./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1190427281

<...>
Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts.
execve("./syz-executor1190427281", ["./syz-executor1190427281"], 0x7ffe2071ebf0 /* 10 vars */) = 0
brk(NULL)                               = 0x555555de7000
brk(0x555555de7d00)                     = 0x555555de7d00
arch_prctl(ARCH_SET_FS, 0x555555de7380) = 0
set_tid_address(0x555555de7650)         = 5070
set_robust_list(0x555555de7660, 24)     = 0
rseq(0x555555de7ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1190427281", 4096) = 28
getrandom("\x8b\xa4\x43\x77\x2a\xcf\xa5\xc7", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555555de7d00
brk(0x555555e08d00)                     = 0x555555e08d00
brk(0x555555e09000)                     = 0x555555e09000
mprotect(0x7fd2d4025000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5071 attached
, child_tidptr=0x555555de7650) = 5071
[pid  5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5071] set_robust_list(0x555555de7660, 24) = 0
./strace-static-x86_64: Process 5072 attached
[pid  5070] <... clone resumed>, child_tidptr=0x555555de7650) = 5072
[pid  5072] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5072] <... set_robust_list resumed>) = 0
[pid  5071] mkdir("./syzkaller.TKYLb8", 0700 <unfinished ...>
[pid  5072] mkdir("./syzkaller.mEDXeI", 0700 <unfinished ...>
[pid  5070] <... clone resumed>, child_tidptr=0x555555de7650) = 5073
./strace-static-x86_64: Process 5073 attached
[pid  5072] <... mkdir resumed>)        = 0
[pid  5071] <... mkdir resumed>)        = 0
[pid  5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5073] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5071] chmod("./syzkaller.TKYLb8", 0777 <unfinished ...>
[pid  5073] <... set_robust_list resumed>) = 0
[pid  5072] chmod("./syzkaller.mEDXeI", 0777 <unfinished ...>
[pid  5071] <... chmod resumed>)        = 0
[   76.664341][   T28] audit: type=1400 audit(1714848362.695:87): avc:  denied  { execmem } for  pid=5070 comm="syz-executor119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid  5071] chdir("./syzkaller.TKYLb8"./strace-static-x86_64: Process 5074 attached
 <unfinished ...>
[pid  5073] mkdir("./syzkaller.SX2GbL", 0700 <unfinished ...>
[pid  5072] <... chmod resumed>)        = 0
[pid  5070] <... clone resumed>, child_tidptr=0x555555de7650) = 5074
[pid  5074] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5072] chdir("./syzkaller.mEDXeI" <unfinished ...>
[pid  5070] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5074] <... set_robust_list resumed>) = 0
[pid  5072] <... chdir resumed>)        = 0
[pid  5071] <... chdir resumed>)        = 0
[pid  5073] <... mkdir resumed>)        = 0
[pid  5074] mkdir("./syzkaller.8NvxAL", 0700 <unfinished ...>
[pid  5073] chmod("./syzkaller.SX2GbL", 0777 <unfinished ...>
[pid  5072] mkdir("./0", 0777 <unfinished ...>
[pid  5071] mkdir("./0", 0777./strace-static-x86_64: Process 5075 attached
 <unfinished ...>
[pid  5070] <... clone resumed>, child_tidptr=0x555555de7650) = 5075
[pid  5071] <... mkdir resumed>)        = 0
[pid  5075] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5073] <... chmod resumed>)        = 0
[pid  5074] <... mkdir resumed>)        = 0
[pid  5072] <... mkdir resumed>)        = 0
[pid  5075] <... set_robust_list resumed>) = 0
[pid  5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5073] chdir("./syzkaller.SX2GbL") = 0
[pid  5073] mkdir("./0", 0777 <unfinished ...>
[pid  5074] chmod("./syzkaller.8NvxAL", 0777 <unfinished ...>
[pid  5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5075] mkdir("./syzkaller.7KFXeJ", 0700 <unfinished ...>
[pid  5074] <... chmod resumed>)        = 0
[pid  5073] <... mkdir resumed>)        = 0
[pid  5072] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5071] <... openat resumed>)       = 3
[pid  5075] <... mkdir resumed>)        = 0
[pid  5074] chdir("./syzkaller.8NvxAL" <unfinished ...>
[pid  5072] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5074] <... chdir resumed>)        = 0
[pid  5074] mkdir("./0", 0777 <unfinished ...>
[pid  5072] close(3)                    = 0
[pid  5071] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] chmod("./syzkaller.7KFXeJ", 0777 <unfinished ...>
[pid  5074] <... mkdir resumed>)        = 0
[pid  5071] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5075] <... chmod resumed>)        = 0
[pid  5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] chdir("./syzkaller.7KFXeJ" <unfinished ...>
[pid  5071] close(3 <unfinished ...>
[pid  5075] <... chdir resumed>)        = 0
[pid  5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5071] <... close resumed>)        = 0
[pid  5075] mkdir("./0", 0777 <unfinished ...>
[pid  5074] <... openat resumed>)       = 3
[pid  5071] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5074] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid  5072] <... clone resumed>, child_tidptr=0x555555de7650) = 5076
[pid  5074] close(3)                    = 0
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5071] <... clone resumed>, child_tidptr=0x555555de7650) = 5077
[pid  5075] <... openat resumed>)       = 3
[   76.739361][   T28] audit: type=1400 audit(1714848362.765:88): avc:  denied  { read write } for  pid=5072 comm="syz-executor119" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid  5074] <... clone resumed>, child_tidptr=0x555555de7650) = 5078
./strace-static-x86_64: Process 5078 attached
./strace-static-x86_64: Process 5077 attached
./strace-static-x86_64: Process 5076 attached
[pid  5075] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5073] <... openat resumed>)       = 3
[pid  5078] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5077] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5076] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5073] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5078] <... set_robust_list resumed>) = 0
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5076] <... set_robust_list resumed>) = 0
[pid  5075] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5076] chdir("./0")                = 0
[pid  5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5076] setpgid(0, 0)               = 0
[pid  5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5076] write(3, "1000", 4)         = 4
[pid  5076] close(3)                    = 0
[   76.767572][   T28] audit: type=1400 audit(1714848362.765:89): avc:  denied  { read write } for  pid=5071 comm="syz-executor119" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   76.795576][   T28] audit: type=1400 audit(1714848362.765:90): avc:  denied  { open } for  pid=5072 comm="syz-executor119" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid  5076] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5078] chdir("./0" <unfinished ...>
[pid  5077] chdir("./0" <unfinished ...>
[pid  5075] close(3 <unfinished ...>
[pid  5073] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5078] <... chdir resumed>)        = 0
[pid  5077] <... chdir resumed>)        = 0
[pid  5073] close(3 <unfinished ...>
[pid  5078] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5077] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5078] <... prctl resumed>)        = 0
[pid  5077] <... prctl resumed>)        = 0
[pid  5073] <... close resumed>)        = 0
[pid  5078] setpgid(0, 0 <unfinished ...>
[pid  5077] setpgid(0, 0 <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] <... setpgid resumed>)      = 0
[pid  5076] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5079 attached
 <unfinished ...>
[pid  5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5075] <... close resumed>)        = 0
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5079] set_robust_list(0x555555de7660, 24 <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5073] <... clone resumed>, child_tidptr=0x555555de7650) = 5079
[pid  5079] <... set_robust_list resumed>) = 0
[pid  5077] write(3, "1000", 4 <unfinished ...>
[pid  5079] chdir("./0" <unfinished ...>
[pid  5077] <... write resumed>)        = 4
[pid  5079] <... chdir resumed>)        = 0
[pid  5077] close(3 <unfinished ...>
[pid  5078] <... setpgid resumed>)      = 0
[pid  5079] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5077] <... close resumed>)        = 0
[pid  5079] <... prctl resumed>)        = 0
[pid  5079] setpgid(0, 0 <unfinished ...>
[pid  5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5077] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5076] <... memfd_create resumed>) = 3
[pid  5075] <... clone resumed>, child_tidptr=0x555555de7650) = 5080
[pid  5079] <... setpgid resumed>)      = 0
[pid  5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5079] <... openat resumed>)       = 3
[pid  5077] <... symlink resumed>)      = 0
[pid  5076] <... mmap resumed>)         = 0x7fd2cba00000
[pid  5079] write(3, "1000", 4 <unfinished ...>
[pid  5078] <... openat resumed>)       = 3
[pid  5077] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5080 attached
 <unfinished ...>
[pid  5080] set_robust_list(0x555555de7660, 24) = 0
[pid  5080] chdir("./0")                = 0
[pid  5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5079] <... write resumed>)        = 4
[pid  5078] write(3, "1000", 4 <unfinished ...>
[pid  5077] <... memfd_create resumed>) = 3
[pid  5080] setpgid(0, 0 <unfinished ...>
[pid  5079] close(3 <unfinished ...>
[pid  5078] <... write resumed>)        = 4
[pid  5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5080] <... setpgid resumed>)      = 0
[pid  5079] <... close resumed>)        = 0
[pid  5078] close(3 <unfinished ...>
[pid  5077] <... mmap resumed>)         = 0x7fd2cba00000
[pid  5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5079] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5078] <... close resumed>)        = 0
[pid  5080] <... openat resumed>)       = 3
[pid  5078] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5080] write(3, "1000", 4 <unfinished ...>
[pid  5079] <... symlink resumed>)      = 0
[pid  5080] <... write resumed>)        = 4
[pid  5080] close(3 <unfinished ...>
[pid  5079] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5078] <... symlink resumed>)      = 0
[   76.827432][   T28] audit: type=1400 audit(1714848362.775:91): avc:  denied  { ioctl } for  pid=5072 comm="syz-executor119" path="/dev/loop1" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid  5080] <... close resumed>)        = 0
[pid  5080] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5079] <... memfd_create resumed>) = 3
[pid  5078] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5080] <... symlink resumed>)      = 0
[pid  5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5080] memfd_create("syzkaller", 0) = 3
[pid  5079] <... mmap resumed>)         = 0x7fd2cba00000
[pid  5078] <... memfd_create resumed>) = 3
[pid  5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd2cba00000
[pid  5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd2cba00000
[pid  5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5078] <... write resumed>)        = 16777216
[pid  5078] munmap(0x7fd2cba00000, 138412032) = 0
[pid  5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5079] <... write resumed>)        = 16777216
[pid  5078] <... openat resumed>)       = 4
[pid  5079] munmap(0x7fd2cba00000, 138412032 <unfinished ...>
[pid  5078] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5076] <... write resumed>)        = 16777216
[pid  5078] <... ioctl resumed>)        = 0
[pid  5076] munmap(0x7fd2cba00000, 138412032 <unfinished ...>
[pid  5078] close(3)                    = 0
[pid  5078] close(4)                    = 0
[pid  5078] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[   78.001777][ T5078] loop3: detected capacity change from 0 to 32768
[pid  5078] mount("/dev/loop3", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_POSIXACL, "iocharset=cp850,iocharset=macturkish,errors=remount-ro,nointegrity,iocharset=cp737,errors=continue,q"... <unfinished ...>
[pid  5079] <... munmap resumed>)       = 0
[pid  5079] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5077] <... write resumed>)        = 16777216
[pid  5079] <... openat resumed>)       = 4
[   78.057541][   T28] audit: type=1400 audit(1714848364.085:92): avc:  denied  { mounton } for  pid=5078 comm="syz-executor119" path=2F726F6F742F73797A6B616C6C65722E384E7678414C2F302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[pid  5079] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5077] munmap(0x7fd2cba00000, 138412032 <unfinished ...>
[pid  5079] <... ioctl resumed>)        = 0
[pid  5076] <... munmap resumed>)       = 0
[pid  5079] close(3 <unfinished ...>
[pid  5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5079] <... close resumed>)        = 0
[pid  5076] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5077] <... munmap resumed>)       = 0
[pid  5079] close(4 <unfinished ...>
[pid  5076] <... ioctl resumed>)        = 0
[   78.122474][ T5079] loop2: detected capacity change from 0 to 32768
[   78.140544][ T5076] loop1: detected capacity change from 0 to 32768
[pid  5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5080] <... write resumed>)        = 16777216
[pid  5079] <... close resumed>)        = 0
[pid  5078] <... mount resumed>)        = 0
[pid  5076] close(3 <unfinished ...>
[pid  5080] munmap(0x7fd2cba00000, 138412032 <unfinished ...>
[pid  5078] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5077] <... openat resumed>)       = 4
[pid  5076] <... close resumed>)        = 0
[pid  5078] <... openat resumed>)       = 3
[pid  5077] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5076] close(4)                    = 0
[pid  5079] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[pid  5079] mount("/dev/loop2", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_POSIXACL, "iocharset=cp850,iocharset=macturkish,errors=remount-ro,nointegrity,iocharset=cp737,errors=continue,q"... <unfinished ...>
[pid  5078] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5076] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 <unfinished ...>
[pid  5078] <... chdir resumed>)        = 0
[pid  5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5078] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5076] mount("/dev/loop1", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_POSIXACL, "iocharset=cp850,iocharset=macturkish,errors=remount-ro,nointegrity,iocharset=cp737,errors=continue,q"... <unfinished ...>
[pid  5078] exit_group(0)               = ?
[pid  5078] +++ exited with 0 +++
[pid  5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=29 /* 0.29 s */} ---
[pid  5074] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5076] <... mount resumed>)        = 0
[pid  5074] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5076] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5074] <... openat resumed>)       = 3
[pid  5076] <... openat resumed>)       = 3
[pid  5074] newfstatat(3, "",  <unfinished ...>
[pid  5076] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] <... chdir resumed>)        = 0
[pid  5074] getdents64(3,  <unfinished ...>
[pid  5079] <... mount resumed>)        = 0
[pid  5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5074] <... getdents64 resumed>0x555555de86f0 /* 4 entries */, 32768) = 176
[pid  5079] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5076] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5074] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] <... openat resumed>)       = 3
[pid  5076] exit_group(0 <unfinished ...>
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5076] <... exit_group resumed>)   = ?
[pid  5074] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5079] <... chdir resumed>)        = 0
[pid  5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5079] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5074] unlink("./0/binderfs" <unfinished ...>
[pid  5079] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5077] <... ioctl resumed>)        = 0
[pid  5076] +++ exited with 0 +++
[pid  5074] <... unlink resumed>)       = 0
[pid  5079] exit_group(0 <unfinished ...>
[pid  5074] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] close(3 <unfinished ...>
[pid  5072] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} ---
[pid  5079] <... exit_group resumed>)   = ?
[pid  5077] <... close resumed>)        = 0
[pid  5072] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5079] +++ exited with 0 +++
[pid  5077] close(4 <unfinished ...>
[pid  5072] <... restart_syscall resumed>) = 0
[pid  5072] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] <... close resumed>)        = 0
[   78.162757][   T28] audit: type=1400 audit(1714848364.195:93): avc:  denied  { mount } for  pid=5078 comm="syz-executor119" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   78.184909][ T5077] loop0: detected capacity change from 0 to 32768
[pid  5077] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 <unfinished ...>
[pid  5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=28 /* 0.28 s */} ---
[pid  5072] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5072] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5073] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5072] <... openat resumed>)       = 3
[pid  5077] <... mkdir resumed>)        = 0
[pid  5073] <... restart_syscall resumed>) = 0
[pid  5072] newfstatat(3, "",  <unfinished ...>
[pid  5077] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_POSIXACL, "iocharset=cp850,iocharset=macturkish,errors=remount-ro,nointegrity,iocharset=cp737,errors=continue,q"... <unfinished ...>
[pid  5072] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5072] getdents64(3,  <unfinished ...>
[pid  5073] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5072] <... getdents64 resumed>0x555555de86f0 /* 4 entries */, 32768) = 176
[pid  5073] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5072] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5073] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5072] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5072] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5073] <... openat resumed>)       = 3
[pid  5072] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5072] unlink("./0/binderfs" <unfinished ...>
[pid  5073] newfstatat(3, "",  <unfinished ...>
[pid  5072] <... unlink resumed>)       = 0
[pid  5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5072] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] <... munmap resumed>)       = 0
[pid  5077] <... mount resumed>)        = 0
[pid  5073] getdents64(3,  <unfinished ...>
[pid  5077] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5073] <... getdents64 resumed>0x555555de86f0 /* 4 entries */, 32768) = 176
[pid  5080] <... openat resumed>)       = 4
[pid  5077] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f" <unfinished ...>
[pid  5073] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5077] <... chdir resumed>)        = 0
[pid  5073] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5080] <... ioctl resumed>)        = 0
[pid  5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5073] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5077] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5073] unlink("./0/binderfs" <unfinished ...>
[   78.255040][   T28] audit: type=1400 audit(1714848364.265:94): avc:  denied  { unmount } for  pid=5074 comm="syz-executor119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   78.291395][ T5080] loop4: detected capacity change from 0 to 32768
[pid  5077] exit_group(0)               = ?
[pid  5073] <... unlink resumed>)       = 0
[pid  5073] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] +++ exited with 0 +++
[pid  5071] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=28 /* 0.28 s */} ---
[pid  5071] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5074] <... umount2 resumed>)      = 0
[pid  5071] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5071] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5071] getdents64(3,  <unfinished ...>
[pid  5074] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5071] <... getdents64 resumed>0x555555de86f0 /* 4 entries */, 32768) = 176
[pid  5071] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5071] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5074] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38",  <unfinished ...>
[pid  5071] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5071] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5071] unlink("./0/binderfs")      = 0
[   78.315347][ T5071] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI
[   78.327453][ T5071] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[   78.335877][ T5071] CPU: 0 PID: 5071 Comm: syz-executor119 Not tainted 6.9.0-rc6-syzkaller-00234-g7367539ad4b0 #0
[   78.346306][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   78.356386][ T5071] RIP: 0010:write_special_inodes+0x71/0x170
[   78.362309][ T5071] Code: df e8 e3 46 83 fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c0 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 da 00 00 00 49 8b 7d 30 41 ff d4 0f 1f 00 48 8d
[   78.381919][ T5071] RSP: 0018:ffffc90003137bb8 EFLAGS: 00010206
[   78.387987][ T5071] RAX: 0000000000000006 RBX: ffff88801f0cea00 RCX: ffffffff81be4d4e
[   78.395972][ T5071] RDX: ffff88801bbbda00 RSI: ffffffff830a7f4d RDI: 0000000000000030
[   78.403945][ T5071] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[   78.411917][ T5071] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bf0da0
[   78.419895][ T5071] R13: 0000000000000000 R14: ffff88802a317000 R15: ffff88802af4f540
[   78.427871][ T5071] FS:  0000555555de7380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[   78.436816][ T5071] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.443489][ T5071] CR2: 00007ffe4ced7ff8 CR3: 000000007492c000 CR4: 00000000003506f0
[   78.451468][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   78.459453][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   78.467425][ T5071] Call Trace:
[   78.470711][ T5071]  <TASK>
[   78.473638][ T5071]  ? show_regs+0x8c/0xa0
[   78.477883][ T5071]  ? die_addr+0x4f/0xd0
[   78.482059][ T5071]  ? exc_general_protection+0x155/0x230
[   78.487641][ T5071]  ? asm_exc_general_protection+0x26/0x30
[   78.493374][ T5071]  ? __pfx_filemap_flush+0x10/0x10
[   78.498495][ T5071]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[   78.503973][ T5071]  ? write_special_inodes+0x4d/0x170
[   78.509261][ T5071]  ? write_special_inodes+0x71/0x170
[   78.514547][ T5071]  ? write_special_inodes+0x4d/0x170
[   78.519838][ T5071]  lmLogSync+0x4a0/0x820
[   78.524083][ T5071]  ? __pfx_lmLogSync+0x10/0x10
[   78.528851][ T5071]  ? __pfx_dquot_writeback_dquots+0x10/0x10
[   78.534743][ T5071]  jfs_syncpt+0x89/0xa0
[   78.538901][ T5071]  jfs_sync_fs+0x83/0xb0
[   78.543147][ T5071]  ? __pfx_jfs_sync_fs+0x10/0x10
[   78.548089][ T5071]  sync_filesystem+0x10d/0x290
[   78.552856][ T5071]  generic_shutdown_super+0x7e/0x3d0
[   78.558159][ T5071]  kill_block_super+0x3b/0x90
[   78.562844][ T5071]  deactivate_locked_super+0xbe/0x1a0
[   78.568224][ T5071]  deactivate_super+0xde/0x100
[   78.572990][ T5071]  cleanup_mnt+0x222/0x450
[   78.577409][ T5071]  task_work_run+0x14e/0x250
[   78.581997][ T5071]  ? __pfx_task_work_run+0x10/0x10
[   78.587108][ T5071]  ptrace_notify+0x10e/0x130
[   78.591709][ T5071]  syscall_exit_to_user_mode_prepare+0x126/0x260
[   78.598040][ T5071]  syscall_exit_to_user_mode+0x11/0x2a0
[   78.603596][ T5071]  do_syscall_64+0xdc/0x260
[   78.608099][ T5071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.613995][ T5071] RIP: 0033:0x7fd2d3fac577
[   78.618406][ T5071] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[   78.638013][ T5071] RSP: 002b:00007ffe4ced8298 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[   78.646427][ T5071] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd2d3fac577
[   78.654397][ T5071] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4ced8350
[pid  5071] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] close(3 <unfinished ...>
[pid  5074] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5073] <... umount2 resumed>)      = 0
[pid  5080] <... close resumed>)        = 0
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5074] openat(AT_FDCWD, "\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5080] close(4 <unfinished ...>
[pid  5074] <... openat resumed>)       = 4
[pid  5073] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] <... close resumed>)        = 0
[pid  5074] newfstatat(4, "",  <unfinished ...>
[pid  5080] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777 <unfinished ...>
[pid  5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5073] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5080] <... mkdir resumed>)        = 0
[pid  5074] getdents64(4,  <unfinished ...>
[pid  5073] newfstatat(AT_FDCWD, "\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38",  <unfinished ...>
[pid  5080] mount("/dev/loop4", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_NOSUID|MS_POSIXACL, "iocharset=cp850,iocharset=macturkish,errors=remount-ro,nointegrity,iocharset=cp737,errors=continue,q"... <unfinished ...>
[pid  5074] <... getdents64 resumed>0x555555df0730 /* 2 entries */, 32768) = 48
[   78.662365][ T5071] RBP: 00007ffe4ced8350 R08: 0000000000000000 R09: 0000000000000000
[   78.670331][ T5071] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffe4ced93c0
[   78.678389][ T5071] R13: 0000555555de86c0 R14: 431bde82d7b634db R15: 00007ffe4ced93e0
[   78.686360][ T5071]  </TASK>
[   78.689382][ T5071] Modules linked in:
[   78.697893][ T5071] ---[ end trace 0000000000000000 ]---
[   78.704306][ T5071] RIP: 0010:write_special_inodes+0x71/0x170
[pid  5073] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5074] getdents64(4,  <unfinished ...>
[pid  5073] umount2("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5074] <... getdents64 resumed>0x555555df0730 /* 0 entries */, 32768) = 0
[pid  5074] close(4)                    = 0
[pid  5074] rmdir("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0
[pid  5074] getdents64(3, 0x555555de86f0 /* 0 entries */, 32768) = 0
[pid  5074] close(3)                    = 0
[pid  5074] rmdir("./0")                = 0
[pid  5073] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5074] mkdir("./1", 0777 <unfinished ...>
[pid  5073] openat(AT_FDCWD, "\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5074] <... mkdir resumed>)        = 0
[pid  5073] <... openat resumed>)       = 4
[pid  5073] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5073] getdents64(4,  <unfinished ...>
[pid  5074] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5073] <... getdents64 resumed>0x555555df0730 /* 2 entries */, 32768) = 48
[pid  5074] <... openat resumed>)       = 3
[pid  5073] getdents64(4,  <unfinished ...>
[pid  5074] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5073] <... getdents64 resumed>0x555555df0730 /* 0 entries */, 32768) = 0
[pid  5073] close(4)                    = 0
[pid  5073] rmdir("\x2e\x2f\x30\x2f\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38") = 0
[pid  5073] getdents64(3, 0x555555de86f0 /* 0 entries */, 32768) = 0
[pid  5073] close(3)                    = 0
[pid  5073] rmdir("./0")                = 0
[pid  5073] mkdir("./1", 0777)          = 0
[pid  5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3
[   78.711335][ T5071] Code: df e8 e3 46 83 fe 48 8d 7b 10 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 c0 00 00 00 4c 8b 6b 10 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 da 00 00 00 49 8b 7d 30 41 ff d4 0f 1f 00 48 8d
[   78.731407][ T5071] RSP: 0018:ffffc90003137bb8 EFLAGS: 00010206
[   78.737886][ T5071] RAX: 0000000000000006 RBX: ffff88801f0cea00 RCX: ffffffff81be4d4e
[   78.746383][ T5071] RDX: ffff88801bbbda00 RSI: ffffffff830a7f4d RDI: 0000000000000030
[   78.754954][ T5071] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[   78.763329][ T5071] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bf0da0
[   78.771517][ T5071] R13: 0000000000000000 R14: ffff88802a317000 R15: ffff88802af4f540
[   78.833195][ T5071] FS:  0000555555de7380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[   78.842281][ T5071] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   78.850193][ T5071] CR2: 0000555f747d4378 CR3: 000000007492c000 CR4: 00000000003506f0
[   78.858288][ T5071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   78.866576][ T5071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   78.875416][ T5071] Kernel panic - not syncing: Fatal exception
[   78.881791][ T5071] Kernel Offset: disabled
[   78.886118][ T5071] Rebooting in 86400 seconds..