./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor600151634

<...>
Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts.
execve("./syz-executor600151634", ["./syz-executor600151634"], 0x7ffe0c6971b0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555ee72000
brk(0x55555ee72e00)                     = 0x55555ee72e00
arch_prctl(ARCH_SET_FS, 0x55555ee72480) = 0
set_tid_address(0x55555ee72750)         = 286
set_robust_list(0x55555ee72760, 24)     = 0
rseq(0x55555ee72da0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor600151634", 4096) = 27
getrandom("\x4c\x8c\xdc\xeb\xd8\x37\x5f\xa5", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555ee72e00
brk(0x55555ee93e00)                     = 0x55555ee93e00
brk(0x55555ee94000)                     = 0x55555ee94000
mprotect(0x7fd44ef87000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fd44eedb9a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd44eee4b80}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fd44eedb9a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd44eee4b80}, NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee72750) = 287
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program
, child_tidptr=0x55555ee72750) = 288
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee72750) = 289
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee72750) = 290
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee72750) = 291
./strace-static-x86_64: Process 291 attached
[pid   291] set_robust_list(0x55555ee72760, 24) = 0
[pid   291] mkdir("./syzkaller.eWwuGB", 0700) = 0
[pid   291] chmod("./syzkaller.eWwuGB", 0777) = 0
[pid   291] chdir("./syzkaller.eWwuGB") = 0
[pid   291] mkdir("./0", 0777)          = 0
[pid   291] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3
[pid   291] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   291] close(3)                    = 0
./strace-static-x86_64: Process 290 attached
[pid   290] set_robust_list(0x55555ee72760, 24) = 0
[pid   290] mkdir("./syzkaller.TUxeb4", 0700) = 0
[pid   291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   290] chmod("./syzkaller.TUxeb4", 0777) = 0
[pid   291] <... clone resumed>, child_tidptr=0x55555ee72750) = 292
[pid   290] chdir("./syzkaller.TUxeb4") = 0
[pid   290] mkdir("./0", 0777)          = 0
[pid   290] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid   290] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   290] close(3)                    = 0
[pid   290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555ee72750) = 293
./strace-static-x86_64: Process 293 attached
[pid   293] set_robust_list(0x55555ee72760, 24) = 0
[pid   293] chdir("./0")                = 0
[pid   293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   293] setpgid(0, 0)               = 0
[pid   293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   293] write(3, "1000", 4)         = 4
[pid   293] close(3)                    = 0
[pid   293] symlink("/dev/binderfs", "./binderfs") = 0
[pid   293] write(1, "executing program\n", 18) = 18
[pid   293] memfd_create("syzkaller", 0) = 3
[pid   293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd446ad2000
[pid   293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid   293] munmap(0x7fd446ad2000, 138412032) = 0
[pid   293] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   293] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   293] close(3)                    = 0
[pid   293] close(4executing program
./strace-static-x86_64: Process 288 attached
./strace-static-x86_64: Process 287 attached
 <unfinished ...>
[pid   287] set_robust_list(0x55555ee72760, 24 <unfinished ...>
[pid   288] set_robust_list(0x55555ee72760, 24 <unfinished ...>
[pid   287] <... set_robust_list resumed>) = 0
[pid   288] <... set_robust_list resumed>) = 0
[pid   287] getrandom( <unfinished ...>
[pid   288] mkdir("./syzkaller.9yy1dK", 0700) = 0
[pid   287] <... getrandom resumed>"\x6f\xe2\xa7\x88\x00\x18\x59\x9e", 8, GRND_NONBLOCK) = 8
[pid   287] mkdir("./syzkaller.zH4582", 0700) = 0
[pid   287] chmod("./syzkaller.zH4582", 0777) = 0
[pid   288] chmod("./syzkaller.9yy1dK", 0777) = 0
[pid   287] chdir("./syzkaller.zH4582" <unfinished ...>
[pid   288] chdir("./syzkaller.9yy1dK" <unfinished ...>
[pid   287] <... chdir resumed>)        = 0
[pid   288] <... chdir resumed>)        = 0
[pid   288] mkdir("./0", 0777 <unfinished ...>
[pid   287] mkdir("./0", 0777)          = 0
[pid   288] <... mkdir resumed>)        = 0
[pid   287] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   288] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 289 attached
 <unfinished ...>
[pid   289] set_robust_list(0x55555ee72760, 24) = 0
[pid   289] mkdir("./syzkaller.NhF5om", 0700) = 0
[pid   289] chmod("./syzkaller.NhF5om", 0777) = 0
[pid   289] chdir("./syzkaller.NhF5om") = 0
[pid   289] mkdir("./0", 0777)          = 0
[pid   289] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 292 attached
 <unfinished ...>
[pid   292] set_robust_list(0x55555ee72760, 24) = 0
[pid   292] chdir("./0")                = 0
[pid   292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   292] setpgid(0, 0)               = 0
[pid   292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   292] write(3, "1000", 4)         = 4
[pid   292] close(3)                    = 0
[pid   292] symlink("/dev/binderfs", "./binderfs") = 0
[pid   292] write(1, "executing program\n", 18) = 18
[pid   292] memfd_create("syzkaller", 0) = 3
[pid   292] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd446ad2000
[pid   292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid   292] munmap(0x7fd446ad2000, 138412032) = 0
[   20.245660][   T24] audit: type=1400 audit(1743076110.930:66): avc:  denied  { execmem } for  pid=286 comm="syz-executor600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   20.261779][   T24] audit: type=1400 audit(1743076110.930:67): avc:  denied  { read write } for  pid=291 comm="syz-executor600" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   292] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid   293] <... close resumed>)        = 0
[pid   289] <... openat resumed>)       = 3
[pid   288] <... openat resumed>)       = 3
[pid   287] <... openat resumed>)       = 3
[pid   293] mkdir("./file1", 0777 <unfinished ...>
[pid   289] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   288] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   287] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   293] <... mkdir resumed>)        = 0
[pid   289] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   288] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   287] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   293] mount("/dev/loop3", "./file1", "ext4", MS_RELATIME, ",errors=continue" <unfinished ...>
[pid   289] close(3 <unfinished ...>
[pid   288] close(3 <unfinished ...>
[pid   287] close(3 <unfinished ...>
[pid   289] <... close resumed>)        = 0
[pid   288] <... close resumed>)        = 0
[pid   287] <... close resumed>)        = 0
[pid   289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   289] <... clone resumed>, child_tidptr=0x55555ee72750) = 299
[pid   288] <... clone resumed>, child_tidptr=0x55555ee72750) = 298
[pid   287] <... clone resumed>, child_tidptr=0x55555ee72750) = 297
[pid   292] <... openat resumed>)       = 4
[pid   292] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 297 attached
 <unfinished ...>
[pid   297] set_robust_list(0x55555ee72760, 24) = 0
[pid   297] chdir("./0")                = 0
[pid   297] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   297] setpgid(0, 0)               = 0
[pid   297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   297] write(3, "1000", 4)         = 4
[pid   297] close(3)                    = 0
[pid   297] symlink("/dev/binderfs", "./binderfs") = 0
[pid   297] write(1, "executing program\n", 18executing program
) = 18
[pid   297] memfd_create("syzkaller", 0) = 3
[pid   297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd446ad2000
[pid   297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid   297] munmap(0x7fd446ad2000, 138412032) = 0
[pid   297] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 298 attached
 <unfinished ...>
[pid   298] set_robust_list(0x55555ee72760, 24) = 0
[pid   298] chdir("./0")                = 0
[pid   298] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 299 attached
 <unfinished ...>
[pid   299] set_robust_list(0x55555ee72760, 24 <unfinished ...>
[pid   298] <... prctl resumed>)        = 0
[pid   292] <... ioctl resumed>)        = 0
[pid   297] <... openat resumed>)       = 4
[pid   297] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   298] setpgid(0, 0)               = 0
[pid   298] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   298] write(3, "1000", 4)         = 4
[   20.279106][   T24] audit: type=1400 audit(1743076110.930:68): avc:  denied  { open } for  pid=291 comm="syz-executor600" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   20.303427][   T24] audit: type=1400 audit(1743076110.930:69): avc:  denied  { ioctl } for  pid=291 comm="syz-executor600" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   298] close(3)                    = 0
[pid   298] symlink("/dev/binderfs", "./binderfs") = 0
[pid   298] write(1, "executing program\n", 18executing program
) = 18
[pid   298] memfd_create("syzkaller", 0) = 3
[pid   298] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd446ad2000
[pid   298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 <unfinished ...>
[pid   297] <... ioctl resumed>)        = 0
[pid   297] close(3)                    = 0
[pid   297] close(4 <unfinished ...>
[pid   298] <... write resumed>)        = 524288
[pid   298] munmap(0x7fd446ad2000, 138412032) = 0
[pid   298] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   299] <... set_robust_list resumed>) = 0
[pid   292] close(3 <unfinished ...>
[pid   299] chdir("./0" <unfinished ...>
[pid   292] <... close resumed>)        = 0
[pid   299] <... chdir resumed>)        = 0
[pid   292] close(4 <unfinished ...>
[pid   299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   299] setpgid(0, 0)               = 0
[pid   299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   299] write(3, "1000", 4)         = 4
[pid   299] close(3)                    = 0
[pid   299] symlink("/dev/binderfs", "./binderfs"executing program
) = 0
[pid   299] write(1, "executing program\n", 18) = 18
[pid   299] memfd_create("syzkaller", 0) = 3
[pid   299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd446ad2000
[pid   299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid   299] munmap(0x7fd446ad2000, 138412032) = 0
[pid   299] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid   293] <... mount resumed>)        = 0
[pid   293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   293] chdir("./file1")            = 0
[pid   293] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   297] <... close resumed>)        = 0
[pid   297] mkdir("./file1", 0777)      = 0
[   20.330009][   T24] audit: type=1400 audit(1743076110.990:70): avc:  denied  { mounton } for  pid=293 comm="syz-executor600" path="/root/syzkaller.TUxeb4/0/file1" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   20.356148][  T293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   20.366233][   T24] audit: type=1400 audit(1743076111.060:71): avc:  denied  { mount } for  pid=293 comm="syz-executor600" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[pid   297] mount("/dev/loop0", "./file1", "ext4", MS_RELATIME, ",errors=continue" <unfinished ...>
[pid   298] <... openat resumed>)       = 4
[pid   292] <... close resumed>)        = 0
[pid   298] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   292] mkdir("./file1", 0777 <unfinished ...>
[pid   299] <... openat resumed>)       = 4
[pid   298] <... ioctl resumed>)        = 0
[pid   292] <... mkdir resumed>)        = 0
[pid   299] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   298] close(3 <unfinished ...>
[pid   292] mount("/dev/loop4", "./file1", "ext4", MS_RELATIME, ",errors=continue" <unfinished ...>
[pid   298] <... close resumed>)        = 0
[pid   298] close(4 <unfinished ...>
[pid   297] <... mount resumed>)        = 0
[pid   297] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   297] chdir("./file1")            = 0
[pid   297] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   298] <... close resumed>)        = 0
[pid   293] <... openat resumed>)       = 4
[pid   298] mkdir("./file1", 0777 <unfinished ...>
[pid   293] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   298] <... mkdir resumed>)        = 0
[pid   299] <... ioctl resumed>)        = 0
[pid   298] mount("/dev/loop1", "./file1", "ext4", MS_RELATIME, ",errors=continue" <unfinished ...>
[pid   299] close(3)                    = 0
[pid   297] <... openat resumed>)       = 4
[pid   299] close(4 <unfinished ...>
[pid   297] ioctl(4, LOOP_CLR_FD)       = 0
[pid   297] close(4)                    = 0
[   20.435013][  T297] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid   297] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4
[pid   297] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5
[pid   297] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid   297] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 6
[pid   297] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000
[pid   297] bpf(BPF_PROG_LOAD, 0x200000000200, 148) = -1 E2BIG (Argument list too long)
[pid   297] exit_group(0)               = ?
[pid   297] +++ exited with 0 +++
[pid   287] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=297, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   287] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   293] <... ioctl resumed>)        = 0
[pid   287] <... restart_syscall resumed>) = 0
[pid   293] close(4)                    = 0
[pid   293] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 <unfinished ...>
[pid   287] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   293] <... openat resumed>)       = 4
[pid   287] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 <unfinished ...>
[pid   287] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   293] <... open resumed>)         = 5
[pid   287] <... openat resumed>)       = 3
[pid   293] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   287] newfstatat(3, "",  <unfinished ...>
[pid   293] <... mount resumed>)        = 0
[pid   287] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   293] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   287] getdents64(3,  <unfinished ...>
[pid   293] <... open resumed>)         = 6
[pid   287] <... getdents64 resumed>0x55555ee737f0 /* 4 entries */, 32768) = 112
[pid   293] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 <unfinished ...>
[pid   287] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   287] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   287] unlink("./0/binderfs")      = 0
[pid   287] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   287] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   287] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   287] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   287] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0
[pid   287] getdents64(4, 0x55555ee7b830 /* 9 entries */, 32768) = 264
[pid   287] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   287] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   287] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   287] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
[pid   287] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0
[pid   287] getdents64(5, 0x55555ee83870 /* 2 entries */, 32768) = 48
[pid   287] getdents64(5, 0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   287] close(5)                    = 0
[pid   287] rmdir("./0/file1/lost+found" <unfinished ...>
[pid   293] <... mmap resumed>)         = 0x200000000000
[pid   287] <... rmdir resumed>)        = 0
[pid   293] bpf(BPF_PROG_LOAD, 0x200000000200, 148) = -1 E2BIG (Argument list too long)
[pid   287] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   293] exit_group(0 <unfinished ...>
[pid   287] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   293] <... exit_group resumed>)   = ?
[pid   287] newfstatat(AT_FDCWD, "./0/file1/file0",  <unfinished ...>
[pid   293] +++ exited with 0 +++
[pid   287] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   299] <... close resumed>)        = 0
[pid   299] mkdir("./file1", 0777)      = 0
[pid   299] mount("/dev/loop2", "./file1", "ext4", MS_RELATIME, ",errors=continue" <unfinished ...>
[pid   290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
[pid   287] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   287] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   290] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   287] <... openat resumed>)       = 5
[pid   287] newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_EMPTY_PATH) = 0
[pid   290] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   287] getdents64(5,  <unfinished ...>
[pid   290] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   287] <... getdents64 resumed>0x55555ee83870 /* 4 entries */, 32768) = 112
[pid   290] <... openat resumed>)       = 3
[pid   287] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   290] newfstatat(3, "",  <unfinished ...>
[pid   287] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   287] newfstatat(AT_FDCWD, "./0/file1/file0/file0",  <unfinished ...>
[pid   290] getdents64(3,  <unfinished ...>
[pid   287] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] <... getdents64 resumed>0x55555ee737f0 /* 4 entries */, 32768) = 112
[pid   287] unlink("./0/file1/file0/file0" <unfinished ...>
[pid   290] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   287] <... unlink resumed>)       = 0
[pid   290] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   287] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   290] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid   287] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   287] newfstatat(AT_FDCWD, "./0/file1/file0/file1",  <unfinished ...>
[pid   290] unlink("./0/binderfs" <unfinished ...>
[pid   287] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] <... unlink resumed>)       = 0
[pid   287] unlink("./0/file1/file0/file1" <unfinished ...>
[pid   290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   287] <... unlink resumed>)       = 0
[pid   290] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   287] getdents64(5,  <unfinished ...>
[pid   290] newfstatat(AT_FDCWD, "./0/file1",  <unfinished ...>
[pid   287] <... getdents64 resumed>0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   290] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   287] close(5 <unfinished ...>
[pid   290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   287] <... close resumed>)        = 0
[pid   290] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   287] rmdir("./0/file1/file0" <unfinished ...>
[pid   290] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   287] <... rmdir resumed>)        = 0
[pid   290] <... openat resumed>)       = 4
[pid   287] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   290] newfstatat(4, "",  <unfinished ...>
[pid   287] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   290] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0
[pid   287] newfstatat(AT_FDCWD, "./0/file1/file1",  <unfinished ...>
[   20.466352][   T24] audit: type=1400 audit(1743076111.150:72): avc:  denied  { write } for  pid=297 comm="syz-executor600" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   20.493202][   T24] audit: type=1400 audit(1743076111.150:73): avc:  denied  { add_name } for  pid=297 comm="syz-executor600" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   20.514910][   T24] audit: type=1400 audit(1743076111.150:74): avc:  denied  { create } for  pid=297 comm="syz-executor600" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[pid   290] getdents64(4,  <unfinished ...>
[pid   287] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] <... getdents64 resumed>0x55555ee7b830 /* 9 entries */, 32768) = 264
[pid   287] unlink("./0/file1/file1" <unfinished ...>
[pid   290] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   290] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   290] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
[pid   290] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0
[pid   290] getdents64(5, 0x55555ee83870 /* 2 entries */, 32768) = 48
[pid   290] getdents64(5, 0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   290] close(5)                    = 0
[pid   290] rmdir("./0/file1/lost+found") = 0
[pid   290] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   290] newfstatat(AT_FDCWD, "./0/file1/file0", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   290] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
[pid   290] newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_EMPTY_PATH) = 0
[pid   290] getdents64(5, 0x55555ee83870 /* 4 entries */, 32768) = 112
[pid   290] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   290] newfstatat(AT_FDCWD, "./0/file1/file0/file0", {st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] unlink("./0/file1/file0/file0") = 0
[pid   290] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   290] newfstatat(AT_FDCWD, "./0/file1/file0/file1", {st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] unlink("./0/file1/file0/file1") = 0
[pid   290] getdents64(5, 0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   290] close(5)                    = 0
[pid   290] rmdir("./0/file1/file0")    = 0
[pid   290] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   20.533478][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4143971837: comm syz-executor600: iget: illegal inode #
[   20.551058][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4143971837 err=-117
[   20.557125][  T292] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   20.565136][   T24] audit: type=1400 audit(1743076111.150:75): avc:  denied  { read write } for  pid=297 comm="syz-executor600" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   20.579926][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4143971837: comm syz-executor600: iget: illegal inode #
[   20.596640][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4294967295: comm syz-executor600: iget: illegal inode #
[   20.612720][  T299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[pid   290] newfstatat(AT_FDCWD, "./0/file1/file1", {st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   290] unlink("./0/file1/file1" <unfinished ...>
[pid   292] <... mount resumed>)        = 0
[pid   292] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   292] chdir("./file1")            = 0
[pid   292] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   292] ioctl(4, LOOP_CLR_FD)       = 0
[   20.626369][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4143971837 err=-117
[   20.634895][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4294967295 err=-117
[   20.648196][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4294967295: comm syz-executor600: iget: illegal inode #
[pid   292] close(4 <unfinished ...>
[pid   299] <... mount resumed>)        = 0
[pid   298] <... mount resumed>)        = 0
[pid   292] <... close resumed>)        = 0
[pid   299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   299] chdir("./file1")            = 0
[pid   299] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   299] ioctl(4, LOOP_CLR_FD)       = 0
[pid   299] close(4)                    = 0
[pid   299] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000) = 4
[pid   299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5
[pid   299] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0
[pid   299] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 6
[pid   299] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 <unfinished ...>
[pid   292] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 <unfinished ...>
[pid   298] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   292] <... openat resumed>)       = 4
[pid   298] <... openat resumed>)       = 3
[pid   292] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 <unfinished ...>
[pid   298] chdir("./file1")            = 0
[pid   292] <... open resumed>)         = 5
[pid   299] <... mmap resumed>)         = 0x200000000000
[pid   299] bpf(BPF_PROG_LOAD, 0x200000000200, 148) = -1 E2BIG (Argument list too long)
[   20.678053][  T298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   20.690307][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4294967295 err=-117
[   20.703426][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor600: inode #590542435: comm syz-executor600: iget: illegal inode #
[   20.719765][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor600: inode #590542435: comm syz-executor600: iget: illegal inode #
[pid   299] exit_group(0)               = ?
[pid   299] +++ exited with 0 +++
[pid   289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
[pid   289] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   298] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   298] ioctl(4, LOOP_CLR_FD)       = 0
[pid   298] close(4)                    = 0
[pid   298] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|FASYNC, 000 <unfinished ...>
[pid   292] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0
[pid   292] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 6
[pid   292] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0) = 0x200000000000
[pid   292] bpf(BPF_PROG_LOAD, 0x200000000200, 148) = -1 E2BIG (Argument list too long)
[pid   292] exit_group(0)               = ?
[pid   292] +++ exited with 0 +++
[pid   291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=292, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
[pid   291] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   289] <... restart_syscall resumed>) = 0
[pid   298] <... openat resumed>)       = 4
[pid   291] <... restart_syscall resumed>) = 0
[pid   298] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5
[pid   289] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   298] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0
[pid   298] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 6
[pid   298] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 6, 0 <unfinished ...>
[pid   291] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   298] <... mmap resumed>)         = 0x200000000000
[pid   298] bpf(BPF_PROG_LOAD, 0x200000000200, 148) = -1 E2BIG (Argument list too long)
[   20.722682][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 590542435 err=-117
[   20.748111][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor600: inode #1748799883: comm syz-executor600: iget: illegal inode #
[   20.756480][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 590542435 err=-117
[pid   298] exit_group(0)               = ?
[pid   298] +++ exited with 0 +++
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
[pid   288] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   288] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   288] getdents64(3, 0x55555ee737f0 /* 4 entries */, 32768) = 112
[pid   288] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] unlink("./0/binderfs")      = 0
[pid   288] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   288] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   288] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   288] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0
[pid   288] getdents64(4, 0x55555ee7b830 /* 9 entries */, 32768) = 264
[pid   288] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
[pid   288] newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0
[pid   288] getdents64(5, 0x55555ee83870 /* 2 entries */, 32768) = 48
[pid   288] getdents64(5, 0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   288] close(5)                    = 0
[pid   288] rmdir("./0/file1/lost+found") = 0
[pid   288] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] newfstatat(AT_FDCWD, "./0/file1/file0", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
[pid   288] newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_EMPTY_PATH) = 0
[pid   288] getdents64(5, 0x55555ee83870 /* 4 entries */, 32768) = 112
[pid   288] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] newfstatat(AT_FDCWD, "./0/file1/file0/file0", {st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] unlink("./0/file1/file0/file0") = 0
[pid   288] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] newfstatat(AT_FDCWD, "./0/file1/file0/file1", {st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] unlink("./0/file1/file0/file1") = 0
[pid   288] getdents64(5, 0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   288] close(5)                    = 0
[pid   288] rmdir("./0/file1/file0")    = 0
[pid   288] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   288] newfstatat(AT_FDCWD, "./0/file1/file1", {st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   288] unlink("./0/file1/file1" <unfinished ...>
[pid   291] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   289] <... openat resumed>)       = 3
[   20.766858][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 1748799883 err=-117
[   20.791248][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4263244710: comm syz-executor600: iget: illegal inode #
[   20.802126][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4143971837: comm syz-executor600: iget: illegal inode #
[   20.806703][  T287] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4263244710 err=-117
[pid   291] <... openat resumed>)       = 3
[pid   289] newfstatat(3, "",  <unfinished ...>
[pid   287] <... unlink resumed>)       = 0
[pid   291] newfstatat(3, "",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   289] getdents64(3,  <unfinished ...>
[pid   291] getdents64(3,  <unfinished ...>
[pid   289] <... getdents64 resumed>0x55555ee737f0 /* 4 entries */, 32768) = 112
[pid   291] <... getdents64 resumed>0x55555ee737f0 /* 4 entries */, 32768) = 112
[pid   289] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid   291] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] unlink("./0/binderfs" <unfinished ...>
[pid   291] unlink("./0/binderfs" <unfinished ...>
[pid   289] <... unlink resumed>)       = 0
[pid   291] <... unlink resumed>)       = 0
[pid   289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   291] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   289] newfstatat(AT_FDCWD, "./0/file1",  <unfinished ...>
[pid   291] newfstatat(AT_FDCWD, "./0/file1",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   291] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   289] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   291] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   289] <... openat resumed>)       = 4
[pid   291] <... openat resumed>)       = 4
[pid   289] newfstatat(4, "",  <unfinished ...>
[pid   291] newfstatat(4, "",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0
[pid   289] getdents64(4,  <unfinished ...>
[pid   291] getdents64(4,  <unfinished ...>
[pid   289] <... getdents64 resumed>0x55555ee7b830 /* 9 entries */, 32768) = 264
[pid   291] <... getdents64 resumed>0x55555ee7b830 /* 9 entries */, 32768) = 264
[pid   289] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] newfstatat(AT_FDCWD, "./0/file1/lost+found",  <unfinished ...>
[pid   291] newfstatat(AT_FDCWD, "./0/file1/lost+found",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   291] openat(AT_FDCWD, "./0/file1/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   289] <... openat resumed>)       = 5
[pid   291] <... openat resumed>)       = 5
[pid   289] newfstatat(5, "",  <unfinished ...>
[pid   291] newfstatat(5, "",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0
[pid   289] getdents64(5,  <unfinished ...>
[pid   291] getdents64(5,  <unfinished ...>
[pid   289] <... getdents64 resumed>0x55555ee83870 /* 2 entries */, 32768) = 48
[pid   291] <... getdents64 resumed>0x55555ee83870 /* 2 entries */, 32768) = 48
[pid   289] getdents64(5,  <unfinished ...>
[pid   291] getdents64(5,  <unfinished ...>
[pid   289] <... getdents64 resumed>0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   291] <... getdents64 resumed>0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   289] close(5 <unfinished ...>
[pid   291] close(5 <unfinished ...>
[pid   289] <... close resumed>)        = 0
[pid   291] <... close resumed>)        = 0
[pid   289] rmdir("./0/file1/lost+found" <unfinished ...>
[pid   291] rmdir("./0/file1/lost+found" <unfinished ...>
[pid   289] <... rmdir resumed>)        = 0
[pid   291] <... rmdir resumed>)        = 0
[pid   289] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] newfstatat(AT_FDCWD, "./0/file1/file0",  <unfinished ...>
[pid   291] newfstatat(AT_FDCWD, "./0/file1/file0",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   291] openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   289] <... openat resumed>)       = 5
[pid   291] <... openat resumed>)       = 5
[pid   289] newfstatat(5, "",  <unfinished ...>
[pid   291] newfstatat(5, "",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=60, ...}, AT_EMPTY_PATH) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=60, ...}, AT_EMPTY_PATH) = 0
[pid   289] getdents64(5,  <unfinished ...>
[pid   291] getdents64(5,  <unfinished ...>
[pid   289] <... getdents64 resumed>0x55555ee83870 /* 4 entries */, 32768) = 112
[pid   291] <... getdents64 resumed>0x55555ee83870 /* 4 entries */, 32768) = 112
[pid   289] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] newfstatat(AT_FDCWD, "./0/file1/file0/file0",  <unfinished ...>
[pid   291] newfstatat(AT_FDCWD, "./0/file1/file0/file0",  <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] unlink("./0/file1/file0/file0" <unfinished ...>
[pid   291] unlink("./0/file1/file0/file0" <unfinished ...>
[pid   289] <... unlink resumed>)       = 0
[pid   291] <... unlink resumed>)       = 0
[pid   291] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] newfstatat(AT_FDCWD, "./0/file1/file0/file1",  <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] newfstatat(AT_FDCWD, "./0/file1/file0/file1",  <unfinished ...>
[pid   291] unlink("./0/file1/file0/file1" <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] <... unlink resumed>)       = 0
[pid   289] unlink("./0/file1/file0/file1" <unfinished ...>
[pid   291] getdents64(5,  <unfinished ...>
[pid   289] <... unlink resumed>)       = 0
[pid   291] <... getdents64 resumed>0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   289] getdents64(5,  <unfinished ...>
[pid   291] close(5 <unfinished ...>
[pid   289] <... getdents64 resumed>0x55555ee83870 /* 0 entries */, 32768) = 0
[pid   291] <... close resumed>)        = 0
[pid   289] close(5 <unfinished ...>
[pid   291] rmdir("./0/file1/file0" <unfinished ...>
[pid   289] <... close resumed>)        = 0
[pid   291] <... rmdir resumed>)        = 0
[pid   289] rmdir("./0/file1/file0" <unfinished ...>
[pid   291] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] <... rmdir resumed>)        = 0
[pid   291] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   289] umount2("./0/file1/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] newfstatat(AT_FDCWD, "./0/file1/file1",  <unfinished ...>
[pid   289] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   291] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] newfstatat(AT_FDCWD, "./0/file1/file1",  <unfinished ...>
[pid   291] unlink("./0/file1/file1" <unfinished ...>
[pid   289] <... newfstatat resumed>{st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   287] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   289] unlink("./0/file1/file1" <unfinished ...>
[pid   287] <... umount2 resumed>)      = -1 EUCLEAN (Structure needs cleaning)
[   20.822245][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor600: inode #1748799883: comm syz-executor600: iget: illegal inode #
[   20.847368][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4143971837: comm syz-executor600: iget: illegal inode #
[   20.850439][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4143971837 err=-117
[pid   287] newfstatat(AT_FDCWD, "./0/file1/file2", 0x7ffde92df890, AT_SYMLINK_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   287] exit_group(1)               = ?
[pid   287] +++ exited with 1 +++
[pid   286] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=287, si_uid=0, si_status=1, si_utime=0, si_stime=13} ---
[   20.863808][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4143971837 err=-117
[   20.877353][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 1748799883 err=-117
[   20.890095][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4143971837: comm syz-executor600: iget: illegal inode #
[   20.903867][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4294967295: comm syz-executor600: iget: illegal inode #
[   20.918083][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4294967295: comm syz-executor600: iget: illegal inode #
[   20.934015][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4263244710: comm syz-executor600: iget: illegal inode #
[   20.946857][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4294967295 err=-117
[   20.961280][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4294967295 err=-117
[   20.974110][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4143971837 err=-117
[   20.974279][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor600: inode #590542435: comm syz-executor600: iget: illegal inode #
[   20.987507][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor600: inode #590542435: comm syz-executor600: iget: illegal inode #
[   21.000644][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4294967295: comm syz-executor600: iget: illegal inode #
[   21.014928][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 590542435 err=-117
[   21.029561][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 590542435 err=-117
[   21.044161][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor600: inode #1748799883: comm syz-executor600: iget: illegal inode #
[   21.057173][  T290] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4263244710 err=-117
[   21.070392][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 1748799883 err=-117
[   21.085097][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor600: inode #1748799883: comm syz-executor600: iget: illegal inode #
[   21.098062][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4263244710: comm syz-executor600: iget: illegal inode #
[   21.112042][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4294967295 err=-117
[   21.141098][  T288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4263244710 err=-117
[   21.169047][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 1748799883 err=-117
[   21.171476][  T288] ==================================================================
[   21.182807][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4263244710: comm syz-executor600: iget: illegal inode #
[   21.190418][  T288] BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0xd04/0xfa0
[   21.190434][  T288] Read of size 4 at addr ffff888120d450b0 by task syz-executor600/288
[   21.205124][  T291] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4263244710 err=-117
[   21.213041][  T288] 
[   21.227772][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor600: inode #590542435: comm syz-executor600: iget: illegal inode #
[   21.234221][  T288] CPU: 1 PID: 288 Comm: syz-executor600 Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0
[   21.234227][  T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   21.234231][  T288] Call Trace:
[   21.234248][  T288]  dump_stack_lvl+0x1e2/0x24b
[   21.234258][  T288]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   21.234275][  T288]  ? panic+0x812/0x812
[pid   286] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   291] <... unlink resumed>)       = 0
[pid   290] <... unlink resumed>)       = 0
[pid   289] <... unlink resumed>)       = 0
[pid   291] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   290] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   291] <... umount2 resumed>)      = -1 EUCLEAN (Structure needs cleaning)
[pid   290] <... umount2 resumed>)      = -1 EUCLEAN (Structure needs cleaning)
[pid   291] newfstatat(AT_FDCWD, "./0/file1/file2",  <unfinished ...>
[pid   290] newfstatat(AT_FDCWD, "./0/file1/file2",  <unfinished ...>
[pid   291] <... newfstatat resumed>0x7ffde92df890, AT_SYMLINK_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   290] <... newfstatat resumed>0x7ffde92df890, AT_SYMLINK_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   291] exit_group(1 <unfinished ...>
[pid   290] exit_group(1 <unfinished ...>
[pid   291] <... exit_group resumed>)   = ?
[pid   290] <... exit_group resumed>)   = ?
[pid   291] +++ exited with 1 +++
[pid   290] +++ exited with 1 +++
[pid   289] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   289] newfstatat(AT_FDCWD, "./0/file1/file2", 0x7ffde92df890, AT_SYMLINK_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   289] exit_group(1)               = ?
[pid   289] +++ exited with 1 +++
[pid   286] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal)
[pid   286] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=1, si_utime=0, si_stime=17} ---
[   21.236509][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 590542435 err=-117
[   21.250716][  T288]  print_address_description+0x81/0x3b0
[   21.250733][  T288]  kasan_report+0x179/0x1c0
[   21.250751][  T288]  ? ext4_xattr_inode_dec_ref_all+0xd04/0xfa0
[   21.261427][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor600: inode #1748799883: comm syz-executor600: iget: illegal inode #
[   21.270692][  T288]  ? ext4_xattr_inode_dec_ref_all+0xd04/0xfa0
[   21.270704][  T288]  __asan_report_load4_noabort+0x14/0x20
[   21.270728][  T288]  ext4_xattr_inode_dec_ref_all+0xd04/0xfa0
[   21.274130][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 1748799883 err=-117
[   21.278319][  T288]  ? __kasan_check_write+0x14/0x20
[   21.283897][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor600: inode #4263244710: comm syz-executor600: iget: illegal inode #
[   21.287523][  T288]  ? ext4_xattr_delete_inode+0xc80/0xc80
[   21.300904][  T289] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor600: error while reading EA inode 4263244710 err=-117
[   21.306008][  T288]  ? __ext4_journal_ensure_credits+0x470/0x470
[   21.306019][  T288]  ext4_xattr_delete_inode+0xaa6/0xc80
[   21.306037][  T288]  ? sb_end_intwrite+0x110/0x110
[   21.415982][  T288]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[   21.421876][  T288]  ? __kasan_check_read+0x11/0x20
[   21.426822][  T288]  ext4_evict_inode+0x1095/0x1730
[   21.431683][  T288]  ? ext4_inode_is_fast_symlink+0x360/0x360
[   21.437410][  T288]  ? atime_needs_update+0x5a0/0x5a0
[   21.442443][  T288]  ? ext4_inode_is_fast_symlink+0x360/0x360
[   21.448172][  T288]  evict+0x526/0x9c0
[   21.451907][  T288]  ? mode_strip_sgid+0x140/0x140
[   21.456699][  T288]  ? _raw_spin_lock+0xa4/0x1b0
[   21.461365][  T288]  ? _raw_spin_trylock_bh+0x190/0x190
[   21.466749][  T288]  ? iput+0x2a9/0x7e0
[   21.470571][  T288]  ? __kasan_check_write+0x14/0x20
[   21.475695][  T288]  ? ext4_drop_inode+0x93/0x1a0
[   21.480398][  T288]  iput+0x632/0x7e0
[   21.484036][  T288]  do_unlinkat+0x48e/0x8b0
[   21.488276][  T288]  ? fsnotify_link_count+0x90/0x90
[   21.493228][  T288]  ? strncpy_from_user+0x18e/0x2d0
[   21.498180][  T288]  ? getname_flags+0x1fd/0x520
[   21.502769][  T288]  __x64_sys_unlink+0x49/0x50
[   21.507459][  T288]  do_syscall_64+0x34/0x70
[   21.511725][  T288]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   21.517458][  T288] RIP: 0033:0x7fd44ef11a47
[   21.521692][  T288] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   21.541344][  T288] RSP: 002b:00007ffde92df868 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[   21.549651][  T288] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd44ef11a47
[   21.557462][  T288] RDX: 00007ffde92df890 RSI: 00007ffde92df920 RDI: 00007ffde92df920
[   21.565362][  T288] RBP: 00007ffde92df920 R08: 0000000000000000 R09: 0000000000000000
[   21.573431][  T288] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffde92e0a10
[   21.581244][  T288] R13: 000055555ee7b800 R14: 431bde82d7b634db R15: 00007ffde92e1aa0
[   21.589142][  T288] 
[   21.591310][  T288] The buggy address belongs to the page:
[   21.596789][  T288] page:ffffea0004835140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x120d45
[   21.607039][  T288] flags: 0x4000000000000000()
[   21.611543][  T288] raw: 4000000000000000 ffffea0004835188 ffffea0004751f88 0000000000000000
[   21.619968][  T288] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[   21.628385][  T288] page dumped because: kasan: bad access detected
[   21.634729][  T288] page_owner info is not present (never set?)
[   21.640629][  T288] 
[   21.642800][  T288] Memory state around the buggy address:
[   21.648275][  T288]  ffff888120d44f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   21.656179][  T288]  ffff888120d45000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   21.664069][  T288] >ffff888120d45080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   21.671965][  T288]                                      ^
[   21.677435][  T288]  ffff888120d45100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[pid   286] restart_syscall(<... resuming interrupted restart_syscall ...> <unfinished ...>
[pid   288] <... unlink resumed>)       = 0
[pid   288] umount2("./0/file1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   288] newfstatat(AT_FDCWD, "./0/file1/file2", 0x7ffde92df890, AT_SYMLINK_NOFOLLOW) = -1 EUCLEAN (Structure needs cleaning)
[pid   288] exit_group(1)               = ?
[pid   288] +++ exited with 1 +++
<... restart_syscall resumed>)          = ? ERESTART_RESTARTBLOCK (Interrupted by signal)
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=288, si_uid=0, si_status=1, si_utime=0, si_stime=21} ---
[   21.685335][  T288]  ffff888120d45180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   21.693230][  T288] ==================================================================
[   21.701135][  T288] Disabling lock debugging due to kernel taint