7f83e72e3749 [ 31.536637][ T379] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 31.536654][ T379] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 31.536677][ T379] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 31.536692][ T379] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 31.536707][ T379] RBP: 0000000000007afb R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 31.536721][ T379] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 31.536735][ T379] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 31.536752][ T379] [ 31.537739][ T379] BUG: scheduling while atomic: syz-executor954/379/0x00000000 [ 31.968928][ T379] Modules linked in: [ 31.972830][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 31.972852][ T379] Tainted: [W]=WARN [ 31.972855][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.972863][ T379] Call Trace: [ 31.972868][ T379] [ 31.972874][ T379] __dump_stack+0x21/0x30 [ 31.972894][ T379] dump_stack_lvl+0x140/0x1c0 [ 31.972909][ T379] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.972925][ T379] dump_stack+0x19/0x20 [ 31.972939][ T379] __schedule_bug+0x12b/0x200 [ 31.972951][ T379] ? find_proxy_task+0x2460/0x2460 [ 31.972963][ T379] __schedule+0xb85/0x20b0 [ 31.972976][ T379] ? __wake_up_sync_key+0x1be/0x2c0 [ 31.972989][ T379] ? __cfi___wake_up_sync_key+0x10/0x10 [ 31.973001][ T379] ? __sched_text_start+0x10/0x10 [ 31.973013][ T379] ? __kasan_check_write+0x18/0x20 [ 31.973025][ T379] ? _raw_spin_lock_irq+0x93/0x120 [ 31.973035][ T379] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 31.973046][ T379] ? __kasan_check_read+0x15/0x20 [ 31.973056][ T379] ? cgroup_update_frozen+0x160/0x980 [ 31.973071][ T379] schedule+0xc5/0x240 [ 31.973082][ T379] ptrace_stop+0x528/0x8f0 [ 31.973096][ T379] ptrace_notify+0x1de/0x290 [ 31.973110][ T379] ? __cfi_ptrace_notify+0x10/0x10 [ 31.973124][ T379] ? __cfi_do_rmdir+0x10/0x10 [ 31.973141][ T379] ? __kasan_check_write+0x18/0x20 [ 31.973151][ T379] syscall_exit_work+0x84/0x150 [ 31.973162][ T379] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 31.973172][ T379] syscall_exit_to_user_mode+0x15/0xb0 [ 31.973187][ T379] do_syscall_64+0x63/0xf0 [ 31.973197][ T379] ? clear_bhb_loop+0x50/0xa0 [ 31.973212][ T379] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.973226][ T379] RIP: 0033:0x7f83e72e3749 [ 31.973236][ T379] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [pid 379] rmdir("./config/usb_gadget/g1") = 0 [ 31.973245][ T379] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 31.973257][ T379] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 31.973265][ T379] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 31.973272][ T379] RBP: 0000000000007afb R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 31.973279][ T379] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 31.973287][ T379] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 31.973295][ T379] [pid 379] exit_group(0) = ? [pid 379] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=0, si_stime=43 /* 0.43 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 380 attached , child_tidptr=0x555565efd750) = 380 [pid 380] set_robust_list(0x555565efd760, 24) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] write(1, "executing program\n", 18) = 18 executing program [pid 380] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 380] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 380] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 380] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] <... mkdirat resumed>) = 0 [pid 380] rmdir("./config/usb_gadget/g1") = 0 [pid 380] exit_group(0) = ? [pid 380] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=380, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x555565efd760, 24 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 381 [pid 381] <... set_robust_list resumed>) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 381] setpgid(0, 0) = 0 [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 381] write(3, "1000", 4) = 4 [pid 381] close(3) = 0 [pid 381] write(1, "executing program\n", 18) = 18 [pid 381] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 381] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 381] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 381] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 32.261282][ T381] BUG: scheduling while atomic: syz-executor954/381/0x00000002 [ 32.269829][ T381] Modules linked in: [ 32.273845][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 32.273870][ T381] Tainted: [W]=WARN [ 32.273874][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.273881][ T381] Call Trace: [ 32.273887][ T381] [ 32.273894][ T381] __dump_stack+0x21/0x30 [ 32.273916][ T381] dump_stack_lvl+0x140/0x1c0 [ 32.273931][ T381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.273947][ T381] dump_stack+0x19/0x20 [ 32.273961][ T381] __schedule_bug+0x12b/0x200 [ 32.273975][ T381] ? find_proxy_task+0x2460/0x2460 [ 32.273987][ T381] ? __kasan_check_read+0x15/0x20 [ 32.273998][ T381] ? psi_group_change+0xab6/0x10a0 [ 32.274014][ T381] __schedule+0xb85/0x20b0 [ 32.274039][ T381] ? update_curr+0xf1/0x9c0 [ 32.274065][ T381] ? __sched_text_start+0x10/0x10 [ 32.274084][ T381] ? __kasan_check_read+0x15/0x20 [ 32.274099][ T381] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 32.274114][ T381] ? __kasan_check_write+0x18/0x20 [ 32.274131][ T381] ? _raw_spin_lock_irq+0x93/0x120 [ 32.274148][ T381] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.274168][ T381] schedule+0xc5/0x240 [ 32.274183][ T381] schedule_preempt_disabled+0x14/0x30 [ 32.274196][ T381] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 32.274212][ T381] ? activate_task+0x43b/0x480 [ 32.274224][ T381] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 32.274240][ T381] ? try_to_wake_up+0x111a/0x1fd0 [ 32.274252][ T381] ? __kasan_check_write+0x18/0x20 [ 32.274263][ T381] ? wake_q_add_safe+0x29/0x100 [ 32.274273][ T381] ? __cfi_try_to_wake_up+0x10/0x10 [ 32.274285][ T381] ? rwsem_mark_wake+0x507/0x770 [ 32.274312][ T381] ? rwsem_read_trylock+0x275/0x5a0 [ 32.274334][ T381] ? wake_up_q+0x10a/0x1c0 [ 32.274347][ T381] ? downgrade_write+0x470/0x470 [ 32.274363][ T381] down_write+0x163/0x2b0 [ 32.274377][ T381] ? __cfi_down_write+0x10/0x10 [ 32.274392][ T381] ? down_read+0x7f/0xe0 [ 32.274406][ T381] ? __cfi_down_read+0x10/0x10 [ 32.274420][ T381] kernfs_remove_by_name_ns+0x8c/0x180 [ 32.274437][ T381] sysfs_unmerge_group+0xd7/0x130 [ 32.274451][ T381] dpm_sysfs_remove+0x7b/0xd0 [ 32.274466][ T381] device_del+0x241/0xcf0 [ 32.274477][ T381] ? __cfi_class_find_device+0x10/0x10 [ 32.274490][ T381] ? __cfi_device_del+0x10/0x10 [ 32.274500][ T381] ? __kasan_check_write+0x18/0x20 [ 32.274513][ T381] ? kobject_put+0x1cc/0x2a0 [ 32.274527][ T381] device_destroy+0xb0/0x100 [ 32.274538][ T381] ? __cfi_device_destroy+0x10/0x10 [ 32.274549][ T381] ? __kasan_check_write+0x18/0x20 [ 32.274560][ T381] android_device_destroy+0x118/0x180 [ 32.274577][ T381] gadgets_drop+0x1d/0x30 [ 32.274589][ T381] ? __cfi_gadgets_drop+0x10/0x10 [ 32.274600][ T381] configfs_rmdir+0x8ba/0x9b0 [ 32.274615][ T381] vfs_rmdir+0x3de/0x560 [ 32.274632][ T381] do_rmdir+0x29a/0x590 [ 32.274647][ T381] ? __cfi_do_rmdir+0x10/0x10 [ 32.274663][ T381] ? __kasan_check_write+0x18/0x20 [ 32.274674][ T381] __x64_sys_rmdir+0x4b/0x60 [ 32.274689][ T381] x64_sys_call+0xaf7/0x2ee0 [ 32.274699][ T381] do_syscall_64+0x57/0xf0 [ 32.274710][ T381] ? clear_bhb_loop+0x50/0xa0 [ 32.274726][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.274740][ T381] RIP: 0033:0x7f83e72e3749 [ 32.274751][ T381] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 32.274761][ T381] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 32.274774][ T381] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 32.274783][ T381] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [pid 381] rmdir("./config/usb_gadget/g1") = 0 [ 32.274791][ T381] RBP: 0000000000007dde R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 32.274798][ T381] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 32.274806][ T381] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 32.274814][ T381] [ 32.688847][ T381] BUG: scheduling while atomic: syz-executor954/381/0x00000000 [ 32.696770][ T381] Modules linked in: [ 32.700694][ T381] CPU: 0 UID: 0 PID: 381 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 32.700731][ T381] Tainted: [W]=WARN [ 32.700738][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.700750][ T381] Call Trace: [ 32.700758][ T381] [ 32.700767][ T381] __dump_stack+0x21/0x30 [ 32.700797][ T381] dump_stack_lvl+0x140/0x1c0 [ 32.700822][ T381] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.700848][ T381] dump_stack+0x19/0x20 [ 32.700871][ T381] __schedule_bug+0x12b/0x200 [ 32.700891][ T381] ? find_proxy_task+0x2460/0x2460 [ 32.700912][ T381] __schedule+0xb85/0x20b0 [ 32.700941][ T381] ? __wake_up_sync_key+0x1be/0x2c0 [ 32.700963][ T381] ? __cfi___wake_up_sync_key+0x10/0x10 [ 32.700984][ T381] ? __sched_text_start+0x10/0x10 [ 32.701005][ T381] ? __kasan_check_write+0x18/0x20 [ 32.701029][ T381] ? _raw_spin_lock_irq+0x93/0x120 [ 32.701049][ T381] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 32.701067][ T381] ? __kasan_check_read+0x15/0x20 [ 32.701085][ T381] ? cgroup_update_frozen+0x160/0x980 [ 32.701114][ T381] schedule+0xc5/0x240 [ 32.701134][ T381] ptrace_stop+0x528/0x8f0 [ 32.701156][ T381] ptrace_notify+0x1de/0x290 [ 32.701180][ T381] ? __cfi_ptrace_notify+0x10/0x10 [ 32.701204][ T381] ? __cfi_do_rmdir+0x10/0x10 [ 32.701231][ T381] ? __kasan_check_write+0x18/0x20 [ 32.701250][ T381] syscall_exit_work+0x84/0x150 [ 32.701268][ T381] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 32.701289][ T381] syscall_exit_to_user_mode+0x15/0xb0 [ 32.701315][ T381] do_syscall_64+0x63/0xf0 [ 32.701334][ T381] ? clear_bhb_loop+0x50/0xa0 [ 32.701360][ T381] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.701384][ T381] RIP: 0033:0x7f83e72e3749 [ 32.701401][ T381] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 32.701416][ T381] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 32.701437][ T381] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 32.701450][ T381] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 32.701464][ T381] RBP: 0000000000007dde R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 32.701477][ T381] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 32.701489][ T381] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [pid 381] exit_group(0) = ? [pid 381] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=381, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 382 attached , child_tidptr=0x555565efd750) = 382 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 382] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 382] <... set_robust_list resumed>) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] write(1, "executing program\n", 18) = 18 [pid 382] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 382] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 382] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 382] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 382] rmdir("./config/usb_gadget/g1") = 0 [pid 382] exit_group(0) = ? [pid 382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 383 attached , child_tidptr=0x555565efd750) = 383 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 383] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 383] <... set_robust_list resumed>) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 [pid 383] write(1, "executing program\n", 18) = 18 [pid 383] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 383] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 383] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 383] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 383] rmdir("./config/usb_gadget/g1") = 0 [pid 383] exit_group(0) = ? [pid 383] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=383, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 384 attached , child_tidptr=0x555565efd750) = 384 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 384] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 384] <... set_robust_list resumed>) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] write(1, "executing program\n", 18) = 18 [pid 384] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 384] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 384] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 384] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 384] rmdir("./config/usb_gadget/g1") = 0 [pid 384] exit_group(0) = ? [pid 384] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=384, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 385 attached , child_tidptr=0x555565efd750) = 385 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 385] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 385] <... set_robust_list resumed>) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 385] setpgid(0, 0) = 0 [pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 385] write(3, "1000", 4) = 4 [pid 385] close(3) = 0 [pid 385] write(1, "executing program\n", 18) = 18 [pid 385] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 385] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 385] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 385] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 385] rmdir("./config/usb_gadget/g1") = 0 [pid 385] exit_group(0) = ? [pid 385] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=385, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 386 attached , child_tidptr=0x555565efd750) = 386 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 386] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 386] <... set_robust_list resumed>) = 0 [pid 386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 [pid 386] write(1, "executing program\n", 18) = 18 [pid 386] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 386] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 386] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 386] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 386] rmdir("./config/usb_gadget/g1") = 0 [pid 386] exit_group(0) = ? [pid 386] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 387 attached , child_tidptr=0x555565efd750) = 387 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 387] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 387] <... set_robust_list resumed>) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 387] setpgid(0, 0) = 0 [pid 387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 387] write(3, "1000", 4) = 4 [pid 387] close(3) = 0 [pid 387] write(1, "executing program\n", 18) = 18 [pid 387] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 387] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 387] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 387] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 387] rmdir("./config/usb_gadget/g1") = 0 [pid 387] exit_group(0) = ? [pid 387] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=387, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 388 attached , child_tidptr=0x555565efd750) = 388 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 388] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 388] <... set_robust_list resumed>) = 0 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 388] setpgid(0, 0) = 0 [pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 388] write(3, "1000", 4) = 4 [pid 388] close(3) = 0 [pid 388] write(1, "executing program\n", 18) = 18 [pid 388] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 388] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 388] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 388] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 388] rmdir("./config/usb_gadget/g1") = 0 [pid 388] exit_group(0) = ? [pid 388] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=388, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x555565efd760, 24) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 389 [pid 389] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 389] <... prctl resumed>) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] write(1, "executing program\n", 18) = 18 [pid 389] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 389] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 389] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 389] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 389] rmdir("./config/usb_gadget/g1") = 0 [pid 389] exit_group(0) = ? [pid 389] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=389, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x555565efd760, 24) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 390 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 390] <... openat resumed>) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 390] close(3) = 0 [pid 390] write(1, "executing program\n", 18) = 18 [pid 390] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 390] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 390] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 390] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 390] rmdir("./config/usb_gadget/g1") = 0 [pid 390] exit_group(0) = ? [pid 390] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=390, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 391 attached , child_tidptr=0x555565efd750) = 391 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 391] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 391] <... set_robust_list resumed>) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 391] setpgid(0, 0) = 0 [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 391] write(3, "1000", 4) = 4 [pid 391] close(3) = 0 [pid 391] write(1, "executing program\n", 18) = 18 [pid 391] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 391] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 391] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 391] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 391] rmdir("./config/usb_gadget/g1") = 0 [pid 391] exit_group(0) = ? [pid 391] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=391, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 392 attached , child_tidptr=0x555565efd750) = 392 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 392] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 392] <... set_robust_list resumed>) = 0 [pid 392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 392] setpgid(0, 0) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] write(1, "executing program\n", 18) = 18 [pid 392] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 392] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 392] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 392] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 392] rmdir("./config/usb_gadget/g1") = 0 [pid 392] exit_group(0) = ? [pid 392] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=392, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 393 attached , child_tidptr=0x555565efd750) = 393 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 393] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 393] <... set_robust_list resumed>) = 0 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 393] setpgid(0, 0) = 0 [pid 393] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 393] write(3, "1000", 4) = 4 [pid 393] close(3) = 0 [pid 393] write(1, "executing program\n", 18) = 18 [pid 393] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 393] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 393] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 393] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 393] rmdir("./config/usb_gadget/g1") = 0 [pid 393] exit_group(0) = ? [pid 393] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=393, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 394 attached , child_tidptr=0x555565efd750) = 394 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 394] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 394] <... set_robust_list resumed>) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3) = 0 [pid 394] write(1, "executing program\n", 18) = 18 [pid 394] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 394] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 394] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 394] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 394] rmdir("./config/usb_gadget/g1") = 0 [pid 394] exit_group(0) = ? [pid 394] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=394, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 395 attached , child_tidptr=0x555565efd750) = 395 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 395] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 395] <... set_robust_list resumed>) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 395] setpgid(0, 0) = 0 [pid 395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 395] write(3, "1000", 4) = 4 [pid 395] close(3) = 0 [pid 395] write(1, "executing program\n", 18) = 18 [pid 395] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 395] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 395] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 395] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 395] rmdir("./config/usb_gadget/g1") = 0 [pid 395] exit_group(0) = ? [pid 395] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=395, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 396 attached , child_tidptr=0x555565efd750) = 396 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] set_robust_list(0x555565efd760, 24) = 0 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 396] setpgid(0, 0) = 0 [pid 396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 396] write(3, "1000", 4) = 4 [pid 396] close(3) = 0 [pid 396] write(1, "executing program\n", 18) = 18 [pid 396] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 396] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 396] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 396] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 396] rmdir("./config/usb_gadget/g1") = 0 [pid 396] exit_group(0) = ? [pid 396] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=396, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x555565efd760, 24) = 0 [pid 397] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 397 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 397] setpgid(0, 0) = 0 [pid 397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 397] write(3, "1000", 4) = 4 [pid 397] close(3) = 0 [pid 397] write(1, "executing program\n", 18) = 18 [pid 397] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 397] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 397] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 397] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 397] rmdir("./config/usb_gadget/g1") = 0 [pid 397] exit_group(0) = ? [pid 397] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=397, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 398 attached , child_tidptr=0x555565efd750) = 398 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 398] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 398] <... set_robust_list resumed>) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 398] setpgid(0, 0) = 0 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 398] write(3, "1000", 4) = 4 [pid 398] close(3) = 0 [pid 398] write(1, "executing program\n", 18) = 18 [pid 398] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 398] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 398] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 398] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 398] rmdir("./config/usb_gadget/g1") = 0 [pid 398] exit_group(0) = ? [pid 398] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=398, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 399 attached , child_tidptr=0x555565efd750) = 399 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 399] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 399] <... set_robust_list resumed>) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] write(1, "executing program\n", 18) = 18 [pid 399] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 399] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 399] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 399] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 399] rmdir("./config/usb_gadget/g1") = 0 [pid 399] exit_group(0) = ? [pid 399] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=399, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 400 attached , child_tidptr=0x555565efd750) = 400 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 400] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 400] <... set_robust_list resumed>) = 0 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] write(1, "executing program\n", 18) = 18 [pid 400] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 400] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 400] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 400] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 400] rmdir("./config/usb_gadget/g1") = 0 [pid 400] exit_group(0) = ? [pid 400] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 401 attached , child_tidptr=0x555565efd750) = 401 [pid 401] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 401] <... set_robust_list resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 401] setpgid(0, 0) = 0 [pid 401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 401] write(3, "1000", 4) = 4 [pid 401] close(3) = 0 [pid 401] write(1, "executing program\n", 18) = 18 [pid 401] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 401] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 401] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 401] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 401] rmdir("./config/usb_gadget/g1") = 0 [pid 401] exit_group(0) = ? [pid 401] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=401, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 402 attached , child_tidptr=0x555565efd750) = 402 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 402] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 402] <... set_robust_list resumed>) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 [pid 402] write(1, "executing program\n", 18) = 18 [pid 402] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 402] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 402] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 402] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 402] rmdir("./config/usb_gadget/g1") = 0 [pid 402] exit_group(0) = ? [pid 402] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=402, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 403 attached , child_tidptr=0x555565efd750) = 403 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 403] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 403] <... set_robust_list resumed>) = 0 [pid 403] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 403] setpgid(0, 0) = 0 [pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 403] write(3, "1000", 4) = 4 [pid 403] close(3) = 0 [pid 403] write(1, "executing program\n", 18) = 18 [pid 403] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 403] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 403] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 403] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 403] rmdir("./config/usb_gadget/g1") = 0 [pid 403] exit_group(0) = ? [pid 403] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=403, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 404 ci2-android-6-12-rust/strace-static-x86_64: Process 404 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 404] set_robust_list(0x555565efd760, 24) = 0 [pid 404] rt_sigprocmask(SIG_SETMASK, [] [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 404] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] write(1, "executing program\n", 18) = 18 executing program [pid 404] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 404] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 404] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 404] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 404] rmdir("./config/usb_gadget/g1") = 0 [pid 404] exit_group(0) = ? [pid 404] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=404, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 405 ci2-android-6-12-rust/strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x555565efd760, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 405] setpgid(0, 0) = 0 [pid 405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 405] write(3, "1000", 4) = 4 [pid 405] close(3) = 0 [pid 405] write(1, "executing program\n", 18) = 18 [pid 405] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 405] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 405] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 405] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 405] rmdir("./config/usb_gadget/g1") = 0 [pid 405] exit_group(0) = ? [pid 405] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=405, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 406 ci2-android-6-12-rust/strace-static-x86_64: Process 406 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] set_robust_list(0x555565efd760, 24) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 406] setpgid(0, 0) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] write(3, "1000", 4) = 4 [pid 406] close(3) = 0 executing program [pid 406] write(1, "executing program\n", 18) = 18 [pid 406] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 406] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 406] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 406] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 406] rmdir("./config/usb_gadget/g1") = 0 [pid 406] exit_group(0) = ? [pid 406] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=406, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 407 ci2-android-6-12-rust/strace-static-x86_64: Process 407 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 407] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 407] <... set_robust_list resumed>) = 0 [ 32.701504][ T381] [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0) = 0 [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4) = 4 [pid 407] close(3) = 0 [pid 407] write(1, "executing program\n", 18) = 18 executing program [pid 407] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 407] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 407] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 407] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 407] rmdir("./config/usb_gadget/g1") = 0 [pid 407] exit_group(0) = ? [pid 407] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=407, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 408 ci2-android-6-12-rust/strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 408] <... set_robust_list resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 408] write(3, "1000", 4) = 4 [pid 408] close(3) = 0 [pid 408] write(1, "executing program\n", 18) = 18 executing program [pid 408] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 408] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 408] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 408] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 33.021605][ T408] BUG: scheduling while atomic: syz-executor954/408/0x00000002 [ 33.029594][ T408] Modules linked in: [ 33.033628][ T408] CPU: 0 UID: 0 PID: 408 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 33.033651][ T408] Tainted: [W]=WARN [ 33.033655][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.033662][ T408] Call Trace: [ 33.033667][ T408] [ 33.033674][ T408] __dump_stack+0x21/0x30 [ 33.033695][ T408] dump_stack_lvl+0x140/0x1c0 [ 33.033710][ T408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.033726][ T408] dump_stack+0x19/0x20 [ 33.033739][ T408] __schedule_bug+0x12b/0x200 [ 33.033752][ T408] ? find_proxy_task+0x2460/0x2460 [ 33.033763][ T408] ? kernel_text_address+0xa9/0xe0 [ 33.033779][ T408] ? __kernel_text_address+0x11/0x40 [ 33.033792][ T408] ? unwind_get_return_address+0x51/0x90 [ 33.033807][ T408] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.033820][ T408] __schedule+0xb85/0x20b0 [ 33.033834][ T408] ? stack_trace_save+0xaa/0x100 [ 33.033846][ T408] ? __sched_text_start+0x10/0x10 [ 33.033857][ T408] ? __kasan_check_read+0x15/0x20 [ 33.033869][ T408] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 33.033879][ T408] ? __kasan_check_write+0x18/0x20 [ 33.033889][ T408] ? _raw_spin_lock_irq+0x93/0x120 [ 33.033900][ T408] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.033911][ T408] schedule+0xc5/0x240 [ 33.033922][ T408] schedule_preempt_disabled+0x14/0x30 [ 33.033934][ T408] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 33.033951][ T408] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 33.033966][ T408] ? try_to_wake_up+0x111a/0x1fd0 [ 33.033978][ T408] ? __kasan_check_write+0x18/0x20 [ 33.033989][ T408] ? wake_q_add_safe+0x29/0x100 [ 33.033998][ T408] ? __cfi_try_to_wake_up+0x10/0x10 [ 33.034010][ T408] ? rwsem_mark_wake+0x507/0x770 [ 33.034027][ T408] ? rwsem_read_trylock+0x275/0x5a0 [ 33.034112][ T408] ? wake_up_q+0x10a/0x1c0 [ 33.034128][ T408] ? downgrade_write+0x470/0x470 [ 33.034151][ T408] down_write+0x163/0x2b0 [ 33.034172][ T408] ? __cfi_down_write+0x10/0x10 [ 33.034195][ T408] ? down_read+0x7f/0xe0 [ 33.034209][ T408] ? __cfi_down_read+0x10/0x10 [ 33.034223][ T408] kernfs_remove_by_name_ns+0x8c/0x180 [ 33.034239][ T408] sysfs_unmerge_group+0xd7/0x130 [ 33.034252][ T408] dpm_sysfs_remove+0x7b/0xd0 [ 33.034268][ T408] device_del+0x241/0xcf0 [ 33.034278][ T408] ? __cfi_class_find_device+0x10/0x10 [ 33.034291][ T408] ? __cfi_device_del+0x10/0x10 [ 33.034300][ T408] ? __kasan_check_write+0x18/0x20 [ 33.034311][ T408] ? kobject_put+0x1cc/0x2a0 [ 33.034322][ T408] device_destroy+0xb0/0x100 [ 33.034332][ T408] ? __cfi_device_destroy+0x10/0x10 [ 33.034342][ T408] ? __kasan_check_write+0x18/0x20 [ 33.034354][ T408] android_device_destroy+0x118/0x180 [ 33.034371][ T408] gadgets_drop+0x1d/0x30 [ 33.034382][ T408] ? __cfi_gadgets_drop+0x10/0x10 [ 33.034393][ T408] configfs_rmdir+0x8ba/0x9b0 [ 33.034408][ T408] vfs_rmdir+0x3de/0x560 [ 33.034423][ T408] do_rmdir+0x29a/0x590 [ 33.034438][ T408] ? __cfi_do_rmdir+0x10/0x10 [ 33.034453][ T408] ? __kasan_check_write+0x18/0x20 [ 33.034464][ T408] __x64_sys_rmdir+0x4b/0x60 [ 33.034479][ T408] x64_sys_call+0xaf7/0x2ee0 [ 33.034490][ T408] do_syscall_64+0x57/0xf0 [ 33.034500][ T408] ? clear_bhb_loop+0x50/0xa0 [ 33.034515][ T408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.034529][ T408] RIP: 0033:0x7f83e72e3749 [ 33.034541][ T408] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.034551][ T408] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 33.034565][ T408] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 33.034573][ T408] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [pid 408] rmdir("./config/usb_gadget/g1") = 0 [pid 408] exit_group(0) = ? [pid 408] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=408, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 33.034581][ T408] RBP: 00000000000080d5 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 33.034588][ T408] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 33.034595][ T408] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 33.034604][ T408] [ 33.447184][ T408] BUG: scheduling while atomic: syz-executor954/408/0x00000000 [ 33.454779][ T408] Modules linked in: [ 33.458701][ T408] CPU: 0 UID: 0 PID: 408 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 33.458734][ T408] Tainted: [W]=WARN [ 33.458740][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.458752][ T408] Call Trace: [ 33.458759][ T408] [ 33.458766][ T408] __dump_stack+0x21/0x30 [ 33.458796][ T408] dump_stack_lvl+0x140/0x1c0 [ 33.458821][ T408] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.458847][ T408] dump_stack+0x19/0x20 [ 33.458870][ T408] __schedule_bug+0x12b/0x200 [ 33.458890][ T408] ? find_proxy_task+0x2460/0x2460 [ 33.458911][ T408] __schedule+0xb85/0x20b0 [ 33.458932][ T408] ? __wake_up_sync_key+0x1be/0x2c0 [ 33.458954][ T408] ? __cfi___wake_up_sync_key+0x10/0x10 [ 33.458976][ T408] ? __sched_text_start+0x10/0x10 [ 33.458997][ T408] ? __kasan_check_write+0x18/0x20 [ 33.459017][ T408] ? _raw_spin_lock_irq+0x93/0x120 [ 33.459035][ T408] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.459054][ T408] ? __kasan_check_read+0x15/0x20 [ 33.459072][ T408] ? cgroup_update_frozen+0x160/0x980 [ 33.459105][ T408] schedule+0xc5/0x240 [ 33.459124][ T408] ptrace_stop+0x528/0x8f0 [ 33.459146][ T408] ptrace_notify+0x1de/0x290 [ 33.459170][ T408] ? __cfi_ptrace_notify+0x10/0x10 [ 33.459194][ T408] ? __cfi_do_rmdir+0x10/0x10 [ 33.459220][ T408] ? __kasan_check_write+0x18/0x20 [ 33.459239][ T408] syscall_exit_work+0x84/0x150 [ 33.459257][ T408] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 33.459275][ T408] syscall_exit_to_user_mode+0x15/0xb0 [ 33.459301][ T408] do_syscall_64+0x63/0xf0 [ 33.459319][ T408] ? clear_bhb_loop+0x50/0xa0 [ 33.459343][ T408] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.459366][ T408] RIP: 0033:0x7f83e72e3749 [ 33.459383][ T408] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.459398][ T408] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... clone resumed>, child_tidptr=0x555565efd750) = 409 [pid 409] rt_sigprocmask(SIG_SETMASK, [] [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 409] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 409] setpgid(0, 0) = 0 [pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 409] write(3, "1000", 4) = 4 [pid 409] close(3) = 0 [pid 409] write(1, "executing program\n", 18) = 18 [pid 409] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 409] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 409] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 409] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 409] rmdir("./config/usb_gadget/g1") = 0 [pid 409] exit_group(0) = ? [pid 409] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=409, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 410 ci2-android-6-12-rust/strace-static-x86_64: Process 410 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] set_robust_list(0x555565efd760, 24) = 0 [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 410] setpgid(0, 0) = 0 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 410] write(3, "1000", 4) = 4 [pid 410] close(3) = 0 [pid 410] write(1, "executing program\n", 18) = 18 [pid 410] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 410] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 410] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 410] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 410] rmdir("./config/usb_gadget/g1") = 0 [pid 410] exit_group(0) = ? [pid 410] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=410, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 411 attached , child_tidptr=0x555565efd750) = 411 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 411] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 411] <... set_robust_list resumed>) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 411] setpgid(0, 0) = 0 [pid 411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 411] write(3, "1000", 4) = 4 [pid 411] close(3) = 0 [pid 411] write(1, "executing program\n", 18) = 18 executing program [pid 411] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 411] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 411] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 411] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 411] rmdir("./config/usb_gadget/g1") = 0 [pid 411] exit_group(0) = ? [pid 411] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=411, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 412 ci2-android-6-12-rust/strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 412] <... set_robust_list resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 412] close(3) = 0 [pid 412] write(1, "executing program\n", 18) = 18 executing program [pid 412] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 412] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 412] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 412] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 412] rmdir("./config/usb_gadget/g1") = 0 [pid 412] exit_group(0) = ? [pid 412] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 33.459418][ T408] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 33.459431][ T408] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 33.459444][ T408] RBP: 00000000000080d5 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 33.459458][ T408] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 33.459471][ T408] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 33.459486][ T408] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 413 attached , child_tidptr=0x555565efd750) = 413 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 413] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 413] <... set_robust_list resumed>) = 0 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 413] setpgid(0, 0) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 413] write(3, "1000", 4) = 4 [pid 413] close(3) = 0 executing program [pid 413] write(1, "executing program\n", 18) = 18 [pid 413] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 413] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 413] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 413] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 413] rmdir("./config/usb_gadget/g1") = 0 [pid 413] exit_group(0) = ? [pid 413] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=413, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 414 rt_sigprocmask(SIG_SETMASK, []ci2-android-6-12-rust/strace-static-x86_64: Process 414 attached , NULL, 8) = 0 [pid 414] set_robust_list(0x555565efd760, 24) = 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4) = 4 [pid 414] close(3) = 0 [pid 414] write(1, "executing program\n", 18) = 18 executing program [pid 414] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 414] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 414] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 414] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 414] rmdir("./config/usb_gadget/g1") = 0 [pid 414] exit_group(0) = ? [pid 414] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=414, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 415 ci2-android-6-12-rust/strace-static-x86_64: Process 415 attached [pid 415] set_robust_list(0x555565efd760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 415] setpgid(0, 0) = 0 [pid 415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 415] write(3, "1000", 4) = 4 [pid 415] close(3) = 0 [pid 415] write(1, "executing program\n", 18) = 18 executing program [pid 415] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 415] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 415] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 415] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 415] rmdir("./config/usb_gadget/g1") = 0 [pid 415] exit_group(0) = ? [pid 415] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=415, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 416 attached , child_tidptr=0x555565efd750) = 416 [pid 416] set_robust_list(0x555565efd760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 416] setpgid(0, 0) = 0 [pid 416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 416] write(3, "1000", 4) = 4 [pid 416] close(3) = 0 [pid 416] write(1, "executing program\n", 18) = 18 [pid 416] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 416] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 416] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 416] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 416] rmdir("./config/usb_gadget/g1") = 0 [pid 416] exit_group(0) = ? [pid 416] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=416, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 417 ci2-android-6-12-rust/strace-static-x86_64: Process 417 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] set_robust_list(0x555565efd760, 24) = 0 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 417] setpgid(0, 0) = 0 [pid 417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 417] write(3, "1000", 4) = 4 [pid 417] close(3) = 0 executing program [pid 417] write(1, "executing program\n", 18) = 18 [pid 417] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 417] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 417] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 417] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 417] rmdir("./config/usb_gadget/g1") = 0 [pid 417] exit_group(0) = ? [pid 417] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=417, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 418 ci2-android-6-12-rust/strace-static-x86_64: Process 418 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 418] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 418] <... set_robust_list resumed>) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 [pid 418] write(1, "executing program\n", 18) = 18 [pid 418] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 418] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) executing program [pid 418] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 418] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 418] rmdir("./config/usb_gadget/g1") = 0 [pid 418] exit_group(0) = ? [pid 418] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=418, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 419 attached , child_tidptr=0x555565efd750) = 419 [pid 419] set_robust_list(0x555565efd760, 24 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 419] <... set_robust_list resumed>) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 419] setpgid(0, 0) = 0 [pid 419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 419] write(3, "1000", 4) = 4 [pid 419] close(3) = 0 executing program [pid 419] write(1, "executing program\n", 18) = 18 [pid 419] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 419] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 419] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 419] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 419] rmdir("./config/usb_gadget/g1") = 0 [pid 419] exit_group(0) = ? [pid 419] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=419, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 420 ci2-android-6-12-rust/strace-static-x86_64: Process 420 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 420] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 420] close(3) = 0 [pid 420] write(1, "executing program\n", 18) = 18 executing program [pid 420] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 420] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 420] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 420] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 420] rmdir("./config/usb_gadget/g1") = 0 [pid 420] exit_group(0) = ? [pid 420] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=420, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 421 ci2-android-6-12-rust/strace-static-x86_64: Process 421 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 421] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 421] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 421] setpgid(0, 0) = 0 [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 421] write(3, "1000", 4) = 4 [pid 421] close(3) = 0 [pid 421] write(1, "executing program\n", 18) = 18 executing program [pid 421] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 421] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 421] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 421] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 421] rmdir("./config/usb_gadget/g1") = 0 [pid 421] exit_group(0) = ? [pid 421] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=421, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 422 ci2-android-6-12-rust/strace-static-x86_64: Process 422 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 422] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 422] setpgid(0, 0) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 [pid 422] write(1, "executing program\n", 18) = 18 executing program [pid 422] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 422] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 422] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 422] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 422] rmdir("./config/usb_gadget/g1") = 0 [pid 422] exit_group(0) = ? [pid 422] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=422, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 423 ci2-android-6-12-rust/strace-static-x86_64: Process 423 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] set_robust_list(0x555565efd760, 24) = 0 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 423] setpgid(0, 0) = 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 423] write(3, "1000", 4) = 4 [pid 423] close(3) = 0 executing program [pid 423] write(1, "executing program\n", 18) = 18 [pid 423] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 423] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 423] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 423] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 423] rmdir("./config/usb_gadget/g1") = 0 [pid 423] exit_group(0) = ? [pid 423] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=423, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 424 ci2-android-6-12-rust/strace-static-x86_64: Process 424 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] set_robust_list(0x555565efd760, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 424] setpgid(0, 0) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 424] write(3, "1000", 4) = 4 [pid 424] close(3) = 0 executing program [pid 424] write(1, "executing program\n", 18) = 18 [pid 424] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 424] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 424] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 424] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 424] rmdir("./config/usb_gadget/g1") = 0 [pid 424] exit_group(0) = ? [pid 424] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=424, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 425 ci2-android-6-12-rust/strace-static-x86_64: Process 425 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 425] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 425] <... set_robust_list resumed>) = 0 [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 425] setpgid(0, 0) = 0 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 425] write(3, "1000", 4) = 4 [pid 425] close(3) = 0 executing program [pid 425] write(1, "executing program\n", 18) = 18 [pid 425] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 425] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 425] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 425] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 425] rmdir("./config/usb_gadget/g1") = 0 [pid 425] exit_group(0) = ? [pid 425] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=425, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 426 ci2-android-6-12-rust/strace-static-x86_64: Process 426 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] set_robust_list(0x555565efd760, 24) = 0 [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 426] setpgid(0, 0) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 426] write(3, "1000", 4) = 4 [pid 426] close(3) = 0 executing program [pid 426] write(1, "executing program\n", 18) = 18 [pid 426] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 426] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 426] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 426] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 426] rmdir("./config/usb_gadget/g1") = 0 [pid 426] exit_group(0) = ? [pid 426] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=426, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 427 ci2-android-6-12-rust/strace-static-x86_64: Process 427 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 427] set_robust_list(0x555565efd760, 24) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 427] setpgid(0, 0) = 0 [pid 427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 427] write(3, "1000", 4) = 4 [pid 427] close(3) = 0 [pid 427] write(1, "executing program\n", 18) = 18 executing program [pid 427] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 427] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 427] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 427] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 427] rmdir("./config/usb_gadget/g1") = 0 [pid 427] exit_group(0) = ? [pid 427] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=427, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 428 ci2-android-6-12-rust/strace-static-x86_64: Process 428 attached [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 428] set_robust_list(0x555565efd760, 24 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 428] <... set_robust_list resumed>) = 0 [pid 428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 428] setpgid(0, 0) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 428] write(3, "1000", 4) = 4 [pid 428] close(3) = 0 [pid 428] write(1, "executing program\n", 18) = 18 executing program [pid 428] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 428] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 428] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 428] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 428] rmdir("./config/usb_gadget/g1") = 0 [pid 428] exit_group(0) = ? [pid 428] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=428, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 429 ci2-android-6-12-rust/strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x555565efd760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [] [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 313] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 429] setpgid(0, 0) = 0 [pid 429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 429] write(3, "1000", 4) = 4 [pid 429] close(3) = 0 [pid 429] write(1, "executing program\n", 18) = 18 [pid 429] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 429] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 429] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 429] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 429] rmdir("./config/usb_gadget/g1") = 0 [pid 429] exit_group(0) = ? [pid 429] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=429, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565efd750) = 430 ci2-android-6-12-rust/strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x555565efd760, 24) = 0 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 430] setpgid(0, 0) = 0 [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 430] write(3, "1000", 4) = 4 [pid 430] close(3) = 0 [pid 430] write(1, "executing program\n", 18) = 18 [pid 430] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 430] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 430] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 430] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [pid 430] rmdir("./config/usb_gadget/g1") = 0 [pid 430] exit_group(0) = ? [pid 430] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=430, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-12-rust/strace-static-x86_64: Process 431 attached , child_tidptr=0x555565efd750) = 431 [pid 313] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] set_robust_list(0x555565efd760, 24) = 0 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 431] setpgid(0, 0) = 0 [pid 431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 431] write(3, "1000", 4) = 4 [pid 431] close(3) = 0 executing program [pid 431] write(1, "executing program\n", 18) = 18 [pid 431] write(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 431] mkdirat(AT_FDCWD, "./config", 0777) = -1 EEXIST (File exists) [pid 431] mount(NULL, "./config", "configfs", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 431] mkdirat(AT_FDCWD, "./config/usb_gadget/g1", 0776) = 0 [ 33.980381][ T431] BUG: scheduling while atomic: syz-executor954/431/0x00000002 [ 33.988122][ T431] Modules linked in: [ 33.992154][ T431] CPU: 1 UID: 0 PID: 431 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 33.992178][ T431] Tainted: [W]=WARN [ 33.992182][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.992188][ T431] Call Trace: [ 33.992193][ T431] [ 33.992198][ T431] __dump_stack+0x21/0x30 [ 33.992218][ T431] dump_stack_lvl+0x140/0x1c0 [ 33.992233][ T431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.992249][ T431] dump_stack+0x19/0x20 [ 33.992262][ T431] __schedule_bug+0x12b/0x200 [ 33.992275][ T431] ? find_proxy_task+0x2460/0x2460 [ 33.992286][ T431] ? __kasan_check_read+0x15/0x20 [ 33.992297][ T431] ? psi_group_change+0xab6/0x10a0 [ 33.992312][ T431] __schedule+0xb85/0x20b0 [ 33.992325][ T431] ? update_curr+0xf1/0x9c0 [ 33.992336][ T431] ? __sched_text_start+0x10/0x10 [ 33.992348][ T431] ? __kasan_check_read+0x15/0x20 [ 33.992358][ T431] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 33.992368][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992378][ T431] ? _raw_spin_lock_irq+0x93/0x120 [ 33.992389][ T431] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.992417][ T431] schedule+0xc5/0x240 [ 33.992429][ T431] schedule_preempt_disabled+0x14/0x30 [ 33.992441][ T431] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 33.992457][ T431] ? activate_task+0x43b/0x480 [ 33.992468][ T431] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 33.992483][ T431] ? try_to_wake_up+0x111a/0x1fd0 [ 33.992495][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992506][ T431] ? wake_q_add_safe+0x29/0x100 [ 33.992515][ T431] ? __cfi_try_to_wake_up+0x10/0x10 [ 33.992527][ T431] ? rwsem_mark_wake+0x507/0x770 [ 33.992543][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992553][ T431] ? rwsem_read_trylock+0x275/0x5a0 [ 33.992569][ T431] ? downgrade_write+0x470/0x470 [ 33.992585][ T431] down_write+0x163/0x2b0 [ 33.992598][ T431] ? __cfi_down_write+0x10/0x10 [ 33.992613][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992623][ T431] kernfs_remove_by_name_ns+0x8c/0x180 [ 33.992639][ T431] sysfs_remove_group+0x108/0x250 [ 33.992652][ T431] dpm_sysfs_remove+0x99/0xd0 [ 33.992668][ T431] device_del+0x241/0xcf0 [ 33.992678][ T431] ? __cfi_class_find_device+0x10/0x10 [ 33.992690][ T431] ? __cfi_device_del+0x10/0x10 [ 33.992700][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992710][ T431] ? kobject_put+0x1cc/0x2a0 [ 33.992721][ T431] device_destroy+0xb0/0x100 [ 33.992731][ T431] ? __cfi_device_destroy+0x10/0x10 [ 33.992741][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992752][ T431] android_device_destroy+0x118/0x180 [ 33.992769][ T431] gadgets_drop+0x1d/0x30 [ 33.992779][ T431] ? __cfi_gadgets_drop+0x10/0x10 [ 33.992790][ T431] configfs_rmdir+0x8ba/0x9b0 [ 33.992805][ T431] vfs_rmdir+0x3de/0x560 [ 33.992820][ T431] do_rmdir+0x29a/0x590 [ 33.992835][ T431] ? __cfi_do_rmdir+0x10/0x10 [ 33.992850][ T431] ? __kasan_check_write+0x18/0x20 [ 33.992861][ T431] __x64_sys_rmdir+0x4b/0x60 [ 33.992875][ T431] x64_sys_call+0xaf7/0x2ee0 [ 33.992885][ T431] do_syscall_64+0x57/0xf0 [ 33.992898][ T431] ? clear_bhb_loop+0x50/0xa0 [ 33.992918][ T431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.992937][ T431] RIP: 0033:0x7f83e72e3749 [ 33.992951][ T431] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 33.992962][ T431] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 33.992975][ T431] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 33.992983][ T431] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 33.992991][ T431] RBP: 0000000000008495 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 33.992998][ T431] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 33.993005][ T431] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 33.993014][ T431] [ 33.993225][ T431] BUG: scheduling while atomic: syz-executor954/431/0x00000000 [ 34.393365][ T431] Modules linked in: [ 34.397337][ [ 34.397337][ T431] CPU: 0 UID: 0 PID: 431 Comm: syz-executor954 Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.397372][ T431] Tainted: [W]=WARN [ 34.397378][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.397387][ T431] Call Trace: [ 34.397392][ T431] [ 34.397398][ T431] __dump_stack+0x21/0x30 [ 34.397434][ T431] dump_stack_lvl+0x140/0x1c0 [ 34.397457][ T431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.397480][ T431] dump_stack+0x19/0x20 [ 34.397503][ T431] __schedule_bug+0x12b/0x200 [ 34.397524][ T431] ? find_proxy_task+0x2460/0x2460 [ 34.397546][ T431] __schedule+0xb85/0x20b0 [ 34.397568][ T431] ? __wake_up_sync_key+0x1be/0x2c0 [ 34.397592][ T431] ? __cfi___wake_up_sync_key+0x10/0x10 [ 34.397616][ T431] ? __sched_text_start+0x10/0x10 [ 34.397639][ T431] ? __kasan_check_write+0x18/0x20 [ 34.397659][ T431] ? _raw_spin_lock_irq+0x93/0x120 [ 34.397678][ T431] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 34.397698][ T431] ? __kasan_check_read+0x15/0x20 [ 34.397716][ T431] ? cgroup_update_frozen+0x160/0x980 [ 34.397742][ T431] schedule+0xc5/0x240 [ 34.397762][ T431] ptrace_stop+0x528/0x8f0 [ 34.397784][ T431] ptrace_notify+0x1de/0x290 [ 34.397808][ T431] ? __cfi_ptrace_notify+0x10/0x10 [ 34.397833][ T431] ? __cfi_do_rmdir+0x10/0x10 [ 34.397859][ T431] ? __kasan_check_write+0x18/0x20 [ 34.397877][ T431] syscall_exit_work+0x84/0x150 [ 34.397894][ T431] syscall_exit_to_user_mode_prepare+0x21/0x40 [ 34.397913][ T431] syscall_exit_to_user_mode+0x15/0xb0 [ 34.397933][ T431] do_syscall_64+0x63/0xf0 [ 34.397948][ T431] ? clear_bhb_loop+0x50/0xa0 [ 34.397969][ T431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.397992][ T431] RIP: 0033:0x7f83e72e3749 [ 34.398009][ T431] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 34.398025][ T431] RSP: 002b:00007ffec7ea4af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 34.398046][ T431] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f83e72e3749 [ 34.398059][ T431] RDX: 0031672f74656764 RSI: e34bac93bc3e9a94 RDI: 0000200000000140 [ 34.398079][ T431] RBP: 0000000000008495 R08: 00007ffec7ea4b1c R09: 00007ffec7ea4b1c [ 34.398096][ T431] R10: 00007ffec7ea4b1c R11: 0000000000000246 R12: 00007ffec7ea4b1c [ 34.398109][ T431] R13: 431bde82d7b634db R14: 00007ffec7ea4b30 R15: 0000000000000002 [ 34.398125][ T431] [ 34.398139][ T431] psi: inconsistent task state! task=93:syslogd cpu=1 psi_flags=14 clear=0 set=10 [ 34.398159][ T93] ================================================================== [ 34.398223][ T93] Oops: general protection fault, probably for non-canonical address 0x3fffea303eee5fcf: 0000 [#1] PREEMPT SMP KASAN PTI [ 34.398252][ T93] CPU: 0 UID: 0 PID: 93 Comm: syslogd Tainted: G W syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.398280][ T93] Tainted: [W]=WARN [ 34.398286][ T93] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.398346][ T93] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: gp_try_fixup_and_notify+0x1c2/0x1e0 [ 35.489452][ T93] Shutting down cpus with NMI [ 35.489701][ T93] Kernel Offset: disabled