./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2552033887

<...>
Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
execve("./syz-executor2552033887", ["./syz-executor2552033887"], 0x7ffcd074bec0 /* 10 vars */) = 0
brk(NULL)                               = 0x555575432000
brk(0x555575432d00)                     = 0x555575432d00
arch_prctl(ARCH_SET_FS, 0x555575432380) = 0
set_tid_address(0x555575432650)         = 288
set_robust_list(0x555575432660, 24)     = 0
rseq(0x555575432ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2552033887", 4096) = 28
getrandom("\xaf\x6d\xd9\x7e\x19\xee\x55\xc5", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555575432d00
brk(0x555575453d00)                     = 0x555575453d00
brk(0x555575454000)                     = 0x555575454000
mprotect(0x7fec584a1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575432650) = 289
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575432650) = 290
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575432650) = 291
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575432650) = 292
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575432650) = 293
./strace-static-x86_64: Process 293 attached
[pid   293] set_robust_list(0x555575432660, 24) = 0
[pid   293] mkdir("./syzkaller.Zi3AGn", 0700) = 0
[pid   293] chmod("./syzkaller.Zi3AGn", 0777) = 0
[pid   293] chdir("./syzkaller.Zi3AGn") = 0
[pid   293] mkdir("./0", 0777)          = 0
[pid   293] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3
executing program
[pid   293] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   293] close(3)                    = 0
[pid   293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555575432650) = 295
./strace-static-x86_64: Process 295 attached
[pid   295] set_robust_list(0x555575432660, 24) = 0
[pid   295] chdir("./0")                = 0
[pid   295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   295] setpgid(0, 0)               = 0
[pid   295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   295] write(3, "1000", 4)         = 4
[pid   295] close(3)                    = 0
[pid   295] symlink("/dev/binderfs", "./binderfs") = 0
[pid   295] write(1, "executing program\n", 18) = 18
[pid   295] memfd_create("syzkaller", 0) = 3
[pid   295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fec4ffee000
[pid   295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536
[pid   295] munmap(0x7fec4ffee000, 138412032./strace-static-x86_64: Process 289 attached
./strace-static-x86_64: Process 292 attached
./strace-static-x86_64: Process 291 attached
./strace-static-x86_64: Process 290 attached
 <unfinished ...>
[pid   289] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   295] <... munmap resumed>)       = 0
[pid   295] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   295] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   295] close(3)                    = 0
[pid   295] close(4 <unfinished ...>
[pid   292] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   291] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   290] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   292] <... set_robust_list resumed>) = 0
[pid   291] <... set_robust_list resumed>) = 0
[pid   290] <... set_robust_list resumed>) = 0
[pid   292] mkdir("./syzkaller.EFfHDk", 0700 <unfinished ...>
[pid   291] mkdir("./syzkaller.Y94eGH", 0700 <unfinished ...>
[pid   290] mkdir("./syzkaller.XH857o", 0700 <unfinished ...>
[pid   292] <... mkdir resumed>)        = 0
[pid   291] <... mkdir resumed>)        = 0
[pid   290] <... mkdir resumed>)        = 0
[pid   292] chmod("./syzkaller.EFfHDk", 0777 <unfinished ...>
[pid   291] chmod("./syzkaller.Y94eGH", 0777 <unfinished ...>
[pid   290] chmod("./syzkaller.XH857o", 0777 <unfinished ...>
[pid   292] <... chmod resumed>)        = 0
[pid   291] <... chmod resumed>)        = 0
[pid   290] <... chmod resumed>)        = 0
[pid   292] chdir("./syzkaller.EFfHDk" <unfinished ...>
[pid   291] chdir("./syzkaller.Y94eGH" <unfinished ...>
[pid   290] chdir("./syzkaller.XH857o" <unfinished ...>
[pid   292] <... chdir resumed>)        = 0
[pid   291] <... chdir resumed>)        = 0
[pid   290] <... chdir resumed>)        = 0
[pid   292] mkdir("./0", 0777 <unfinished ...>
[pid   291] mkdir("./0", 0777 <unfinished ...>
[pid   290] mkdir("./0", 0777 <unfinished ...>
[pid   292] <... mkdir resumed>)        = 0
[pid   291] <... mkdir resumed>)        = 0
[pid   290] <... mkdir resumed>)        = 0
[pid   292] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   291] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid   290] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   289] <... set_robust_list resumed>) = 0
[pid   289] mkdir("./syzkaller.fHSutj", 0700) = 0
[pid   289] chmod("./syzkaller.fHSutj", 0777) = 0
[pid   289] chdir("./syzkaller.fHSutj") = 0
[pid   289] mkdir("./0", 0777)          = 0
[   22.355786][   T24] audit: type=1400 audit(1736886928.369:66): avc:  denied  { execmem } for  pid=288 comm="syz-executor255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.375638][   T24] audit: type=1400 audit(1736886928.369:67): avc:  denied  { read write } for  pid=293 comm="syz-executor255" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   289] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   295] <... close resumed>)        = 0
[pid   292] <... openat resumed>)       = 3
[pid   291] <... openat resumed>)       = 3
[pid   290] <... openat resumed>)       = 3
[pid   289] <... openat resumed>)       = 3
[pid   295] mkdir("./file1", 0777 <unfinished ...>
[pid   292] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   291] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   290] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   289] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   295] <... mkdir resumed>)        = 0
[pid   292] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   291] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   290] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   289] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   295] mount("/dev/loop4", "./file1", "ext4", MS_SYNCHRONOUS, ",errors=continue" <unfinished ...>
[pid   292] close(3 <unfinished ...>
[pid   291] close(3 <unfinished ...>
[pid   290] close(3 <unfinished ...>
[pid   289] close(3 <unfinished ...>
[pid   292] <... close resumed>)        = 0
[pid   291] <... close resumed>)        = 0
[pid   290] <... close resumed>)        = 0
[pid   289] <... close resumed>)        = 0
[pid   292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   292] <... clone resumed>, child_tidptr=0x555575432650) = 302
[pid   291] <... clone resumed>, child_tidptr=0x555575432650) = 301
[pid   290] <... clone resumed>, child_tidptr=0x555575432650) = 300
[pid   289] <... clone resumed>, child_tidptr=0x555575432650) = 299
[   22.399769][   T24] audit: type=1400 audit(1736886928.369:68): avc:  denied  { open } for  pid=293 comm="syz-executor255" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   22.423842][   T24] audit: type=1400 audit(1736886928.369:69): avc:  denied  { ioctl } for  pid=293 comm="syz-executor255" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
executing program
executing program
executing program
executing program
./strace-static-x86_64: Process 302 attached
./strace-static-x86_64: Process 301 attached
./strace-static-x86_64: Process 300 attached
./strace-static-x86_64: Process 299 attached
[pid   302] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   301] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   300] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   299] set_robust_list(0x555575432660, 24 <unfinished ...>
[pid   302] <... set_robust_list resumed>) = 0
[pid   301] <... set_robust_list resumed>) = 0
[pid   300] <... set_robust_list resumed>) = 0
[pid   299] <... set_robust_list resumed>) = 0
[pid   302] chdir("./0" <unfinished ...>
[pid   301] chdir("./0" <unfinished ...>
[pid   300] chdir("./0" <unfinished ...>
[pid   299] chdir("./0" <unfinished ...>
[pid   302] <... chdir resumed>)        = 0
[pid   301] <... chdir resumed>)        = 0
[pid   300] <... chdir resumed>)        = 0
[pid   299] <... chdir resumed>)        = 0
[pid   302] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   301] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   300] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   299] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   302] <... prctl resumed>)        = 0
[pid   301] <... prctl resumed>)        = 0
[pid   300] <... prctl resumed>)        = 0
[pid   299] <... prctl resumed>)        = 0
[pid   302] setpgid(0, 0 <unfinished ...>
[pid   301] setpgid(0, 0 <unfinished ...>
[pid   300] setpgid(0, 0 <unfinished ...>
[pid   299] setpgid(0, 0 <unfinished ...>
[pid   302] <... setpgid resumed>)      = 0
[pid   301] <... setpgid resumed>)      = 0
[pid   300] <... setpgid resumed>)      = 0
[pid   299] <... setpgid resumed>)      = 0
[pid   302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   302] <... openat resumed>)       = 3
[pid   301] <... openat resumed>)       = 3
[pid   300] <... openat resumed>)       = 3
[pid   299] <... openat resumed>)       = 3
[pid   302] write(3, "1000", 4 <unfinished ...>
[pid   301] write(3, "1000", 4 <unfinished ...>
[pid   300] write(3, "1000", 4 <unfinished ...>
[pid   299] write(3, "1000", 4 <unfinished ...>
[pid   302] <... write resumed>)        = 4
[pid   301] <... write resumed>)        = 4
[pid   300] <... write resumed>)        = 4
[pid   299] <... write resumed>)        = 4
[pid   302] close(3 <unfinished ...>
[pid   301] close(3 <unfinished ...>
[pid   300] close(3 <unfinished ...>
[pid   299] close(3 <unfinished ...>
[pid   302] <... close resumed>)        = 0
[pid   301] <... close resumed>)        = 0
[pid   300] <... close resumed>)        = 0
[pid   299] <... close resumed>)        = 0
[pid   302] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   301] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   300] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   299] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid   302] <... symlink resumed>)      = 0
[pid   301] <... symlink resumed>)      = 0
[pid   300] <... symlink resumed>)      = 0
[pid   299] <... symlink resumed>)      = 0
[pid   302] write(1, "executing program\n", 18 <unfinished ...>
[pid   301] write(1, "executing program\n", 18 <unfinished ...>
[pid   300] write(1, "executing program\n", 18 <unfinished ...>
[pid   299] write(1, "executing program\n", 18 <unfinished ...>
[pid   302] <... write resumed>)        = 18
[pid   301] <... write resumed>)        = 18
[pid   300] <... write resumed>)        = 18
[pid   299] <... write resumed>)        = 18
[pid   302] memfd_create("syzkaller", 0 <unfinished ...>
[pid   301] memfd_create("syzkaller", 0 <unfinished ...>
[pid   300] memfd_create("syzkaller", 0 <unfinished ...>
[pid   299] memfd_create("syzkaller", 0 <unfinished ...>
[pid   302] <... memfd_create resumed>) = 3
[pid   301] <... memfd_create resumed>) = 3
[pid   300] <... memfd_create resumed>) = 3
[pid   299] <... memfd_create resumed>) = 3
[pid   302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   302] <... mmap resumed>)         = 0x7fec4ffee000
[pid   301] <... mmap resumed>)         = 0x7fec4ffee000
[pid   300] <... mmap resumed>)         = 0x7fec4ffee000
[pid   299] <... mmap resumed>)         = 0x7fec4ffee000
[pid   302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 <unfinished ...>
[pid   301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 <unfinished ...>
[pid   300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 <unfinished ...>
[pid   299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536 <unfinished ...>
[pid   302] <... write resumed>)        = 65536
[pid   301] <... write resumed>)        = 65536
[pid   300] <... write resumed>)        = 65536
[pid   299] <... write resumed>)        = 65536
[pid   302] munmap(0x7fec4ffee000, 138412032 <unfinished ...>
[pid   301] munmap(0x7fec4ffee000, 138412032 <unfinished ...>
[pid   300] munmap(0x7fec4ffee000, 138412032 <unfinished ...>
[pid   299] munmap(0x7fec4ffee000, 138412032 <unfinished ...>
[pid   302] <... munmap resumed>)       = 0
[pid   301] <... munmap resumed>)       = 0
[pid   300] <... munmap resumed>)       = 0
[pid   299] <... munmap resumed>)       = 0
[pid   302] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   301] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid   300] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   299] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   302] <... openat resumed>)       = 4
[pid   301] <... openat resumed>)       = 4
[pid   300] <... openat resumed>)       = 4
[pid   302] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   301] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   300] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   302] <... ioctl resumed>)        = 0
[pid   302] close(3)                    = 0
[pid   302] close(4 <unfinished ...>
[pid   301] <... ioctl resumed>)        = 0
[pid   301] close(3)                    = 0
[pid   301] close(4 <unfinished ...>
[pid   300] <... ioctl resumed>)        = 0
[pid   299] <... openat resumed>)       = 4
[pid   299] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   300] close(3)                    = 0
[pid   300] close(4 <unfinished ...>
[pid   295] <... mount resumed>)        = 0
[pid   295] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   295] chdir("./file1")            = 0
[   22.450046][   T24] audit: type=1400 audit(1736886928.439:70): avc:  denied  { mounton } for  pid=295 comm="syz-executor255" path="/root/syzkaller.Zi3AGn/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   22.475238][  T295] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   22.484143][   T24] audit: type=1400 audit(1736886928.499:71): avc:  denied  { mount } for  pid=295 comm="syz-executor255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[pid   295] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid   301] <... close resumed>)        = 0
[pid   302] <... close resumed>)        = 0
[pid   301] mkdir("./file1", 0777 <unfinished ...>
[pid   302] mkdir("./file1", 0777 <unfinished ...>
[pid   301] <... mkdir resumed>)        = 0
[pid   299] <... ioctl resumed>)        = 0
[pid   301] mount("/dev/loop2", "./file1", "ext4", MS_SYNCHRONOUS, ",errors=continue" <unfinished ...>
[pid   299] close(3)                    = 0
[pid   302] <... mkdir resumed>)        = 0
[pid   299] close(4 <unfinished ...>
[   22.484167][  T295] ext4 filesystem being mounted at /root/syzkaller.Zi3AGn/0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[pid   302] mount("/dev/loop3", "./file1", "ext4", MS_SYNCHRONOUS, ",errors=continue" <unfinished ...>
[pid   300] <... close resumed>)        = 0
[pid   295] <... openat resumed>)       = 4
[pid   295] ioctl(4, LOOP_CLR_FD)       = 0
[pid   295] close(4)                    = 0
[pid   295] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4
[pid   295] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0
[pid   295] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5
[pid   295] link("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid   295] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 6
[pid   295] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   300] mkdir("./file1", 0777 <unfinished ...>
[pid   295] <... mount resumed>)        = 0
[pid   295] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   300] <... mkdir resumed>)        = 0
[   22.582265][   T24] audit: type=1400 audit(1736886928.599:72): avc:  denied  { write } for  pid=295 comm="syz-executor255" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   22.603923][   T24] audit: type=1400 audit(1736886928.599:73): avc:  denied  { add_name } for  pid=295 comm="syz-executor255" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   22.646454][   T24] audit: type=1400 audit(1736886928.599:74): avc:  denied  { create } for  pid=295 comm="syz-executor255" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[pid   300] mount("/dev/loop1", "./file1", "ext4", MS_SYNCHRONOUS, ",errors=continue" <unfinished ...>
[pid   302] <... mount resumed>)        = 0
[pid   302] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   302] chdir("./file1")            = 0
[pid   302] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   301] <... mount resumed>)        = 0
[pid   299] <... close resumed>)        = 0
[pid   295] <... open resumed>)         = 7
[pid   301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   301] chdir("./file1")            = 0
[pid   301] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   301] ioctl(4, LOOP_CLR_FD)       = 0
[pid   301] close(4)                    = 0
[pid   301] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   299] mkdir("./file1", 0777)      = 0
[pid   299] mount("/dev/loop0", "./file1", "ext4", MS_SYNCHRONOUS, ",errors=continue" <unfinished ...>
[pid   295] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 7, 0) = 0x20000000
[pid   295] bpf(BPF_RAW_TRACEPOINT_OPEN, 0x20001040, 16) = -1 EBADF (Bad file descriptor)
[pid   295] exit_group(0)               = ?
[pid   295] +++ exited with 0 +++
[pid   301] <... creat resumed>)        = 4
[pid   293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
[pid   293] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   301] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   302] <... openat resumed>)       = 4
[   22.688205][   T24] audit: type=1400 audit(1736886928.599:75): avc:  denied  { write open } for  pid=295 comm="syz-executor255" path="/root/syzkaller.Zi3AGn/0/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   22.697939][  T302] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   22.735709][  T301] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   22.743701][  T302] ext4 filesystem being mounted at /root/syzkaller.EFfHDk/0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   22.752344][  T301] ext4 filesystem being mounted at /root/syzkaller.Y94eGH/0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[pid   293] <... restart_syscall resumed>) = 0
[pid   293] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   301] <... mknod resumed>)        = 0
[pid   301] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   302] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   293] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   293] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   293] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   293] getdents64(3, 0x5555754336f0 /* 4 entries */, 32768) = 112
[pid   293] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   293] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   293] unlink("./0/binderfs" <unfinished ...>
[pid   302] <... ioctl resumed>)        = 0
[pid   301] <... creat resumed>)        = 5
[pid   293] <... unlink resumed>)       = 0
[pid   293] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   301] link("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid   302] close(4)                    = 0
[pid   302] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   293] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   300] <... mount resumed>)        = 0
[pid   300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid   300] chdir("./file1")            = 0
[pid   300] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   300] ioctl(4, LOOP_CLR_FD)       = 0
[pid   300] close(4)                    = 0
[pid   300] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4
[pid   300] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0
[pid   300] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5
[pid   300] link("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid   300] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 6
[pid   300] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0
[pid   300] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 7
[pid   300] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 7, 0) = 0x20000000
[pid   300] bpf(BPF_RAW_TRACEPOINT_OPEN, 0x20001040, 16) = -1 EBADF (Bad file descriptor)
[pid   300] exit_group(0)               = ?
[pid   300] +++ exited with 0 +++
[pid   293] newfstatat(AT_FDCWD, "./0/file1",  <unfinished ...>
[pid   290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
[pid   301] <... link resumed>)         = 0
[pid   293] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   301] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 <unfinished ...>
[pid   293] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   301] <... open resumed>)         = 6
[pid   293] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   290] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   301] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   293] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   290] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   301] <... mount resumed>)        = 0
[pid   293] <... openat resumed>)       = 4
[pid   290] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   301] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   293] newfstatat(4, "",  <unfinished ...>
[pid   290] <... openat resumed>)       = 3
[pid   301] <... open resumed>)         = 7
[pid   293] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_EMPTY_PATH) = 0
[   22.782881][  T300] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   22.796702][  T299] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   22.796991][  T300] ext4 filesystem being mounted at /root/syzkaller.XH857o/0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   22.814041][  T299] ext4 filesystem being mounted at /root/syzkaller.fHSutj/0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[pid   290] newfstatat(3, "",  <unfinished ...>
[pid   301] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 7, 0 <unfinished ...>
[pid   293] getdents64(4,  <unfinished ...>
[pid   290] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   302] <... creat resumed>)        = 4
[pid   299] <... mount resumed>)        = 0
[pid   290] getdents64(3,  <unfinished ...>
[pid   302] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   290] <... getdents64 resumed>0x5555754336f0 /* 4 entries */, 32768) = 112
[pid   302] <... mknod resumed>)        = 0
[pid   299] <... openat resumed>)       = 3
[pid   290] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   302] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   299] chdir("./file1" <unfinished ...>
[pid   290] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid   302] <... creat resumed>)        = 5
[pid   299] <... chdir resumed>)        = 0
[pid   290] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid   302] link("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid   299] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   290] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   302] <... link resumed>)         = 0
[pid   299] <... openat resumed>)       = 4
[pid   290] unlink("./0/binderfs" <unfinished ...>
[pid   302] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 <unfinished ...>
[pid   299] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   290] <... unlink resumed>)       = 0
[pid   302] <... open resumed>)         = 6
[pid   299] <... ioctl resumed>)        = 0
[pid   290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   302] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   299] close(4 <unfinished ...>
[pid   290] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   302] <... mount resumed>)        = 0
[pid   299] <... close resumed>)        = 0
[pid   290] newfstatat(AT_FDCWD, "./0/file1",  <unfinished ...>
[pid   302] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   299] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   290] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   302] <... open resumed>)         = 7
[pid   299] <... creat resumed>)        = 4
[pid   290] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   302] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 7, 0 <unfinished ...>
[pid   299] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   290] <... umount2 resumed>)      = -1 EBUSY (Device or resource busy)
[pid   302] <... mmap resumed>)         = 0x20000000
[pid   299] <... mknod resumed>)        = 0
[pid   290] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid   302] bpf(BPF_RAW_TRACEPOINT_OPEN, 0x20001040, 16 <unfinished ...>
[pid   299] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000 <unfinished ...>
[pid   290] <... openat resumed>)       = 4
[pid   302] <... bpf resumed>)          = -1 EBADF (Bad file descriptor)
[pid   299] <... creat resumed>)        = 5
[pid   290] newfstatat(4, "",  <unfinished ...>
[pid   302] exit_group(0 <unfinished ...>
[pid   299] link("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid   290] <... newfstatat resumed>{st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_EMPTY_PATH) = 0
[pid   302] <... exit_group resumed>)   = ?
[pid   299] <... link resumed>)         = 0
[pid   290] getdents64(4,  <unfinished ...>
[pid   302] +++ exited with 0 +++
[pid   299] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 <unfinished ...>
[pid   290] <... getdents64 resumed>0x55557543b730 /* 1 entries */, 32768) = 120
[pid   299] <... open resumed>)         = 6
[pid   290] umount2("./0/file1/enerate", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid   299] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   290] <... umount2 resumed>)      = -1 ENOENT (No such file or directory)
[pid   299] <... mount resumed>)        = 0
[pid   290] newfstatat(AT_FDCWD, "./0/file1/enerate",  <unfinished ...>
[pid   299] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   290] <... newfstatat resumed>0x7fff70bba850, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   299] <... open resumed>)         = 7
[pid   290] exit_group(1 <unfinished ...>
[pid   299] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 7, 0 <unfinished ...>
[pid   290] <... exit_group resumed>)   = ?
[pid   299] <... mmap resumed>)         = 0x20000000
[pid   290] +++ exited with 1 +++
[pid   299] bpf(BPF_RAW_TRACEPOINT_OPEN, 0x20001040, 16) = -1 EBADF (Bad file descriptor)
[pid   299] exit_group(0)               = ?
[pid   299] +++ exited with 0 +++
[   22.828848][  T293] ==================================================================
[   22.837252][  T293] BUG: KASAN: use-after-free in ext4_htree_fill_tree+0x1316/0x13e0
[   22.844948][  T293] Read of size 1 at addr ffff88811d7bac67 by task syz-executor255/293
[   22.852926][  T293] 
[   22.855105][  T293] CPU: 0 PID: 293 Comm: syz-executor255 Not tainted 5.10.233-syzkaller-00881-gfbe98d68b6b3 #0
[   22.865169][  T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   22.875072][  T293] Call Trace:
[   22.878200][  T293]  dump_stack_lvl+0x1e2/0x24b
[pid   301] <... mmap resumed>)         = 0x20000000
[pid   301] bpf(BPF_RAW_TRACEPOINT_OPEN, 0x20001040, 16) = -1 EBADF (Bad file descriptor)
[pid   301] exit_group(0)               = ?
[pid   301] +++ exited with 0 +++
[pid   292] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
[pid   292] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid   292] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   292] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   292] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   292] getdents64(3, 0x5555754336f0 /* 4 entries */, 32768) = 112
[pid   292] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   292] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   292] unlink("./0/binderfs")      = 0
[pid   292] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   292] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   292] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   292] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   292] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_EMPTY_PATH) = 0
[pid   292] getdents64(4, 0x55557543b730 /* 1 entries */, 32768) = 120
[pid   292] umount2("./0/file1/enerate", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   292] newfstatat(AT_FDCWD, "./0/file1/enerate", 0x7fff70bba850, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   292] exit_group(1)               = ?
[pid   292] +++ exited with 1 +++
[pid   288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=290, si_uid=0, si_status=1, si_utime=0, si_stime=0} ---
[pid   288] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=299, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
[pid   289] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid   289] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   289] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   289] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   289] getdents64(3, 0x5555754336f0 /* 4 entries */, 32768) = 112
[pid   289] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   289] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] unlink("./0/binderfs")      = 0
[pid   289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   289] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   289] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   289] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   289] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_EMPTY_PATH) = 0
[pid   289] getdents64(4, 0x55557543b730 /* 1 entries */, 32768) = 120
[pid   289] umount2("./0/file1/enerate", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   289] newfstatat(AT_FDCWD, "./0/file1/enerate", 0x7fff70bba850, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   289] exit_group(1)               = ?
[pid   289] +++ exited with 1 +++
[pid   288] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal)
[pid   288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=289, si_uid=0, si_status=1, si_utime=0, si_stime=1} ---
[pid   288] restart_syscall(<... resuming interrupted restart_syscall ...> <unfinished ...>
[pid   291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=301, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
[pid   291] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid   291] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   291] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   291] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid   291] getdents64(3, 0x5555754336f0 /* 4 entries */, 32768) = 112
[pid   291] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid   291] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] unlink("./0/binderfs")      = 0
[pid   291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   291] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid   291] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
[pid   291] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid   291] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=3072, ...}, AT_EMPTY_PATH) = 0
[pid   291] getdents64(4, 0x55557543b730 /* 1 entries */, 32768) = 120
[pid   291] umount2("./0/file1/enerate", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   291] newfstatat(AT_FDCWD, "./0/file1/enerate", 0x7fff70bba850, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   291] exit_group(1)               = ?
[pid   291] +++ exited with 1 +++
[pid   288] <... restart_syscall resumed>) = ? ERESTART_RESTARTBLOCK (Interrupted by signal)
[pid   288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=291, si_uid=0, si_status=1, si_utime=0, si_stime=0} ---
[   22.882715][  T293]  ? bfq_pos_tree_add_move+0x43b/0x43b
[   22.888010][  T293]  ? panic+0x812/0x812
[   22.891911][  T293]  print_address_description+0x81/0x3b0
[   22.897290][  T293]  ? ext4_htree_store_dirent+0x19c/0x590
[   22.902760][  T293]  kasan_report+0x179/0x1c0
[   22.907101][  T293]  ? ext4_htree_fill_tree+0x1316/0x13e0
[   22.912475][  T293]  ? ext4_htree_fill_tree+0x1316/0x13e0
[   22.917852][  T293]  __asan_report_load1_noabort+0x14/0x20
[   22.923319][  T293]  ext4_htree_fill_tree+0x1316/0x13e0
[   22.928526][  T293]  ? ext4_handle_dirty_dirblock+0x6e0/0x6e0
[   22.934251][  T293]  ? __kasan_kmalloc+0x9/0x10
[   22.938764][  T293]  ? ext4_readdir+0x4df/0x37c0
[   22.943363][  T293]  ext4_readdir+0x2dde/0x37c0
[   22.947880][  T293]  ? _raw_spin_unlock_irq+0x4e/0x70
[   22.952910][  T293]  ? switch_mm_irqs_off+0x71b/0x9a0
[   22.957945][  T293]  ? __switch_to_asm+0x34/0x60
[   22.962544][  T293]  ? ext4_dir_llseek+0x4c0/0x4c0
[   22.967321][  T293]  ? __schedule+0xbee/0x1330
[   22.971746][  T293]  ? __kasan_check_write+0x14/0x20
[   22.976699][  T293]  ? down_read_killable+0x101/0x220
[   22.981736][  T293]  ? down_read_interruptible+0x220/0x220
[   22.987199][  T293]  ? security_file_permission+0x86/0xb0
[   22.992578][  T293]  iterate_dir+0x265/0x580
[   22.996830][  T293]  ? ext4_dir_llseek+0x4c0/0x4c0
[   23.001602][  T293]  __se_sys_getdents64+0x1c1/0x460
[   23.006551][  T293]  ? __x64_sys_getdents64+0x90/0x90
[   23.011584][  T293]  ? filldir+0x680/0x680
[   23.015670][  T293]  ? debug_smp_processor_id+0x17/0x20
[   23.020875][  T293]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   23.026777][  T293]  ? irqentry_exit_to_user_mode+0x41/0x80
[   23.032330][  T293]  __x64_sys_getdents64+0x7b/0x90
[   23.037191][  T293]  do_syscall_64+0x34/0x70
[   23.041445][  T293]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   23.047171][  T293] RIP: 0033:0x7fec584551f3
[   23.051425][  T293] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 47 fb ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8
[   23.070864][  T293] RSP: 002b:00007fff70bba7e8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   23.079112][  T293] RAX: ffffffffffffffda RBX: 000055557543b730 RCX: 00007fec584551f3
[   23.086919][  T293] RDX: 0000000000008000 RSI: 000055557543b730 RDI: 0000000000000004
[   23.094730][  T293] RBP: 000055557543b704 R08: 0000000000000000 R09: 0000000000000000
[   23.102544][  T293] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb8
[   23.110355][  T293] R13: 0000000000000010 R14: 000055557543b700 R15: 00007fff70bbca60
[   23.118168][  T293] 
[   23.120333][  T293] The buggy address belongs to the page:
[   23.125821][  T293] page:ffffea000475ee80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d7ba
[   23.135883][  T293] flags: 0x4000000000000000()
[   23.140398][  T293] raw: 4000000000000000 ffffea000475eec8 ffffea000475ee48 0000000000000000
[   23.148811][  T293] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   23.157226][  T293] page dumped because: kasan: bad access detected
[   23.163482][  T293] page_owner info is not present (never set?)
[   23.169373][  T293] 
[   23.171548][  T293] Memory state around the buggy address:
[   23.177016][  T293]  ffff88811d7bab00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   23.184914][  T293]  ffff88811d7bab80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   23.192811][  T293] >ffff88811d7bac00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   23.200712][  T293]                                                        ^
[   23.207742][  T293]  ffff88811d7bac80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   23.215639][  T293]  ffff88811d7bad00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   23.223535][  T293] ==================================================================
[pid   288] restart_syscall(<... resuming interrupted restart_syscall ...> <unfinished ...>
[pid   293] <... getdents64 resumed>0x55557543b730 /* 1 entries */, 32768) = 120
[pid   293] umount2("./0/file1/enerate", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   293] newfstatat(AT_FDCWD, "./0/file1/enerate", 0x7fff70bba850, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
[pid   293] exit_group(1)               = ?
[pid   293] +++ exited with 1 +++
<... restart_syscall resumed>)          = ? ERESTART_RESTARTBLOCK (Interrupted by signal)
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=293, si_uid=0, si_status=1, si_utime=0, si_stime=0} ---
[   23.231453][  T293] Disabling lock debugging due to kernel taint