./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor461249489

<...>
Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
execve("./syz-executor461249489", ["./syz-executor461249489"], 0x7ffe2ab844b0 /* 10 vars */) = 0
brk(NULL)                               = 0x55558c65a000
brk(0x55558c65ad00)                     = 0x55558c65ad00
arch_prctl(ARCH_SET_FS, 0x55558c65a380) = 0
set_tid_address(0x55558c65a650)         = 5081
set_robust_list(0x55558c65a660, 24)     = 0
rseq(0x55558c65aca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor461249489", 4096) = 27
getrandom("\x1a\xb6\x00\xcb\x91\x20\xf1\xec", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558c65ad00
brk(0x55558c67bd00)                     = 0x55558c67bd00
brk(0x55558c67c000)                     = 0x55558c67c000
mprotect(0x7f4aaff19000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached
, child_tidptr=0x55558c65a650) = 5082
[pid  5082] set_robust_list(0x55558c65a660, 24) = 0
[pid  5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5082] mkdir("./syzkaller.QYB9xK", 0700./strace-static-x86_64: Process 5083 attached
) = 0
[pid  5081] <... clone resumed>, child_tidptr=0x55558c65a650) = 5083
[pid  5083] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5083] <... set_robust_list resumed>) = 0
[pid  5083] mkdir("./syzkaller.c8V18u", 0700 <unfinished ...>
[pid  5082] chmod("./syzkaller.QYB9xK", 0777./strace-static-x86_64: Process 5084 attached
 <unfinished ...>
[pid  5081] <... clone resumed>, child_tidptr=0x55558c65a650) = 5084
[pid  5084] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5082] <... chmod resumed>)        = 0
[pid  5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5084] <... set_robust_list resumed>) = 0
[pid  5083] <... mkdir resumed>)        = 0
[pid  5084] mkdir("./syzkaller.0UEMaE", 0700 <unfinished ...>
[pid  5083] chmod("./syzkaller.c8V18u", 0777 <unfinished ...>
[pid  5082] chdir("./syzkaller.QYB9xK" <unfinished ...>
[pid  5083] <... chmod resumed>)        = 0
[pid  5082] <... chdir resumed>)        = 0
[pid  5083] chdir("./syzkaller.c8V18u" <unfinished ...>
[pid  5082] mkdir("./0", 0777 <unfinished ...>
[pid  5083] <... chdir resumed>)        = 0
[pid  5084] <... mkdir resumed>)        = 0
[pid  5084] chmod("./syzkaller.0UEMaE", 0777) = 0
[pid  5082] <... mkdir resumed>)        = 0
[  104.178386][   T28] audit: type=1400 audit(1715556598.095:87): avc:  denied  { execmem } for  pid=5081 comm="syz-executor461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
./strace-static-x86_64: Process 5085 attached
[pid  5081] <... clone resumed>, child_tidptr=0x55558c65a650) = 5085
[pid  5083] mkdir("./0", 0777 <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5084] chdir("./syzkaller.0UEMaE" <unfinished ...>
[pid  5085] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5086 attached
[pid  5085] <... set_robust_list resumed>) = 0
[pid  5084] <... chdir resumed>)        = 0
[pid  5083] <... mkdir resumed>)        = 0
[pid  5081] <... clone resumed>, child_tidptr=0x55558c65a650) = 5086
[pid  5086] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5082] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5086] <... set_robust_list resumed>) = 0
[pid  5082] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5086] mkdir("./syzkaller.WQoOfO", 0700 <unfinished ...>
[pid  5082] close(3 <unfinished ...>
[pid  5086] <... mkdir resumed>)        = 0
[pid  5085] mkdir("./syzkaller.MGSxNM", 0700 <unfinished ...>
[pid  5084] mkdir("./0", 0777 <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5086] chmod("./syzkaller.WQoOfO", 0777 <unfinished ...>
[pid  5085] <... mkdir resumed>)        = 0
[pid  5084] <... mkdir resumed>)        = 0
[pid  5083] <... openat resumed>)       = 3
[pid  5082] <... close resumed>)        = 0
[pid  5086] <... chmod resumed>)        = 0
[pid  5086] chdir("./syzkaller.WQoOfO") = 0
[pid  5086] mkdir("./0", 0777 <unfinished ...>
[pid  5083] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid  5086] <... mkdir resumed>)        = 0
[pid  5085] chmod("./syzkaller.MGSxNM", 0777 <unfinished ...>
[pid  5084] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[  104.242275][   T28] audit: type=1400 audit(1715556598.155:88): avc:  denied  { read write } for  pid=5082 comm="syz-executor461" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  104.267108][   T28] audit: type=1400 audit(1715556598.165:89): avc:  denied  { open } for  pid=5082 comm="syz-executor461" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid  5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5083] close(3 <unfinished ...>
[pid  5085] <... chmod resumed>)        = 0
[pid  5084] <... openat resumed>)       = 3
[pid  5085] chdir("./syzkaller.MGSxNM") = 0
[pid  5085] mkdir("./0", 0777 <unfinished ...>
[pid  5083] <... close resumed>)        = 0
[pid  5085] <... mkdir resumed>)        = 0
[pid  5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5085] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5084] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached
 <unfinished ...>
[pid  5086] <... openat resumed>)       = 3
[pid  5085] <... openat resumed>)       = 3
[pid  5084] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5082] <... clone resumed>, child_tidptr=0x55558c65a650) = 5087
./strace-static-x86_64: Process 5088 attached
[pid  5087] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5086] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5085] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5084] close(3 <unfinished ...>
[pid  5083] <... clone resumed>, child_tidptr=0x55558c65a650) = 5088
[pid  5088] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5087] <... set_robust_list resumed>) = 0
[pid  5086] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5085] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5084] <... close resumed>)        = 0
[pid  5085] close(3 <unfinished ...>
[pid  5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5088] <... set_robust_list resumed>) = 0
[pid  5085] <... close resumed>)        = 0
[pid  5088] chdir("./0" <unfinished ...>
[pid  5086] close(3 <unfinished ...>
[pid  5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5088] <... chdir resumed>)        = 0
[pid  5087] chdir("./0" <unfinished ...>
[pid  5086] <... close resumed>)        = 0
./strace-static-x86_64: Process 5090 attached
./strace-static-x86_64: Process 5089 attached
[pid  5088] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5087] <... chdir resumed>)        = 0
[pid  5086] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5085] <... clone resumed>, child_tidptr=0x55558c65a650) = 5090
[pid  5084] <... clone resumed>, child_tidptr=0x55558c65a650) = 5089
[pid  5090] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5089] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5088] <... prctl resumed>)        = 0
[pid  5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5089] <... set_robust_list resumed>) = 0
[pid  5090] <... set_robust_list resumed>) = 0
[pid  5089] chdir("./0" <unfinished ...>
[pid  5088] setpgid(0, 0 <unfinished ...>
[pid  5087] setpgid(0, 0 <unfinished ...>
[pid  5089] <... chdir resumed>)        = 0
[pid  5087] <... setpgid resumed>)      = 0
[pid  5089] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5088] <... setpgid resumed>)      = 0
[pid  5090] chdir("./0" <unfinished ...>
[pid  5089] <... prctl resumed>)        = 0
[pid  5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5090] <... chdir resumed>)        = 0
[pid  5089] setpgid(0, 0 <unfinished ...>
[pid  5088] <... openat resumed>)       = 3
[pid  5090] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5089] <... setpgid resumed>)      = 0
[pid  5087] <... openat resumed>)       = 3
[pid  5090] <... prctl resumed>)        = 0
[pid  5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5091 attached
 <unfinished ...>
[pid  5090] setpgid(0, 0 <unfinished ...>
[pid  5087] write(3, "1000", 4 <unfinished ...>
[pid  5086] <... clone resumed>, child_tidptr=0x55558c65a650) = 5091
[pid  5091] set_robust_list(0x55558c65a660, 24 <unfinished ...>
[pid  5090] <... setpgid resumed>)      = 0
[pid  5089] <... openat resumed>)       = 3
[pid  5088] write(3, "1000", 4 <unfinished ...>
[pid  5087] <... write resumed>)        = 4
[pid  5091] <... set_robust_list resumed>) = 0
[pid  5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5089] write(3, "1000", 4 <unfinished ...>
[pid  5088] <... write resumed>)        = 4
[pid  5087] close(3 <unfinished ...>
[pid  5091] chdir("./0" <unfinished ...>
[pid  5090] <... openat resumed>)       = 3
[pid  5089] <... write resumed>)        = 4
[pid  5088] close(3 <unfinished ...>
[pid  5087] <... close resumed>)        = 0
[pid  5089] close(3 <unfinished ...>
[pid  5087] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5091] <... chdir resumed>)        = 0
[pid  5090] write(3, "1000", 4 <unfinished ...>
[pid  5089] <... close resumed>)        = 0
[pid  5088] <... close resumed>)        = 0
[pid  5091] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5090] <... write resumed>)        = 4
[pid  5088] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5091] <... prctl resumed>)        = 0
[pid  5090] close(3 <unfinished ...>
[pid  5089] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5088] <... symlink resumed>)      = 0
[pid  5087] <... symlink resumed>)      = 0
[pid  5091] setpgid(0, 0 <unfinished ...>
[pid  5090] <... close resumed>)        = 0
[  104.292949][   T28] audit: type=1400 audit(1715556598.165:90): avc:  denied  { ioctl } for  pid=5082 comm="syz-executor461" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid  5090] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5087] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5091] <... setpgid resumed>)      = 0
[pid  5090] <... symlink resumed>)      = 0
[pid  5089] <... symlink resumed>)      = 0
[pid  5087] <... memfd_create resumed>) = 3
[pid  5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5088] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5090] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5087] <... mmap resumed>)         = 0x7f4aa7a00000
[pid  5088] <... memfd_create resumed>) = 3
[pid  5091] <... openat resumed>)       = 3
[pid  5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5091] write(3, "1000", 4 <unfinished ...>
[pid  5090] <... memfd_create resumed>) = 3
[pid  5088] <... mmap resumed>)         = 0x7f4aa7a00000
[pid  5091] <... write resumed>)        = 4
[pid  5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5091] close(3 <unfinished ...>
[pid  5090] <... mmap resumed>)         = 0x7f4aa7a00000
[pid  5091] <... close resumed>)        = 0
[pid  5089] memfd_create("syzkaller", 0) = 3
[pid  5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4aa7a00000
[pid  5091] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5091] memfd_create("syzkaller", 0) = 3
[pid  5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4aa7a00000
[pid  5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5089] <... write resumed>)        = 16777216
[pid  5089] munmap(0x7f4aa7a00000, 138412032 <unfinished ...>
[pid  5087] <... write resumed>)        = 16777216
[pid  5088] <... write resumed>)        = 16777216
[pid  5089] <... munmap resumed>)       = 0
[pid  5088] munmap(0x7f4aa7a00000, 138412032 <unfinished ...>
[pid  5087] munmap(0x7f4aa7a00000, 138412032 <unfinished ...>
[pid  5089] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid  5089] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5090] <... write resumed>)        = 16777216
[pid  5087] <... munmap resumed>)       = 0
[pid  5090] munmap(0x7f4aa7a00000, 138412032 <unfinished ...>
[pid  5089] <... ioctl resumed>)        = 0
[pid  5088] <... munmap resumed>)       = 0
[pid  5089] close(3)                    = 0
[pid  5089] close(4 <unfinished ...>
[pid  5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5089] <... close resumed>)        = 0
[pid  5088] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5087] <... openat resumed>)       = 4
[pid  5089] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 <unfinished ...>
[pid  5088] <... openat resumed>)       = 4
[pid  5089] <... mkdir resumed>)        = 0
[pid  5088] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5087] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5091] <... write resumed>)        = 16777216
[  105.754867][ T5089] loop2: detected capacity change from 0 to 32768
[pid  5089] mount("/dev/loop2", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "noquota,grpquota,integrity,integrity,errors=remount-ro,nointegrity,iocharset=cp864" <unfinished ...>
[pid  5091] munmap(0x7f4aa7a00000, 138412032 <unfinished ...>
[pid  5090] <... munmap resumed>)       = 0
[  105.809904][ T5087] loop0: detected capacity change from 0 to 32768
[  105.816687][ T5088] loop1: detected capacity change from 0 to 32768
[pid  5088] <... ioctl resumed>)        = 0
[pid  5091] <... munmap resumed>)       = 0
[pid  5090] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5087] <... ioctl resumed>)        = 0
[pid  5088] close(3)                    = 0
[pid  5088] close(4 <unfinished ...>
[pid  5087] close(3 <unfinished ...>
[pid  5088] <... close resumed>)        = 0
[pid  5087] <... close resumed>)        = 0
[pid  5087] close(4 <unfinished ...>
[pid  5088] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 <unfinished ...>
[pid  5087] <... close resumed>)        = 0
[pid  5088] <... mkdir resumed>)        = 0
[pid  5087] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[pid  5087] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "noquota,grpquota,integrity,integrity,errors=remount-ro,nointegrity,iocharset=cp864" <unfinished ...>
[pid  5088] mount("/dev/loop1", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "noquota,grpquota,integrity,integrity,errors=remount-ro,nointegrity,iocharset=cp864" <unfinished ...>
[  105.829204][   T28] audit: type=1400 audit(1715556599.745:91): avc:  denied  { mounton } for  pid=5089 comm="syz-executor461" path=2F726F6F742F73797A6B616C6C65722E3055454D61452F302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  105.848832][ T5089] =======================================================
[  105.848832][ T5089] WARNING: The mand mount option has been deprecated and
[  105.848832][ T5089]          and is ignored by this kernel. Remove the mand
[  105.848832][ T5089]          option from the mount to silence this warning.
[  105.848832][ T5089] =======================================================
[pid  5091] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5090] <... openat resumed>)       = 4
[pid  5091] <... openat resumed>)       = 4
[pid  5090] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5091] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5091] close(3 <unfinished ...>
[pid  5090] <... ioctl resumed>)        = 0
[pid  5091] <... close resumed>)        = 0
[pid  5090] close(3 <unfinished ...>
[pid  5091] close(4 <unfinished ...>
[pid  5090] <... close resumed>)        = 0
[pid  5091] <... close resumed>)        = 0
[pid  5090] close(4 <unfinished ...>
[pid  5091] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 <unfinished ...>
[pid  5090] <... close resumed>)        = 0
[pid  5090] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[pid  5090] mount("/dev/loop3", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "noquota,grpquota,integrity,integrity,errors=remount-ro,nointegrity,iocharset=cp864" <unfinished ...>
[pid  5091] <... mkdir resumed>)        = 0
[pid  5091] mount("/dev/loop4", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "noquota,grpquota,integrity,integrity,errors=remount-ro,nointegrity,iocharset=cp864" <unfinished ...>
[pid  5089] <... mount resumed>)        = 0
[pid  5087] <... mount resumed>)        = 0
[  105.914720][ T5090] loop3: detected capacity change from 0 to 32768
[  105.923138][ T5091] loop4: detected capacity change from 0 to 32768
[pid  5089] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5088] <... mount resumed>)        = 0
[pid  5087] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5088] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5089] <... openat resumed>)       = 3
[pid  5088] <... openat resumed>)       = 3
[pid  5088] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5087] <... openat resumed>)       = 3
[pid  5087] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
[pid  5088] <... chdir resumed>)        = 0
[pid  5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5088] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5087] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5088] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5087] exit_group(0 <unfinished ...>
[pid  5088] exit_group(0 <unfinished ...>
[pid  5087] <... exit_group resumed>)   = ?
[pid  5087] +++ exited with 0 +++
[pid  5088] <... exit_group resumed>)   = ?
[pid  5089] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} ---
[pid  5089] <... chdir resumed>)        = 0
[  105.964764][   T28] audit: type=1400 audit(1715556599.885:92): avc:  denied  { mount } for  pid=5088 comm="syz-executor461" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[pid  5088] +++ exited with 0 +++
[pid  5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} ---
[pid  5082] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5091] <... mount resumed>)        = 0
[pid  5090] <... mount resumed>)        = 0
[pid  5089] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5082] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5091] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5090] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5083] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
[pid  5083] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5082] newfstatat(3, "",  <unfinished ...>
[pid  5090] <... openat resumed>)       = 3
[pid  5083] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5091] <... openat resumed>)       = 3
[pid  5082] getdents64(3,  <unfinished ...>
[pid  5083] <... openat resumed>)       = 3
[pid  5082] <... getdents64 resumed>0x55558c65b6f0 /* 4 entries */, 32768) = 176
[pid  5091] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5090] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5083] newfstatat(3, "",  <unfinished ...>
[pid  5082] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5089] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5091] <... chdir resumed>)        = 0
[pid  5082] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5090] <... chdir resumed>)        = 0
[pid  5083] getdents64(3,  <unfinished ...>
[pid  5082] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5083] <... getdents64 resumed>0x55558c65b6f0 /* 4 entries */, 32768) = 176
[pid  5083] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5090] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5083] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5082] unlink("./0/binderfs" <unfinished ...>
[pid  5090] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5082] <... unlink resumed>)       = 0
[pid  5083] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5082] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5090] exit_group(0 <unfinished ...>
[pid  5083] unlink("./0/binderfs" <unfinished ...>
[pid  5091] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5090] <... exit_group resumed>)   = ?
[pid  5089] exit_group(0)               = ?
[  106.006376][   T28] audit: type=1400 audit(1715556599.885:93): avc:  denied  { mount } for  pid=5089 comm="syz-executor461" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[pid  5091] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5090] +++ exited with 0 +++
[pid  5089] +++ exited with 0 +++
[pid  5083] <... unlink resumed>)       = 0
[pid  5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=44 /* 0.44 s */} ---
[pid  5083] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=46 /* 0.46 s */} ---
[pid  5084] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5084] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5085] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5084] getdents64(3, 0x55558c65b6f0 /* 4 entries */, 32768) = 176
[pid  5084] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5084] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5084] unlink("./0/binderfs")      = 0
[pid  5084] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5085] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[  106.041316][   T28] audit: type=1400 audit(1715556599.955:94): avc:  denied  { unmount } for  pid=5082 comm="syz-executor461" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  106.074237][ T5082] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI
[  106.086639][ T5082] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  106.095093][ T5082] CPU: 1 PID: 5082 Comm: syz-executor461 Not tainted 6.9.0-rc7-syzkaller-00188-gba16c1cf11c9 #0
[  106.105556][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  106.115654][ T5082] RIP: 0010:write_special_inodes+0xa9/0x170
[  106.121705][ T5082] Code: 41 ff d4 0f 1f 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 41 ff d4 0f 1f 00 48 8d
[  106.141356][ T5082] RSP: 0018:ffffc9000314fbb8 EFLAGS: 00010206
[  106.147445][ T5082] RAX: 0000000000000006 RBX: ffff88802c2c4600 RCX: ffffffff81be542e
[  106.155611][ T5082] RDX: 0000000000000000 RSI: ffffffff81be53e1 RDI: 0000000000000030
[  106.164164][ T5082] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  106.172239][ T5082] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bf1480
[  106.180228][ T5082] R13: 0000000000000000 R14: ffff88802b784000 R15: ffff888016ad9540
[  106.188218][ T5082] FS:  000055558c65a380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  106.197193][ T5082] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.203802][ T5082] CR2: 00007f4aaff1d130 CR3: 00000000779de000 CR4: 00000000003506f0
[  106.212233][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  106.220247][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  106.228243][ T5082] Call Trace:
[  106.231539][ T5082]  <TASK>
[  106.234486][ T5082]  ? show_regs+0x8c/0xa0
[  106.238783][ T5082]  ? die_addr+0x4f/0xd0
[  106.243045][ T5082]  ? exc_general_protection+0x155/0x230
[  106.248637][ T5082]  ? asm_exc_general_protection+0x26/0x30
[  106.254385][ T5082]  ? __pfx_filemap_flush+0x10/0x10
[  106.259520][ T5082]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[  106.265014][ T5082]  ? filemap_fdatawrite_wbc+0x81/0x1c0
[  106.270515][ T5082]  ? write_special_inodes+0xa9/0x170
[  106.275831][ T5082]  ? write_special_inodes+0x82/0x170
[  106.281143][ T5082]  lmLogSync+0x4a0/0x820
[  106.285499][ T5082]  ? __pfx_lmLogSync+0x10/0x10
[  106.290291][ T5082]  ? __pfx_dquot_writeback_dquots+0x10/0x10
[  106.296212][ T5082]  jfs_syncpt+0x89/0xa0
[  106.300394][ T5082]  jfs_sync_fs+0x83/0xb0
[  106.304674][ T5082]  ? __pfx_jfs_sync_fs+0x10/0x10
[  106.309643][ T5082]  sync_filesystem+0x1cc/0x290
[  106.314879][ T5082]  generic_shutdown_super+0x7e/0x3d0
[  106.320202][ T5082]  kill_block_super+0x3b/0x90
[  106.324914][ T5082]  deactivate_locked_super+0xbe/0x1a0
[  106.330321][ T5082]  deactivate_super+0xde/0x100
[  106.335124][ T5082]  cleanup_mnt+0x222/0x450
[  106.339573][ T5082]  task_work_run+0x14e/0x250
[  106.344233][ T5082]  ? __pfx_task_work_run+0x10/0x10
[  106.349409][ T5082]  ptrace_notify+0x10e/0x130
[  106.354033][ T5082]  syscall_exit_to_user_mode_prepare+0x126/0x260
[  106.360405][ T5082]  syscall_exit_to_user_mode+0x11/0x2a0
[  106.365997][ T5082]  do_syscall_64+0xdc/0x260
[  106.370537][ T5082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.376462][ T5082] RIP: 0033:0x7f4aafea06b7
[  106.380899][ T5082] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[pid  5085] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5091] exit_group(0 <unfinished ...>
[pid  5085] <... openat resumed>)       = 3
[pid  5091] <... exit_group resumed>)   = ?
[pid  5085] newfstatat(3, "",  <unfinished ...>
[pid  5091] +++ exited with 0 +++
[pid  5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5085] getdents64(3, 0x55558c65b6f0 /* 4 entries */, 32768) = 176
[pid  5085] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5085] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5085] unlink("./0/binderfs")      = 0
[  106.400729][ T5082] RSP: 002b:00007ffd2f4a1878 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[  106.409169][ T5082] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4aafea06b7
[  106.417160][ T5082] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2f4a1930
[  106.425179][ T5082] RBP: 00007ffd2f4a1930 R08: 0000000000000000 R09: 0000000000000000
[  106.433187][ T5082] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd2f4a29a0
[  106.441176][ T5082] R13: 000055558c65b6c0 R14: 431bde82d7b634db R15: 00007ffd2f4a29c0
[  106.449264][ T5082]  </TASK>
[  106.452297][ T5082] Modules linked in:
[pid  5085] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5086] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=45 /* 0.45 s */} ---
[pid  5086] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5086] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5086] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  106.466672][ T5082] ---[ end trace 0000000000000000 ]---
[  106.475076][ T5082] RIP: 0010:write_special_inodes+0xa9/0x170
[  106.481476][ T5082] Code: 41 ff d4 0f 1f 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 41 ff d4 0f 1f 00 48 8d
[pid  5086] getdents64(3, 0x55558c65b6f0 /* 4 entries */, 32768) = 176
[pid  5086] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5086] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5086] unlink("./0/binderfs")      = 0
[  106.529053][ T5082] RSP: 0018:ffffc9000314fbb8 EFLAGS: 00010206
[  106.535790][ T5082] RAX: 0000000000000006 RBX: ffff88802c2c4600 RCX: ffffffff81be542e
[  106.543955][ T5082] RDX: 0000000000000000 RSI: ffffffff81be53e1 RDI: 0000000000000030
[  106.552569][ T5082] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  106.560609][ T5082] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bf1480
[  106.568610][ T5082] R13: 0000000000000000 R14: ffff88802b784000 R15: ffff888016ad9540
[  106.576650][ T5082] FS:  000055558c65a380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  106.585672][ T5082] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  106.592424][ T5082] CR2: 000055bad3bf1278 CR3: 00000000779de000 CR4: 00000000003506f0
[  106.600477][ T5082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  106.608494][ T5082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  106.616542][ T5082] Kernel panic - not syncing: Fatal exception
[  106.623079][ T5082] Kernel Offset: disabled
[  106.627419][ T5082] Rebooting in 86400 seconds..