./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1228019671
<...>
syzkaller
syzkaller login: [ 6.805821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[ 12.261885][ T23] kauditd_printk_skb: 60 callbacks suppressed
[ 12.261897][ T23] audit: type=1400 audit(1682854914.430:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 12.269508][ T23] audit: type=1400 audit(1682854914.430:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[10514]" dev="pipefs" ino=10514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
[ 12.506435][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
[ 13.645593][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!!
[ 13.666418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
Warning: Permanently added '10.128.1.129' (ECDSA) to the list of known hosts.
execve("./syz-executor1228019671", ["./syz-executor1228019671"], 0x7fff6234fa90 /* 10 vars */) = 0
brk(NULL) = 0x555556af3000
brk(0x555556af3c40) = 0x555556af3c40
arch_prctl(ARCH_SET_FS, 0x555556af3300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1228019671", 4096) = 28
brk(0x555556b14c40) = 0x555556b14c40
brk(0x555556b15000) = 0x555556b15000
mprotect(0x7f9589963000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid() = 371
mkdir("./syzkaller.uYsrAf", 0700) = 0
chmod("./syzkaller.uYsrAf", 0777) = 0
chdir("./syzkaller.uYsrAf") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 373
./strace-static-x86_64: Process 373 attached
[pid 373] chdir("./0") = 0
[pid 373] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 373] setpgid(0, 0) = 0
[pid 373] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 373] write(3, "1000", 4) = 4
[pid 373] close(3) = 0
[pid 373] symlink("/dev/binderfs", "./binderfs") = 0
[pid 373] memfd_create("syzkaller", 0) = 3
[pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 373] munmap(0x7f95814a7000, 262144) = 0
[pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 373] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 373] close(3) = 0
[pid 373] mkdir("./file0", 0777) = 0
[ 21.554669][ T23] audit: type=1400 audit(1682854923.720:73): avc: denied { execmem } for pid=371 comm="syz-executor122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 21.574201][ T23] audit: type=1400 audit(1682854923.730:74): avc: denied { read write } for pid=371 comm="syz-executor122" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 21.599119][ T23] audit: type=1400 audit(1682854923.730:75): avc: denied { open } for pid=371 comm="syz-executor122" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 21.612670][ T373] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 21.623442][ T23] audit: type=1400 audit(1682854923.730:76): avc: denied { ioctl } for pid=371 comm="syz-executor122" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 21.634316][ T373] ext4_test_bit(bit=14, block=18) = 1
[ 21.659564][ T23] audit: type=1400 audit(1682854923.750:77): avc: denied { mounton } for pid=373 comm="syz-executor122" path="/root/syzkaller.uYsrAf/0/file0" dev="sda1" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 21.666662][ T373] is_bad_inode(inode)=0
[ 21.694866][ T373] NEXT_ORPHAN(inode)=0
[ 21.699029][ T373] max_ino=32
[ 21.702219][ T373] i_nlink=1
[pid 373] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 373] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 373] chdir("./file0") = 0
[pid 373] ioctl(4, LOOP_CLR_FD) = 0
[pid 373] close(4) = 0
[pid 373] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 373] mkdirat(4, "./bus", 000) = 0
[ 21.705348][ T373] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[ 21.714938][ T23] audit: type=1400 audit(1682854923.890:78): avc: denied { mount } for pid=373 comm="syz-executor122" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 21.714969][ T373] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/0/file0 supports timestamps until 2038 (0x7fffffff)
[pid 373] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 373] open("./file0", O_RDONLY) = 6
[pid 373] mkdirat(6, "./bus", 000) = 0
[pid 373] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 373] exit_group(0) = ?
[pid 373] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=373, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs") = 0
[ 21.751201][ T23] audit: type=1400 audit(1682854923.920:79): avc: denied { write } for pid=373 comm="syz-executor122" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 21.773298][ T23] audit: type=1400 audit(1682854923.920:80): avc: denied { add_name } for pid=373 comm="syz-executor122" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 376
./strace-static-x86_64: Process 376 attached
[pid 376] chdir("./1") = 0
[pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 376] setpgid(0, 0) = 0
[pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 376] write(3, "1000", 4) = 4
[pid 376] close(3) = 0
[pid 376] symlink("/dev/binderfs", "./binderfs") = 0
[pid 376] memfd_create("syzkaller", 0) = 3
[pid 376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 376] munmap(0x7f95814a7000, 262144) = 0
[pid 376] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 376] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 376] close(3) = 0
[pid 376] mkdir("./file0", 0777) = 0
[ 21.794838][ T23] audit: type=1400 audit(1682854923.920:81): avc: denied { create } for pid=373 comm="syz-executor122" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 21.815172][ T23] audit: type=1400 audit(1682854923.930:82): avc: denied { remove_name } for pid=373 comm="syz-executor122" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 21.858071][ T376] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 21.869127][ T376] ext4_test_bit(bit=14, block=18) = 1
[ 21.874492][ T376] is_bad_inode(inode)=0
[ 21.878729][ T376] NEXT_ORPHAN(inode)=0
[ 21.882835][ T376] max_ino=32
[ 21.886202][ T376] i_nlink=1
[ 21.889361][ T376] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 376] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 376] chdir("./file0") = 0
[pid 376] ioctl(4, LOOP_CLR_FD) = 0
[pid 376] close(4) = 0
[pid 376] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 376] mkdirat(4, "./bus", 000) = 0
[pid 376] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 376] open("./file0", O_RDONLY) = 6
[pid 376] mkdirat(6, "./bus", 000) = 0
[ 21.898305][ T376] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/1/file0 supports timestamps until 2038 (0x7fffffff)
[ 21.928110][ T376] ==================================================================
[ 21.936207][ T376] BUG: KASAN: use-after-free in ext4_rename_dir_prepare+0x42e/0x4a0
[ 21.944266][ T376] Read of size 4 at addr ffff888119c14000 by task syz-executor122/376
[ 21.952417][ T376]
[ 21.954738][ T376] CPU: 1 PID: 376 Comm: syz-executor122 Not tainted 5.10.161-syzkaller-00019-g416c4356f372 #0
[ 21.964950][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 21.975068][ T376] Call Trace:
[ 21.978339][ T376] dump_stack_lvl+0x1e2/0x24b
[ 21.982991][ T376] ? bfq_pos_tree_add_move+0x43e/0x43e
[ 21.988597][ T376] ? panic+0x7d7/0x7d7
[ 21.992642][ T376] print_address_description+0x81/0x3c0
[ 21.998163][ T376] kasan_report+0x1a4/0x1f0
[ 22.002643][ T376] ? ext4_rename_dir_prepare+0x42e/0x4a0
[ 22.008291][ T376] ? ext4_rename_dir_prepare+0x42e/0x4a0
[ 22.013914][ T376] __asan_report_load4_noabort+0x14/0x20
[ 22.019548][ T376] ext4_rename_dir_prepare+0x42e/0x4a0
[ 22.024993][ T376] ? ext4_add_nondir+0x270/0x270
[ 22.029911][ T376] ? __kasan_check_read+0x11/0x20
[ 22.034914][ T376] ? __ext4_journal_start_sb+0x2d9/0x480
[ 22.040529][ T376] ext4_rename2+0x1f37/0x45a0
[ 22.045214][ T376] ? ext4_mknod+0x550/0x550
[ 22.049710][ T376] ? avc_has_perm+0x16d/0x260
[ 22.054368][ T376] ? avc_has_perm_noaudit+0x4c0/0x4c0
[ 22.059723][ T376] ? selinux_inode_permission+0x439/0x670
[ 22.065420][ T376] ? selinux_inode_rename+0x8da/0xb60
[ 22.070776][ T376] ? take_dentry_name_snapshot+0xca/0x110
[ 22.076473][ T376] vfs_rename+0x95e/0xde0
[ 22.080792][ T376] ? __ia32_sys_link+0x70/0x70
[ 22.085544][ T376] ? d_lookup+0x8e/0xb0
[ 22.089686][ T376] ? __lookup_hash+0x6d/0x290
[ 22.094338][ T376] ? lock_rename+0xdd/0xf0
[ 22.098729][ T376] do_renameat2+0x83e/0x1190
[ 22.103297][ T376] ? __kasan_check_write+0x14/0x20
[ 22.108397][ T376] ? do_linkat+0x8e0/0x8e0
[ 22.112791][ T376] ? ptrace_notify+0x248/0x340
[ 22.117530][ T376] ? do_notify_parent+0xa40/0xa40
[ 22.122532][ T376] ? __fpregs_load_activate+0x1e7/0x370
[ 22.128055][ T376] ? do_sys_openat2+0x470/0x470
[ 22.132894][ T376] __x64_sys_renameat2+0xbf/0xd0
[ 22.137812][ T376] do_syscall_64+0x34/0x70
[ 22.142220][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 22.148093][ T376] RIP: 0033:0x7f95898f4a29
[ 22.152489][ T376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 22.172081][ T376] RSP: 002b:00007ffcca6970d8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 22.180469][ T376] RAX: ffffffffffffffda RBX: 0000000000005426 RCX: 00007f95898f4a29
[ 22.188429][ T376] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000005
[ 22.196391][ T376] RBP: 0000000000000000 R08: 0000000000000002 R09: 00007ffcca697100
[ 22.204343][ T376] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007ffcca6970fc
[ 22.212297][ T376] R13: 00007ffcca697130 R14: 00007ffcca697110 R15: 0000000000000001
[ 22.220342][ T376]
[ 22.222647][ T376] Allocated by task 345:
[ 22.226870][ T376] __kasan_slab_alloc+0xb2/0xe0
[ 22.231696][ T376] kmem_cache_alloc+0x16c/0x300
[ 22.236525][ T376] dup_mm+0x29/0x320
[ 22.240404][ T376] copy_mm+0x108/0x1b0
[ 22.244447][ T376] copy_process+0x133a/0x33a0
[ 22.249102][ T376] kernel_clone+0x22d/0x900
[ 22.253582][ T376] __x64_sys_clone+0x271/0x2e0
[ 22.258322][ T376] do_syscall_64+0x34/0x70
[ 22.262831][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 22.268705][ T376]
[ 22.271011][ T376] Freed by task 345:
[ 22.274889][ T376] kasan_set_track+0x4c/0x80
[ 22.279476][ T376] kasan_set_free_info+0x23/0x40
[ 22.284391][ T376] ____kasan_slab_free+0x121/0x160
[ 22.289483][ T376] __kasan_slab_free+0x11/0x20
[ 22.294225][ T376] slab_free_freelist_hook+0xcc/0x1a0
[ 22.299573][ T376] kmem_cache_free+0xa9/0x1f0
[ 22.304240][ T376] __mmdrop+0x295/0x390
[ 22.308374][ T376] finish_task_switch+0x1e4/0x580
[ 22.313373][ T376] __schedule+0x86e/0xc00
[ 22.317690][ T376] schedule+0x14b/0x1e0
[ 22.321834][ T376] pipe_read+0x9c8/0x1070
[ 22.326156][ T376] vfs_read+0x9e2/0xbf0
[ 22.330289][ T376] ksys_read+0x198/0x2c0
[ 22.334509][ T376] __x64_sys_read+0x7b/0x90
[ 22.338988][ T376] do_syscall_64+0x34/0x70
[ 22.343385][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 22.349249][ T376]
[ 22.351567][ T376] The buggy address belongs to the object at ffff888119c14000
[ 22.351567][ T376] which belongs to the cache mm_struct of size 1104
[ 22.365509][ T376] The buggy address is located 0 bytes inside of
[ 22.365509][ T376] 1104-byte region [ffff888119c14000, ffff888119c14450)
[ 22.378771][ T376] The buggy address belongs to the page:
[ 22.384398][ T376] page:ffffea0004670500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119c14
[ 22.394605][ T376] head:ffffea0004670500 order:2 compound_mapcount:0 compound_pincount:0
[ 22.402999][ T376] flags: 0x8000000000010200(slab|head)
[ 22.408444][ T376] raw: 8000000000010200 dead000000000100 dead000000000122 ffff888100066300
[ 22.417008][ T376] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[ 22.425575][ T376] page dumped because: kasan: bad access detected
[ 22.431961][ T376] page_owner tracks the page as allocated
[ 22.437665][ T376] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 345, ts 16125248987, free_ts 16122080680
[ 22.456645][ T376] get_page_from_freelist+0x755/0x810
[ 22.461992][ T376] __alloc_pages_nodemask+0x3b6/0x890
[ 22.467338][ T376] allocate_slab+0x78/0x540
[ 22.471816][ T376] ___slab_alloc+0x131/0x2e0
[ 22.476385][ T376] __slab_alloc+0x63/0xa0
[ 22.480690][ T376] kmem_cache_alloc+0x1ef/0x300
[ 22.485518][ T376] dup_mm+0x29/0x320
[ 22.489409][ T376] copy_mm+0x108/0x1b0
[ 22.493456][ T376] copy_process+0x133a/0x33a0
[ 22.498110][ T376] kernel_clone+0x22d/0x900
[ 22.502587][ T376] __x64_sys_clone+0x271/0x2e0
[ 22.507324][ T376] do_syscall_64+0x34/0x70
[ 22.511716][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 22.517580][ T376] page last free stack trace:
[ 22.522233][ T376] __free_pages_ok+0x7f8/0x830
[ 22.526977][ T376] free_compound_page+0x72/0x90
[ 22.531804][ T376] __put_compound_page+0x72/0xb0
[ 22.536714][ T376] __put_page+0xc0/0xd0
[ 22.540846][ T376] skb_release_data+0x22d/0x630
[ 22.545673][ T376] __kfree_skb+0x59/0x1c0
[ 22.549979][ T376] tcp_recvmsg+0x1637/0x35a0
[ 22.554543][ T376] inet_recvmsg+0x157/0x500
[ 22.559047][ T376] sock_read_iter+0x3a7/0x4d0
[ 22.563699][ T376] vfs_read+0x9e2/0xbf0
[ 22.567846][ T376] ksys_read+0x198/0x2c0
[ 22.572070][ T376] __x64_sys_read+0x7b/0x90
[ 22.576551][ T376] do_syscall_64+0x34/0x70
[ 22.580952][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xc6
[ 22.586817][ T376]
[ 22.589127][ T376] Memory state around the buggy address:
[ 22.594736][ T376] ffff888119c13f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 22.602784][ T376] ffff888119c13f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[pid 376] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 376] exit_group(0) = ?
[pid 376] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs") = 0
[ 22.610824][ T376] >ffff888119c14000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 22.618867][ T376] ^
[ 22.622914][ T376] ffff888119c14080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 22.630953][ T376] ffff888119c14100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 22.638985][ T376] ==================================================================
[ 22.647019][ T376] Disabling lock debugging due to kernel taint
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 379
./strace-static-x86_64: Process 379 attached
[pid 379] chdir("./2") = 0
[pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 379] setpgid(0, 0) = 0
[pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 379] write(3, "1000", 4) = 4
[pid 379] close(3) = 0
[pid 379] symlink("/dev/binderfs", "./binderfs") = 0
[pid 379] memfd_create("syzkaller", 0) = 3
[pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 379] munmap(0x7f95814a7000, 262144) = 0
[pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 379] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 379] close(3) = 0
[pid 379] mkdir("./file0", 0777) = 0
[ 22.715992][ T379] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 22.726618][ T379] ext4_test_bit(bit=14, block=18) = 1
[ 22.731988][ T379] is_bad_inode(inode)=0
[ 22.736336][ T379] NEXT_ORPHAN(inode)=0
[ 22.740399][ T379] max_ino=32
[ 22.743584][ T379] i_nlink=1
[ 22.746893][ T379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 379] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 379] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 379] chdir("./file0") = 0
[pid 379] ioctl(4, LOOP_CLR_FD) = 0
[pid 379] close(4) = 0
[pid 379] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 379] mkdirat(4, "./bus", 000) = 0
[pid 379] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 379] open("./file0", O_RDONLY) = 6
[pid 379] mkdirat(6, "./bus", 000) = 0
[pid 379] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 379] exit_group(0) = ?
[pid 379] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=379, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs") = 0
[ 22.755955][ T379] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/2/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./2/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./2") = 0
mkdir("./3", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 382
./strace-static-x86_64: Process 382 attached
[pid 382] chdir("./3") = 0
[pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 382] setpgid(0, 0) = 0
[pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 382] write(3, "1000", 4) = 4
[pid 382] close(3) = 0
[pid 382] symlink("/dev/binderfs", "./binderfs") = 0
[pid 382] memfd_create("syzkaller", 0) = 3
[pid 382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 382] munmap(0x7f95814a7000, 262144) = 0
[pid 382] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 382] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 382] close(3) = 0
[pid 382] mkdir("./file0", 0777) = 0
[ 22.915847][ T382] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 22.926952][ T382] ext4_test_bit(bit=14, block=18) = 1
[ 22.932329][ T382] is_bad_inode(inode)=0
[ 22.936568][ T382] NEXT_ORPHAN(inode)=0
[ 22.940622][ T382] max_ino=32
[ 22.943826][ T382] i_nlink=1
[ 22.947103][ T382] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 382] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 382] chdir("./file0") = 0
[pid 382] ioctl(4, LOOP_CLR_FD) = 0
[pid 382] close(4) = 0
[pid 382] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 382] mkdirat(4, "./bus", 000) = 0
[pid 382] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 382] open("./file0", O_RDONLY) = 6
[pid 382] mkdirat(6, "./bus", 000) = 0
[pid 382] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 382] exit_group(0) = ?
[pid 382] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs") = 0
[ 22.956085][ T382] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/3/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./3/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./3") = 0
mkdir("./4", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 385
./strace-static-x86_64: Process 385 attached
[pid 385] chdir("./4") = 0
[pid 385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 385] setpgid(0, 0) = 0
[pid 385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 385] write(3, "1000", 4) = 4
[pid 385] close(3) = 0
[pid 385] symlink("/dev/binderfs", "./binderfs") = 0
[pid 385] memfd_create("syzkaller", 0) = 3
[pid 385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 385] munmap(0x7f95814a7000, 262144) = 0
[pid 385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 385] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 385] close(3) = 0
[pid 385] mkdir("./file0", 0777) = 0
[ 23.100409][ T385] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.111218][ T385] ext4_test_bit(bit=14, block=18) = 1
[ 23.116902][ T385] is_bad_inode(inode)=0
[ 23.121232][ T385] NEXT_ORPHAN(inode)=0
[ 23.125369][ T385] max_ino=32
[ 23.128953][ T385] i_nlink=1
[ 23.132213][ T385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 385] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 385] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 385] chdir("./file0") = 0
[pid 385] ioctl(4, LOOP_CLR_FD) = 0
[pid 385] close(4) = 0
[pid 385] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 385] mkdirat(4, "./bus", 000) = 0
[pid 385] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 385] open("./file0", O_RDONLY) = 6
[pid 385] mkdirat(6, "./bus", 000) = 0
[pid 385] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 385] exit_group(0) = ?
[pid 385] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=385, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs") = 0
[ 23.141364][ T385] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/4/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./4/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./4") = 0
mkdir("./5", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 388
./strace-static-x86_64: Process 388 attached
[pid 388] chdir("./5") = 0
[pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 388] setpgid(0, 0) = 0
[pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 388] write(3, "1000", 4) = 4
[pid 388] close(3) = 0
[pid 388] symlink("/dev/binderfs", "./binderfs") = 0
[pid 388] memfd_create("syzkaller", 0) = 3
[pid 388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 388] munmap(0x7f95814a7000, 262144) = 0
[pid 388] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 388] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 388] close(3) = 0
[pid 388] mkdir("./file0", 0777) = 0
[ 23.208685][ T388] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.219465][ T388] ext4_test_bit(bit=14, block=18) = 1
[ 23.224942][ T388] is_bad_inode(inode)=0
[ 23.229488][ T388] NEXT_ORPHAN(inode)=0
[ 23.233649][ T388] max_ino=32
[ 23.237185][ T388] i_nlink=1
[ 23.240443][ T388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 388] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 388] chdir("./file0") = 0
[pid 388] ioctl(4, LOOP_CLR_FD) = 0
[pid 388] close(4) = 0
[pid 388] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 388] mkdirat(4, "./bus", 000) = 0
[pid 388] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 388] open("./file0", O_RDONLY) = 6
[pid 388] mkdirat(6, "./bus", 000) = 0
[pid 388] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 388] exit_group(0) = ?
[pid 388] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=388, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs") = 0
[ 23.249601][ T388] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/5/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./5/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./5") = 0
mkdir("./6", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 391
./strace-static-x86_64: Process 391 attached
[pid 391] chdir("./6") = 0
[pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 391] setpgid(0, 0) = 0
[pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 391] write(3, "1000", 4) = 4
[pid 391] close(3) = 0
[pid 391] symlink("/dev/binderfs", "./binderfs") = 0
[pid 391] memfd_create("syzkaller", 0) = 3
[pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 391] munmap(0x7f95814a7000, 262144) = 0
[pid 391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 391] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 391] close(3) = 0
[pid 391] mkdir("./file0", 0777) = 0
[ 23.344873][ T391] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.355720][ T391] ext4_test_bit(bit=14, block=18) = 1
[ 23.361142][ T391] is_bad_inode(inode)=0
[ 23.365286][ T391] NEXT_ORPHAN(inode)=0
[ 23.369527][ T391] max_ino=32
[ 23.372720][ T391] i_nlink=1
[ 23.375970][ T391] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 391] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 391] chdir("./file0") = 0
[pid 391] ioctl(4, LOOP_CLR_FD) = 0
[pid 391] close(4) = 0
[pid 391] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 391] mkdirat(4, "./bus", 000) = 0
[pid 391] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 391] open("./file0", O_RDONLY) = 6
[pid 391] mkdirat(6, "./bus", 000) = 0
[pid 391] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 391] exit_group(0) = ?
[pid 391] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=391, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs") = 0
[ 23.384873][ T391] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/6/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./6/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./6") = 0
mkdir("./7", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 394
./strace-static-x86_64: Process 394 attached
[pid 394] chdir("./7") = 0
[pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 394] setpgid(0, 0) = 0
[pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 394] write(3, "1000", 4) = 4
[pid 394] close(3) = 0
[pid 394] symlink("/dev/binderfs", "./binderfs") = 0
[pid 394] memfd_create("syzkaller", 0) = 3
[pid 394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 394] munmap(0x7f95814a7000, 262144) = 0
[pid 394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 394] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 394] close(3) = 0
[pid 394] mkdir("./file0", 0777) = 0
[ 23.501453][ T394] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.512179][ T394] ext4_test_bit(bit=14, block=18) = 1
[ 23.517702][ T394] is_bad_inode(inode)=0
[ 23.521950][ T394] NEXT_ORPHAN(inode)=0
[ 23.526240][ T394] max_ino=32
[ 23.529455][ T394] i_nlink=1
[ 23.532584][ T394] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 394] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 394] chdir("./file0") = 0
[pid 394] ioctl(4, LOOP_CLR_FD) = 0
[pid 394] close(4) = 0
[pid 394] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 394] mkdirat(4, "./bus", 000) = 0
[pid 394] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 394] open("./file0", O_RDONLY) = 6
[pid 394] mkdirat(6, "./bus", 000) = 0
[pid 394] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 394] exit_group(0) = ?
[pid 394] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=394, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs") = 0
[ 23.541818][ T394] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/7/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./7/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./7") = 0
mkdir("./8", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 397
./strace-static-x86_64: Process 397 attached
[pid 397] chdir("./8") = 0
[pid 397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 397] setpgid(0, 0) = 0
[pid 397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 397] write(3, "1000", 4) = 4
[pid 397] close(3) = 0
[pid 397] symlink("/dev/binderfs", "./binderfs") = 0
[pid 397] memfd_create("syzkaller", 0) = 3
[pid 397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 397] munmap(0x7f95814a7000, 262144) = 0
[pid 397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 397] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 397] close(3) = 0
[pid 397] mkdir("./file0", 0777) = 0
[ 23.661801][ T397] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.672570][ T397] ext4_test_bit(bit=14, block=18) = 1
[ 23.678030][ T397] is_bad_inode(inode)=0
[ 23.682543][ T397] NEXT_ORPHAN(inode)=0
[ 23.686667][ T397] max_ino=32
[ 23.689906][ T397] i_nlink=1
[ 23.693034][ T397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 397] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 397] chdir("./file0") = 0
[pid 397] ioctl(4, LOOP_CLR_FD) = 0
[pid 397] close(4) = 0
[pid 397] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 397] mkdirat(4, "./bus", 000) = 0
[pid 397] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 397] open("./file0", O_RDONLY) = 6
[pid 397] mkdirat(6, "./bus", 000) = 0
[pid 397] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 397] exit_group(0) = ?
[pid 397] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=397, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs") = 0
[ 23.702237][ T397] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/8/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./8/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./8") = 0
mkdir("./9", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 400
./strace-static-x86_64: Process 400 attached
[pid 400] chdir("./9") = 0
[pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 400] setpgid(0, 0) = 0
[pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 400] write(3, "1000", 4) = 4
[pid 400] close(3) = 0
[pid 400] symlink("/dev/binderfs", "./binderfs") = 0
[pid 400] memfd_create("syzkaller", 0) = 3
[pid 400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 400] munmap(0x7f95814a7000, 262144) = 0
[pid 400] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 400] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 400] close(3) = 0
[pid 400] mkdir("./file0", 0777) = 0
[ 23.819875][ T400] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.830680][ T400] ext4_test_bit(bit=14, block=18) = 1
[ 23.836701][ T400] is_bad_inode(inode)=0
[ 23.840854][ T400] NEXT_ORPHAN(inode)=0
[ 23.844908][ T400] max_ino=32
[ 23.848274][ T400] i_nlink=1
[ 23.851423][ T400] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 400] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 400] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 400] chdir("./file0") = 0
[pid 400] ioctl(4, LOOP_CLR_FD) = 0
[pid 400] close(4) = 0
[pid 400] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 400] mkdirat(4, "./bus", 000) = 0
[pid 400] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 400] open("./file0", O_RDONLY) = 6
[pid 400] mkdirat(6, "./bus", 000) = 0
[pid 400] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 400] exit_group(0) = ?
[pid 400] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs") = 0
[ 23.860526][ T400] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/9/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./9/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./9") = 0
mkdir("./10", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 403
./strace-static-x86_64: Process 403 attached
[pid 403] chdir("./10") = 0
[pid 403] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 403] setpgid(0, 0) = 0
[pid 403] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 403] write(3, "1000", 4) = 4
[pid 403] close(3) = 0
[pid 403] symlink("/dev/binderfs", "./binderfs") = 0
[pid 403] memfd_create("syzkaller", 0) = 3
[pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 403] munmap(0x7f95814a7000, 262144) = 0
[pid 403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 403] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 403] close(3) = 0
[pid 403] mkdir("./file0", 0777) = 0
[ 23.986038][ T403] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 23.997291][ T403] ext4_test_bit(bit=14, block=18) = 1
[ 24.002667][ T403] is_bad_inode(inode)=0
[ 24.007005][ T403] NEXT_ORPHAN(inode)=0
[ 24.011181][ T403] max_ino=32
[ 24.014449][ T403] i_nlink=1
[ 24.017804][ T403] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 403] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 403] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 403] chdir("./file0") = 0
[pid 403] ioctl(4, LOOP_CLR_FD) = 0
[pid 403] close(4) = 0
[pid 403] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 403] mkdirat(4, "./bus", 000) = 0
[pid 403] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 403] open("./file0", O_RDONLY) = 6
[pid 403] mkdirat(6, "./bus", 000) = 0
[pid 403] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 403] exit_group(0) = ?
[pid 403] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=403, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./10/binderfs") = 0
[ 24.026910][ T403] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/10/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./10/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./10") = 0
mkdir("./11", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 406
./strace-static-x86_64: Process 406 attached
[pid 406] chdir("./11") = 0
[pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 406] setpgid(0, 0) = 0
[pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 406] write(3, "1000", 4) = 4
[pid 406] close(3) = 0
[pid 406] symlink("/dev/binderfs", "./binderfs") = 0
[pid 406] memfd_create("syzkaller", 0) = 3
[pid 406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 406] munmap(0x7f95814a7000, 262144) = 0
[pid 406] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 406] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 406] close(3) = 0
[pid 406] mkdir("./file0", 0777) = 0
[ 24.145646][ T406] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 24.156491][ T406] ext4_test_bit(bit=14, block=18) = 1
[ 24.161916][ T406] is_bad_inode(inode)=0
[ 24.166262][ T406] NEXT_ORPHAN(inode)=0
[ 24.170323][ T406] max_ino=32
[ 24.173510][ T406] i_nlink=1
[ 24.176770][ T406] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 406] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 406] chdir("./file0") = 0
[pid 406] ioctl(4, LOOP_CLR_FD) = 0
[pid 406] close(4) = 0
[pid 406] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 406] mkdirat(4, "./bus", 000) = 0
[pid 406] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 406] open("./file0", O_RDONLY) = 6
[pid 406] mkdirat(6, "./bus", 000) = 0
[pid 406] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 406] exit_group(0) = ?
[pid 406] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=406, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./11/binderfs") = 0
[ 24.185790][ T406] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/11/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./11/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./11") = 0
mkdir("./12", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 409
./strace-static-x86_64: Process 409 attached
[pid 409] chdir("./12") = 0
[pid 409] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 409] setpgid(0, 0) = 0
[pid 409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 409] write(3, "1000", 4) = 4
[pid 409] close(3) = 0
[pid 409] symlink("/dev/binderfs", "./binderfs") = 0
[pid 409] memfd_create("syzkaller", 0) = 3
[pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 409] munmap(0x7f95814a7000, 262144) = 0
[pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 409] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 409] close(3) = 0
[pid 409] mkdir("./file0", 0777) = 0
[ 24.299970][ T409] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 24.310655][ T409] ext4_test_bit(bit=14, block=18) = 1
[ 24.316213][ T409] is_bad_inode(inode)=0
[ 24.320359][ T409] NEXT_ORPHAN(inode)=0
[ 24.324407][ T409] max_ino=32
[ 24.327785][ T409] i_nlink=1
[ 24.331055][ T409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 409] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 409] chdir("./file0") = 0
[pid 409] ioctl(4, LOOP_CLR_FD) = 0
[pid 409] close(4) = 0
[pid 409] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 409] mkdirat(4, "./bus", 000) = 0
[pid 409] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 409] open("./file0", O_RDONLY) = 6
[pid 409] mkdirat(6, "./bus", 000) = 0
[pid 409] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 409] exit_group(0) = ?
[pid 409] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=409, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./12/binderfs") = 0
[ 24.340140][ T409] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/12/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./12/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./12") = 0
mkdir("./13", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 412
./strace-static-x86_64: Process 412 attached
[pid 412] chdir("./13") = 0
[pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 412] setpgid(0, 0) = 0
[pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 412] write(3, "1000", 4) = 4
[pid 412] close(3) = 0
[pid 412] symlink("/dev/binderfs", "./binderfs") = 0
[pid 412] memfd_create("syzkaller", 0) = 3
[pid 412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 412] munmap(0x7f95814a7000, 262144) = 0
[pid 412] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 412] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 412] close(3) = 0
[pid 412] mkdir("./file0", 0777) = 0
[ 24.506043][ T412] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 24.516714][ T412] ext4_test_bit(bit=14, block=18) = 1
[ 24.522218][ T412] is_bad_inode(inode)=0
[ 24.526582][ T412] NEXT_ORPHAN(inode)=0
[ 24.530663][ T412] max_ino=32
[ 24.533867][ T412] i_nlink=1
[ 24.537194][ T412] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 412] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 412] chdir("./file0") = 0
[pid 412] ioctl(4, LOOP_CLR_FD) = 0
[pid 412] close(4) = 0
[pid 412] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 412] mkdirat(4, "./bus", 000) = 0
[pid 412] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 412] open("./file0", O_RDONLY) = 6
[pid 412] mkdirat(6, "./bus", 000) = 0
[pid 412] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 412] exit_group(0) = ?
[pid 412] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./13/binderfs") = 0
[ 24.546365][ T412] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/13/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./13/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./13") = 0
mkdir("./14", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 415
./strace-static-x86_64: Process 415 attached
[pid 415] chdir("./14") = 0
[pid 415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 415] setpgid(0, 0) = 0
[pid 415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 415] write(3, "1000", 4) = 4
[pid 415] close(3) = 0
[pid 415] symlink("/dev/binderfs", "./binderfs") = 0
[pid 415] memfd_create("syzkaller", 0) = 3
[pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 415] munmap(0x7f95814a7000, 262144) = 0
[pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 415] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 415] close(3) = 0
[pid 415] mkdir("./file0", 0777) = 0
[ 24.659974][ T415] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 24.670753][ T415] ext4_test_bit(bit=14, block=18) = 1
[ 24.676442][ T415] is_bad_inode(inode)=0
[ 24.680704][ T415] NEXT_ORPHAN(inode)=0
[ 24.684899][ T415] max_ino=32
[ 24.688524][ T415] i_nlink=1
[ 24.691807][ T415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 415] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 415] chdir("./file0") = 0
[pid 415] ioctl(4, LOOP_CLR_FD) = 0
[pid 415] close(4) = 0
[pid 415] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 415] mkdirat(4, "./bus", 000) = 0
[pid 415] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 415] open("./file0", O_RDONLY) = 6
[pid 415] mkdirat(6, "./bus", 000) = 0
[pid 415] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 415] exit_group(0) = ?
[pid 415] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=415, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./14/binderfs") = 0
[ 24.700876][ T415] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/14/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./14/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./14") = 0
mkdir("./15", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 418
./strace-static-x86_64: Process 418 attached
[pid 418] chdir("./15") = 0
[pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 418] setpgid(0, 0) = 0
[pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 418] write(3, "1000", 4) = 4
[pid 418] close(3) = 0
[pid 418] symlink("/dev/binderfs", "./binderfs") = 0
[pid 418] memfd_create("syzkaller", 0) = 3
[pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 418] munmap(0x7f95814a7000, 262144) = 0
[pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 418] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 418] close(3) = 0
[pid 418] mkdir("./file0", 0777) = 0
[ 24.818676][ T418] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 24.829306][ T418] ext4_test_bit(bit=14, block=18) = 1
[ 24.834668][ T418] is_bad_inode(inode)=0
[ 24.839144][ T418] NEXT_ORPHAN(inode)=0
[ 24.843210][ T418] max_ino=32
[ 24.846727][ T418] i_nlink=1
[ 24.849861][ T418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 418] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 418] chdir("./file0") = 0
[pid 418] ioctl(4, LOOP_CLR_FD) = 0
[pid 418] close(4) = 0
[pid 418] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 418] mkdirat(4, "./bus", 000) = 0
[pid 418] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 418] open("./file0", O_RDONLY) = 6
[pid 418] mkdirat(6, "./bus", 000) = 0
[pid 418] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 418] exit_group(0) = ?
[pid 418] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=418, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./15/binderfs") = 0
[ 24.858822][ T418] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/15/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./15/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./15") = 0
mkdir("./16", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 421 attached
<unfinished ...>
[pid 421] chdir("./16") = 0
[pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 421] setpgid(0, 0) = 0
[pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 421] write(3, "1000", 4) = 4
[pid 421] close(3) = 0
[pid 421] symlink("/dev/binderfs", "./binderfs") = 0
[pid 421] memfd_create("syzkaller", 0) = 3
[pid 421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 371] <... clone resumed>, child_tidptr=0x555556af35d0) = 421
[pid 421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 421] munmap(0x7f95814a7000, 262144) = 0
[pid 421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 421] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 421] close(3) = 0
[pid 421] mkdir("./file0", 0777) = 0
[ 24.981785][ T421] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 24.992534][ T421] ext4_test_bit(bit=14, block=18) = 1
[ 24.998047][ T421] is_bad_inode(inode)=0
[ 25.002233][ T421] NEXT_ORPHAN(inode)=0
[ 25.006366][ T421] max_ino=32
[ 25.009564][ T421] i_nlink=1
[ 25.012691][ T421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 421] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 421] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 421] chdir("./file0") = 0
[pid 421] ioctl(4, LOOP_CLR_FD) = 0
[pid 421] close(4) = 0
[pid 421] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 421] mkdirat(4, "./bus", 000) = 0
[pid 421] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 421] open("./file0", O_RDONLY) = 6
[pid 421] mkdirat(6, "./bus", 000) = 0
[pid 421] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 421] exit_group(0) = ?
[pid 421] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=421, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./16/binderfs") = 0
[ 25.021751][ T421] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/16/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./16/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./16") = 0
mkdir("./17", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 424
./strace-static-x86_64: Process 424 attached
[pid 424] chdir("./17") = 0
[pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 424] setpgid(0, 0) = 0
[pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 424] write(3, "1000", 4) = 4
[pid 424] close(3) = 0
[pid 424] symlink("/dev/binderfs", "./binderfs") = 0
[pid 424] memfd_create("syzkaller", 0) = 3
[pid 424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 424] munmap(0x7f95814a7000, 262144) = 0
[pid 424] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 424] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 424] close(3) = 0
[pid 424] mkdir("./file0", 0777) = 0
[ 25.150213][ T424] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.161071][ T424] ext4_test_bit(bit=14, block=18) = 1
[ 25.166567][ T424] is_bad_inode(inode)=0
[ 25.170944][ T424] NEXT_ORPHAN(inode)=0
[ 25.175083][ T424] max_ino=32
[ 25.178455][ T424] i_nlink=1
[ 25.181595][ T424] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 424] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 424] chdir("./file0") = 0
[pid 424] ioctl(4, LOOP_CLR_FD) = 0
[pid 424] close(4) = 0
[pid 424] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 424] mkdirat(4, "./bus", 000) = 0
[pid 424] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 424] open("./file0", O_RDONLY) = 6
[pid 424] mkdirat(6, "./bus", 000) = 0
[pid 424] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 424] exit_group(0) = ?
[pid 424] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=424, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./17/binderfs") = 0
[ 25.190638][ T424] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/17/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./17/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./17") = 0
mkdir("./18", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 427
./strace-static-x86_64: Process 427 attached
[pid 427] chdir("./18") = 0
[pid 427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 427] setpgid(0, 0) = 0
[pid 427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 427] write(3, "1000", 4) = 4
[pid 427] close(3) = 0
[pid 427] symlink("/dev/binderfs", "./binderfs") = 0
[pid 427] memfd_create("syzkaller", 0) = 3
[pid 427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 427] munmap(0x7f95814a7000, 262144) = 0
[pid 427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 427] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 427] close(3) = 0
[pid 427] mkdir("./file0", 0777) = 0
[ 25.304550][ T427] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.315579][ T427] ext4_test_bit(bit=14, block=18) = 1
[ 25.321037][ T427] is_bad_inode(inode)=0
[ 25.325192][ T427] NEXT_ORPHAN(inode)=0
[ 25.329353][ T427] max_ino=32
[ 25.332566][ T427] i_nlink=1
[ 25.335728][ T427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 427] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 427] chdir("./file0") = 0
[pid 427] ioctl(4, LOOP_CLR_FD) = 0
[pid 427] close(4) = 0
[pid 427] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 427] mkdirat(4, "./bus", 000) = 0
[pid 427] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 427] open("./file0", O_RDONLY) = 6
[pid 427] mkdirat(6, "./bus", 000) = 0
[pid 427] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 427] exit_group(0) = ?
[pid 427] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=427, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./18/binderfs") = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./18/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./18") = 0
mkdir("./19", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
[ 25.344625][ T427] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/18/file0 supports timestamps until 2038 (0x7fffffff)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 430
./strace-static-x86_64: Process 430 attached
[pid 430] chdir("./19") = 0
[pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 430] setpgid(0, 0) = 0
[pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 430] write(3, "1000", 4) = 4
[pid 430] close(3) = 0
[pid 430] symlink("/dev/binderfs", "./binderfs") = 0
[pid 430] memfd_create("syzkaller", 0) = 3
[pid 430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 430] munmap(0x7f95814a7000, 262144) = 0
[pid 430] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 430] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 430] close(3) = 0
[pid 430] mkdir("./file0", 0777) = 0
[ 25.402202][ T430] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.412997][ T430] ext4_test_bit(bit=14, block=18) = 1
[ 25.418459][ T430] is_bad_inode(inode)=0
[ 25.422726][ T430] NEXT_ORPHAN(inode)=0
[ 25.426995][ T430] max_ino=32
[ 25.430195][ T430] i_nlink=1
[ 25.433317][ T430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 430] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 430] chdir("./file0") = 0
[pid 430] ioctl(4, LOOP_CLR_FD) = 0
[pid 430] close(4) = 0
[pid 430] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 430] mkdirat(4, "./bus", 000) = 0
[pid 430] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 430] open("./file0", O_RDONLY) = 6
[pid 430] mkdirat(6, "./bus", 000) = 0
[pid 430] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 430] exit_group(0) = ?
[pid 430] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=430, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./19/binderfs") = 0
[ 25.442440][ T430] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/19/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./19/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./19") = 0
mkdir("./20", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 433
./strace-static-x86_64: Process 433 attached
[pid 433] chdir("./20") = 0
[pid 433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 433] setpgid(0, 0) = 0
[pid 433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 433] write(3, "1000", 4) = 4
[pid 433] close(3) = 0
[pid 433] symlink("/dev/binderfs", "./binderfs") = 0
[pid 433] memfd_create("syzkaller", 0) = 3
[pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 433] munmap(0x7f95814a7000, 262144) = 0
[pid 433] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 433] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 433] close(3) = 0
[pid 433] mkdir("./file0", 0777) = 0
[ 25.538285][ T433] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.549068][ T433] ext4_test_bit(bit=14, block=18) = 1
[ 25.554586][ T433] is_bad_inode(inode)=0
[ 25.559080][ T433] NEXT_ORPHAN(inode)=0
[ 25.563730][ T433] max_ino=32
[ 25.567076][ T433] i_nlink=1
[ 25.570319][ T433] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 433] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 433] chdir("./file0") = 0
[pid 433] ioctl(4, LOOP_CLR_FD) = 0
[pid 433] close(4) = 0
[pid 433] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 433] mkdirat(4, "./bus", 000) = 0
[pid 433] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 433] open("./file0", O_RDONLY) = 6
[pid 433] mkdirat(6, "./bus", 000) = 0
[pid 433] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 433] exit_group(0) = ?
[pid 433] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=433, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./20/binderfs") = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./20/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./20") = 0
mkdir("./21", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 436
./strace-static-x86_64: Process 436 attached
[pid 436] chdir("./21") = 0
[pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 436] setpgid(0, 0) = 0
[pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 436] write(3, "1000", 4) = 4
[pid 436] close(3) = 0
[pid 436] symlink("/dev/binderfs", "./binderfs") = 0
[pid 436] memfd_create("syzkaller", 0) = 3
[pid 436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 436] munmap(0x7f95814a7000, 262144) = 0
[pid 436] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 436] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 436] close(3) = 0
[ 25.579406][ T433] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/20/file0 supports timestamps until 2038 (0x7fffffff)
[pid 436] mkdir("./file0", 0777) = 0
[ 25.633395][ T436] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.644121][ T436] ext4_test_bit(bit=14, block=18) = 1
[ 25.649660][ T436] is_bad_inode(inode)=0
[ 25.653886][ T436] NEXT_ORPHAN(inode)=0
[ 25.658229][ T436] max_ino=32
[ 25.661449][ T436] i_nlink=1
[ 25.664578][ T436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 436] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 436] chdir("./file0") = 0
[pid 436] ioctl(4, LOOP_CLR_FD) = 0
[pid 436] close(4) = 0
[pid 436] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 436] mkdirat(4, "./bus", 000) = 0
[pid 436] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 436] open("./file0", O_RDONLY) = 6
[pid 436] mkdirat(6, "./bus", 000) = 0
[pid 436] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 436] exit_group(0) = ?
[pid 436] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=436, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./21/binderfs") = 0
[ 25.673728][ T436] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/21/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./21/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./21") = 0
mkdir("./22", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 439
./strace-static-x86_64: Process 439 attached
[pid 439] chdir("./22") = 0
[pid 439] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 439] setpgid(0, 0) = 0
[pid 439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 439] write(3, "1000", 4) = 4
[pid 439] close(3) = 0
[pid 439] symlink("/dev/binderfs", "./binderfs") = 0
[pid 439] memfd_create("syzkaller", 0) = 3
[pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 439] munmap(0x7f95814a7000, 262144) = 0
[pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 439] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 439] close(3) = 0
[pid 439] mkdir("./file0", 0777) = 0
[ 25.778294][ T439] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.789086][ T439] ext4_test_bit(bit=14, block=18) = 1
[ 25.794576][ T439] is_bad_inode(inode)=0
[ 25.798948][ T439] NEXT_ORPHAN(inode)=0
[ 25.803140][ T439] max_ino=32
[ 25.806520][ T439] i_nlink=1
[ 25.809663][ T439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 439] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 439] chdir("./file0") = 0
[pid 439] ioctl(4, LOOP_CLR_FD) = 0
[pid 439] close(4) = 0
[pid 439] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 439] mkdirat(4, "./bus", 000) = 0
[pid 439] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 439] open("./file0", O_RDONLY) = 6
[pid 439] mkdirat(6, "./bus", 000) = 0
[pid 439] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 439] exit_group(0) = ?
[pid 439] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=439, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./22/binderfs") = 0
[ 25.818655][ T439] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/22/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./22/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./22") = 0
mkdir("./23", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 442
./strace-static-x86_64: Process 442 attached
[pid 442] chdir("./23") = 0
[pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 442] setpgid(0, 0) = 0
[pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 442] write(3, "1000", 4) = 4
[pid 442] close(3) = 0
[pid 442] symlink("/dev/binderfs", "./binderfs") = 0
[pid 442] memfd_create("syzkaller", 0) = 3
[pid 442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 442] munmap(0x7f95814a7000, 262144) = 0
[pid 442] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 442] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 442] close(3) = 0
[pid 442] mkdir("./file0", 0777) = 0
[ 25.943969][ T442] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 25.954706][ T442] ext4_test_bit(bit=14, block=18) = 1
[ 25.960144][ T442] is_bad_inode(inode)=0
[ 25.964297][ T442] NEXT_ORPHAN(inode)=0
[ 25.968455][ T442] max_ino=32
[ 25.971697][ T442] i_nlink=1
[ 25.974914][ T442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 442] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 442] chdir("./file0") = 0
[pid 442] ioctl(4, LOOP_CLR_FD) = 0
[pid 442] close(4) = 0
[pid 442] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 442] mkdirat(4, "./bus", 000) = 0
[pid 442] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 442] open("./file0", O_RDONLY) = 6
[pid 442] mkdirat(6, "./bus", 000) = 0
[pid 442] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 442] exit_group(0) = ?
[pid 442] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=442, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./23/binderfs") = 0
[ 25.983932][ T442] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/23/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./23/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./23") = 0
mkdir("./24", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 445
./strace-static-x86_64: Process 445 attached
[pid 445] chdir("./24") = 0
[pid 445] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 445] setpgid(0, 0) = 0
[pid 445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 445] write(3, "1000", 4) = 4
[pid 445] close(3) = 0
[pid 445] symlink("/dev/binderfs", "./binderfs") = 0
[pid 445] memfd_create("syzkaller", 0) = 3
[pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 445] munmap(0x7f95814a7000, 262144) = 0
[pid 445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 445] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 445] close(3) = 0
[pid 445] mkdir("./file0", 0777) = 0
[ 26.102431][ T445] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.113179][ T445] ext4_test_bit(bit=14, block=18) = 1
[ 26.118692][ T445] is_bad_inode(inode)=0
[ 26.122854][ T445] NEXT_ORPHAN(inode)=0
[ 26.127138][ T445] max_ino=32
[ 26.130330][ T445] i_nlink=1
[ 26.133457][ T445] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 445] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 445] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 445] chdir("./file0") = 0
[pid 445] ioctl(4, LOOP_CLR_FD) = 0
[pid 445] close(4) = 0
[pid 445] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 445] mkdirat(4, "./bus", 000) = 0
[pid 445] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 445] open("./file0", O_RDONLY) = 6
[pid 445] mkdirat(6, "./bus", 000) = 0
[pid 445] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 445] exit_group(0) = ?
[pid 445] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=445, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./24/binderfs") = 0
[ 26.142550][ T445] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/24/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./24/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./24") = 0
mkdir("./25", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 448
./strace-static-x86_64: Process 448 attached
[pid 448] chdir("./25") = 0
[pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 448] setpgid(0, 0) = 0
[pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 448] write(3, "1000", 4) = 4
[pid 448] close(3) = 0
[pid 448] symlink("/dev/binderfs", "./binderfs") = 0
[pid 448] memfd_create("syzkaller", 0) = 3
[pid 448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 448] munmap(0x7f95814a7000, 262144) = 0
[pid 448] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 448] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 448] close(3) = 0
[pid 448] mkdir("./file0", 0777) = 0
[ 26.259706][ T448] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.270553][ T448] ext4_test_bit(bit=14, block=18) = 1
[ 26.276038][ T448] is_bad_inode(inode)=0
[ 26.280194][ T448] NEXT_ORPHAN(inode)=0
[ 26.284240][ T448] max_ino=32
[ 26.287727][ T448] i_nlink=1
[ 26.290856][ T448] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 448] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 448] chdir("./file0") = 0
[pid 448] ioctl(4, LOOP_CLR_FD) = 0
[pid 448] close(4) = 0
[pid 448] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 448] mkdirat(4, "./bus", 000) = 0
[pid 448] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 448] open("./file0", O_RDONLY) = 6
[pid 448] mkdirat(6, "./bus", 000) = 0
[pid 448] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 448] exit_group(0) = ?
[pid 448] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./25/binderfs") = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./25/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./25") = 0
mkdir("./26", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
[ 26.299856][ T448] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/25/file0 supports timestamps until 2038 (0x7fffffff)
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 451
./strace-static-x86_64: Process 451 attached
[pid 451] chdir("./26") = 0
[pid 451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 451] setpgid(0, 0) = 0
[pid 451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 451] write(3, "1000", 4) = 4
[pid 451] close(3) = 0
[pid 451] symlink("/dev/binderfs", "./binderfs") = 0
[pid 451] memfd_create("syzkaller", 0) = 3
[pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 451] munmap(0x7f95814a7000, 262144) = 0
[pid 451] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 451] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 451] close(3) = 0
[pid 451] mkdir("./file0", 0777) = 0
[ 26.360809][ T451] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.371560][ T451] ext4_test_bit(bit=14, block=18) = 1
[ 26.377188][ T451] is_bad_inode(inode)=0
[ 26.381455][ T451] NEXT_ORPHAN(inode)=0
[ 26.385786][ T451] max_ino=32
[ 26.389084][ T451] i_nlink=1
[ 26.392298][ T451] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 451] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 451] chdir("./file0") = 0
[pid 451] ioctl(4, LOOP_CLR_FD) = 0
[pid 451] close(4) = 0
[pid 451] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 451] mkdirat(4, "./bus", 000) = 0
[pid 451] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 451] open("./file0", O_RDONLY) = 6
[pid 451] mkdirat(6, "./bus", 000) = 0
[pid 451] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 451] exit_group(0) = ?
[pid 451] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=451, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./26/binderfs") = 0
[ 26.401432][ T451] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/26/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./26/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./26") = 0
mkdir("./27", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 454
./strace-static-x86_64: Process 454 attached
[pid 454] chdir("./27") = 0
[pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 454] setpgid(0, 0) = 0
[pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 454] write(3, "1000", 4) = 4
[pid 454] close(3) = 0
[pid 454] symlink("/dev/binderfs", "./binderfs") = 0
[pid 454] memfd_create("syzkaller", 0) = 3
[pid 454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 454] munmap(0x7f95814a7000, 262144) = 0
[pid 454] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 454] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 454] close(3) = 0
[pid 454] mkdir("./file0", 0777) = 0
[ 26.503345][ T454] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.514202][ T454] ext4_test_bit(bit=14, block=18) = 1
[ 26.519700][ T454] is_bad_inode(inode)=0
[ 26.523875][ T454] NEXT_ORPHAN(inode)=0
[ 26.528006][ T454] max_ino=32
[ 26.531200][ T454] i_nlink=1
[ 26.534359][ T454] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 454] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 454] chdir("./file0") = 0
[pid 454] ioctl(4, LOOP_CLR_FD) = 0
[pid 454] close(4) = 0
[pid 454] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 454] mkdirat(4, "./bus", 000) = 0
[pid 454] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 454] open("./file0", O_RDONLY) = 6
[pid 454] mkdirat(6, "./bus", 000) = 0
[pid 454] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 454] exit_group(0) = ?
[pid 454] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=454, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./27/binderfs") = 0
[ 26.543341][ T454] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/27/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./27/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./27") = 0
mkdir("./28", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 457
./strace-static-x86_64: Process 457 attached
[pid 457] chdir("./28") = 0
[pid 457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 457] setpgid(0, 0) = 0
[pid 457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 457] write(3, "1000", 4) = 4
[pid 457] close(3) = 0
[pid 457] symlink("/dev/binderfs", "./binderfs") = 0
[pid 457] memfd_create("syzkaller", 0) = 3
[pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 457] munmap(0x7f95814a7000, 262144) = 0
[pid 457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 457] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 457] close(3) = 0
[pid 457] mkdir("./file0", 0777) = 0
[ 26.664353][ T457] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.675301][ T457] ext4_test_bit(bit=14, block=18) = 1
[ 26.680903][ T457] is_bad_inode(inode)=0
[ 26.685208][ T457] NEXT_ORPHAN(inode)=0
[ 26.689348][ T457] max_ino=32
[ 26.692677][ T457] i_nlink=1
[ 26.696109][ T457] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 457] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 457] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 457] chdir("./file0") = 0
[pid 457] ioctl(4, LOOP_CLR_FD) = 0
[pid 457] close(4) = 0
[pid 457] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 457] mkdirat(4, "./bus", 000) = 0
[pid 457] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 457] open("./file0", O_RDONLY) = 6
[pid 457] mkdirat(6, "./bus", 000) = 0
[pid 457] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 457] exit_group(0) = ?
[pid 457] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=457, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./28/binderfs") = 0
[ 26.705132][ T457] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/28/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./28/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./28") = 0
mkdir("./29", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 460
./strace-static-x86_64: Process 460 attached
[pid 460] chdir("./29") = 0
[pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 460] setpgid(0, 0) = 0
[pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 460] write(3, "1000", 4) = 4
[pid 460] close(3) = 0
[pid 460] symlink("/dev/binderfs", "./binderfs") = 0
[pid 460] memfd_create("syzkaller", 0) = 3
[pid 460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 460] munmap(0x7f95814a7000, 262144) = 0
[pid 460] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 460] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 460] close(3) = 0
[pid 460] mkdir("./file0", 0777) = 0
[ 26.818241][ T460] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.829030][ T460] ext4_test_bit(bit=14, block=18) = 1
[ 26.834509][ T460] is_bad_inode(inode)=0
[ 26.838842][ T460] NEXT_ORPHAN(inode)=0
[ 26.842929][ T460] max_ino=32
[ 26.846744][ T460] i_nlink=1
[ 26.849890][ T460] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 460] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 460] chdir("./file0") = 0
[pid 460] ioctl(4, LOOP_CLR_FD) = 0
[pid 460] close(4) = 0
[pid 460] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 460] mkdirat(4, "./bus", 000) = 0
[pid 460] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 460] open("./file0", O_RDONLY) = 6
[pid 460] mkdirat(6, "./bus", 000) = 0
[pid 460] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 460] exit_group(0) = ?
[pid 460] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=460, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./29/binderfs") = 0
[ 26.859032][ T460] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/29/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./29/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./29") = 0
mkdir("./30", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 463
./strace-static-x86_64: Process 463 attached
[pid 463] chdir("./30") = 0
[pid 463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 463] setpgid(0, 0) = 0
[pid 463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 463] write(3, "1000", 4) = 4
[pid 463] close(3) = 0
[pid 463] symlink("/dev/binderfs", "./binderfs") = 0
[pid 463] memfd_create("syzkaller", 0) = 3
[pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 463] munmap(0x7f95814a7000, 262144) = 0
[pid 463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 463] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 463] close(3) = 0
[pid 463] mkdir("./file0", 0777) = 0
[ 26.984339][ T463] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 26.995273][ T463] ext4_test_bit(bit=14, block=18) = 1
[ 27.001184][ T463] is_bad_inode(inode)=0
[ 27.005339][ T463] NEXT_ORPHAN(inode)=0
[ 27.009429][ T463] max_ino=32
[ 27.012634][ T463] i_nlink=1
[ 27.015798][ T463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 463] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 463] chdir("./file0") = 0
[pid 463] ioctl(4, LOOP_CLR_FD) = 0
[pid 463] close(4) = 0
[pid 463] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 463] mkdirat(4, "./bus", 000) = 0
[pid 463] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 463] open("./file0", O_RDONLY) = 6
[pid 463] mkdirat(6, "./bus", 000) = 0
[pid 463] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 463] exit_group(0) = ?
[pid 463] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=463, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./30/binderfs") = 0
[ 27.024696][ T463] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/30/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./30/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./30") = 0
mkdir("./31", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 466
./strace-static-x86_64: Process 466 attached
[pid 466] chdir("./31") = 0
[pid 466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 466] setpgid(0, 0) = 0
[pid 466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 466] write(3, "1000", 4) = 4
[pid 466] close(3) = 0
[pid 466] symlink("/dev/binderfs", "./binderfs") = 0
[pid 466] memfd_create("syzkaller", 0) = 3
[pid 466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 466] munmap(0x7f95814a7000, 262144) = 0
[pid 466] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 466] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 466] close(3) = 0
[pid 466] mkdir("./file0", 0777) = 0
[ 27.144629][ T466] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 27.155561][ T466] ext4_test_bit(bit=14, block=18) = 1
[ 27.160941][ T466] is_bad_inode(inode)=0
[ 27.165077][ T466] NEXT_ORPHAN(inode)=0
[ 27.169297][ T466] max_ino=32
[ 27.172498][ T466] i_nlink=1
[ 27.175733][ T466] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 466] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 466] chdir("./file0") = 0
[pid 466] ioctl(4, LOOP_CLR_FD) = 0
[pid 466] close(4) = 0
[pid 466] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 466] mkdirat(4, "./bus", 000) = 0
[pid 466] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 466] open("./file0", O_RDONLY) = 6
[pid 466] mkdirat(6, "./bus", 000) = 0
[pid 466] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 466] exit_group(0) = ?
[pid 466] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=466, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./31/binderfs") = 0
[ 27.184630][ T466] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/31/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./31/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./31") = 0
mkdir("./32", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 469
./strace-static-x86_64: Process 469 attached
[pid 469] chdir("./32") = 0
[pid 469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 469] setpgid(0, 0) = 0
[pid 469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 469] write(3, "1000", 4) = 4
[pid 469] close(3) = 0
[pid 469] symlink("/dev/binderfs", "./binderfs") = 0
[pid 469] memfd_create("syzkaller", 0) = 3
[pid 469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 469] munmap(0x7f95814a7000, 262144) = 0
[pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 469] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 469] close(3) = 0
[pid 469] mkdir("./file0", 0777) = 0
[ 27.304881][ T469] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 27.315911][ T469] ext4_test_bit(bit=14, block=18) = 1
[ 27.321290][ T469] is_bad_inode(inode)=0
[ 27.325427][ T469] NEXT_ORPHAN(inode)=0
[ 27.329598][ T469] max_ino=32
[ 27.332792][ T469] i_nlink=1
[ 27.336091][ T469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 469] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 469] chdir("./file0") = 0
[pid 469] ioctl(4, LOOP_CLR_FD) = 0
[pid 469] close(4) = 0
[pid 469] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 469] mkdirat(4, "./bus", 000) = 0
[pid 469] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 469] open("./file0", O_RDONLY) = 6
[pid 469] mkdirat(6, "./bus", 000) = 0
[pid 469] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 469] exit_group(0) = ?
[pid 469] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=469, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./32/binderfs") = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./32/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./32") = 0
mkdir("./33", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 472
./strace-static-x86_64: Process 472 attached
[pid 472] chdir("./33") = 0
[pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 472] setpgid(0, 0) = 0
[pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 472] write(3, "1000", 4) = 4
[pid 472] close(3) = 0
[pid 472] symlink("/dev/binderfs", "./binderfs") = 0
[pid 472] memfd_create("syzkaller", 0) = 3
[pid 472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 472] munmap(0x7f95814a7000, 262144) = 0
[pid 472] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 472] ioctl(4, LOOP_SET_FD, 3) = 0
[ 27.344990][ T469] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/32/file0 supports timestamps until 2038 (0x7fffffff)
[pid 472] close(3) = 0
[pid 472] mkdir("./file0", 0777) = 0
[ 27.399837][ T472] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 27.410760][ T472] ext4_test_bit(bit=14, block=18) = 1
[ 27.416339][ T472] is_bad_inode(inode)=0
[ 27.420494][ T472] NEXT_ORPHAN(inode)=0
[ 27.424543][ T472] max_ino=32
[ 27.428042][ T472] i_nlink=1
[ 27.431171][ T472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 472] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 472] chdir("./file0") = 0
[pid 472] ioctl(4, LOOP_CLR_FD) = 0
[pid 472] close(4) = 0
[pid 472] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 472] mkdirat(4, "./bus", 000) = 0
[pid 472] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 472] open("./file0", O_RDONLY) = 6
[pid 472] mkdirat(6, "./bus", 000) = 0
[pid 472] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 472] exit_group(0) = ?
[pid 472] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./33/binderfs") = 0
[ 27.440266][ T472] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/33/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./33/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./33") = 0
mkdir("./34", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 475
./strace-static-x86_64: Process 475 attached
[pid 475] chdir("./34") = 0
[pid 475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 475] setpgid(0, 0) = 0
[pid 475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 475] write(3, "1000", 4) = 4
[pid 475] close(3) = 0
[pid 475] symlink("/dev/binderfs", "./binderfs") = 0
[pid 475] memfd_create("syzkaller", 0) = 3
[pid 475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 475] munmap(0x7f95814a7000, 262144) = 0
[pid 475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 475] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 475] close(3) = 0
[pid 475] mkdir("./file0", 0777) = 0
[ 27.542886][ T475] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 27.555404][ T475] ext4_test_bit(bit=14, block=18) = 1
[ 27.560863][ T475] is_bad_inode(inode)=0
[ 27.565019][ T475] NEXT_ORPHAN(inode)=0
[ 27.569140][ T475] max_ino=32
[ 27.572335][ T475] i_nlink=1
[ 27.575474][ T475] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 475] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 475] chdir("./file0") = 0
[pid 475] ioctl(4, LOOP_CLR_FD) = 0
[pid 475] close(4) = 0
[pid 475] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 475] mkdirat(4, "./bus", 000) = 0
[pid 475] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 475] open("./file0", O_RDONLY) = 6
[pid 475] mkdirat(6, "./bus", 000) = 0
[pid 475] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 475] exit_group(0) = ?
[pid 475] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=475, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./34/binderfs") = 0
[ 27.584539][ T475] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/34/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./34/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./34") = 0
mkdir("./35", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 478
./strace-static-x86_64: Process 478 attached
[pid 478] chdir("./35") = 0
[pid 478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 478] setpgid(0, 0) = 0
[pid 478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 478] write(3, "1000", 4) = 4
[pid 478] close(3) = 0
[pid 478] symlink("/dev/binderfs", "./binderfs") = 0
[pid 478] memfd_create("syzkaller", 0) = 3
[pid 478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 478] munmap(0x7f95814a7000, 262144) = 0
[pid 478] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 478] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 478] close(3) = 0
[pid 478] mkdir("./file0", 0777) = 0
[ 27.700042][ T478] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 27.710678][ T478] ext4_test_bit(bit=14, block=18) = 1
[ 27.716205][ T478] is_bad_inode(inode)=0
[ 27.720393][ T478] NEXT_ORPHAN(inode)=0
[ 27.724452][ T478] max_ino=32
[ 27.727736][ T478] i_nlink=1
[ 27.731067][ T478] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 478] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 478] chdir("./file0") = 0
[pid 478] ioctl(4, LOOP_CLR_FD) = 0
[pid 478] close(4) = 0
[pid 478] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 478] mkdirat(4, "./bus", 000) = 0
[pid 478] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 478] open("./file0", O_RDONLY) = 6
[pid 478] mkdirat(6, "./bus", 000) = 0
[pid 478] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 478] exit_group(0) = ?
[pid 478] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=478, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./35/binderfs") = 0
[ 27.740202][ T478] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/35/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./35/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./35") = 0
mkdir("./36", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 481
./strace-static-x86_64: Process 481 attached
[pid 481] chdir("./36") = 0
[pid 481] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 481] setpgid(0, 0) = 0
[pid 481] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 481] write(3, "1000", 4) = 4
[pid 481] close(3) = 0
[pid 481] symlink("/dev/binderfs", "./binderfs") = 0
[pid 481] memfd_create("syzkaller", 0) = 3
[pid 481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 481] munmap(0x7f95814a7000, 262144) = 0
[pid 481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 481] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 481] close(3) = 0
[pid 481] mkdir("./file0", 0777) = 0
[ 27.872296][ T481] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 27.883225][ T481] ext4_test_bit(bit=14, block=18) = 1
[ 27.888660][ T481] is_bad_inode(inode)=0
[ 27.892816][ T481] NEXT_ORPHAN(inode)=0
[ 27.897215][ T481] max_ino=32
[ 27.900514][ T481] i_nlink=1
[ 27.903727][ T481] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 481] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 481] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 481] chdir("./file0") = 0
[pid 481] ioctl(4, LOOP_CLR_FD) = 0
[pid 481] close(4) = 0
[pid 481] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 481] mkdirat(4, "./bus", 000) = 0
[pid 481] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 481] open("./file0", O_RDONLY) = 6
[pid 481] mkdirat(6, "./bus", 000) = 0
[pid 481] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 481] exit_group(0) = ?
[pid 481] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=481, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./36/binderfs") = 0
[ 27.912893][ T481] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/36/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./36/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./36") = 0
mkdir("./37", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 484
./strace-static-x86_64: Process 484 attached
[pid 484] chdir("./37") = 0
[pid 484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 484] setpgid(0, 0) = 0
[pid 484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 484] write(3, "1000", 4) = 4
[pid 484] close(3) = 0
[pid 484] symlink("/dev/binderfs", "./binderfs") = 0
[pid 484] memfd_create("syzkaller", 0) = 3
[pid 484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 484] munmap(0x7f95814a7000, 262144) = 0
[pid 484] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 484] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 484] close(3) = 0
[pid 484] mkdir("./file0", 0777) = 0
[ 28.023627][ T484] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.034319][ T484] ext4_test_bit(bit=14, block=18) = 1
[ 28.039855][ T484] is_bad_inode(inode)=0
[ 28.044093][ T484] NEXT_ORPHAN(inode)=0
[ 28.048405][ T484] max_ino=32
[ 28.051606][ T484] i_nlink=1
[ 28.054726][ T484] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 484] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 484] chdir("./file0") = 0
[pid 484] ioctl(4, LOOP_CLR_FD) = 0
[pid 484] close(4) = 0
[pid 484] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 484] mkdirat(4, "./bus", 000) = 0
[pid 484] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 484] open("./file0", O_RDONLY) = 6
[pid 484] mkdirat(6, "./bus", 000) = 0
[pid 484] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 484] exit_group(0) = ?
[pid 484] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=484, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./37/binderfs") = 0
[ 28.063987][ T484] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/37/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./37/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./37") = 0
mkdir("./38", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 487
./strace-static-x86_64: Process 487 attached
[pid 487] chdir("./38") = 0
[pid 487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 487] setpgid(0, 0) = 0
[pid 487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 487] write(3, "1000", 4) = 4
[pid 487] close(3) = 0
[pid 487] symlink("/dev/binderfs", "./binderfs") = 0
[pid 487] memfd_create("syzkaller", 0) = 3
[pid 487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 487] munmap(0x7f95814a7000, 262144) = 0
[pid 487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 487] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 487] close(3) = 0
[pid 487] mkdir("./file0", 0777) = 0
[ 28.183617][ T487] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.194436][ T487] ext4_test_bit(bit=14, block=18) = 1
[ 28.200000][ T487] is_bad_inode(inode)=0
[ 28.204301][ T487] NEXT_ORPHAN(inode)=0
[ 28.208641][ T487] max_ino=32
[ 28.211951][ T487] i_nlink=1
[ 28.215158][ T487] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 487] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 487] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 487] chdir("./file0") = 0
[pid 487] ioctl(4, LOOP_CLR_FD) = 0
[pid 487] close(4) = 0
[pid 487] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 487] mkdirat(4, "./bus", 000) = 0
[pid 487] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 487] open("./file0", O_RDONLY) = 6
[pid 487] mkdirat(6, "./bus", 000) = 0
[pid 487] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 487] exit_group(0) = ?
[pid 487] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=487, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./38/binderfs") = 0
[ 28.224253][ T487] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/38/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./38/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./38") = 0
mkdir("./39", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 490
./strace-static-x86_64: Process 490 attached
[pid 490] chdir("./39") = 0
[pid 490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 490] setpgid(0, 0) = 0
[pid 490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 490] write(3, "1000", 4) = 4
[pid 490] close(3) = 0
[pid 490] symlink("/dev/binderfs", "./binderfs") = 0
[pid 490] memfd_create("syzkaller", 0) = 3
[pid 490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 490] munmap(0x7f95814a7000, 262144) = 0
[pid 490] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 490] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 490] close(3) = 0
[pid 490] mkdir("./file0", 0777) = 0
[ 28.344303][ T490] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.354979][ T490] ext4_test_bit(bit=14, block=18) = 1
[ 28.360560][ T490] is_bad_inode(inode)=0
[ 28.364808][ T490] NEXT_ORPHAN(inode)=0
[ 28.369128][ T490] max_ino=32
[ 28.372456][ T490] i_nlink=1
[ 28.375708][ T490] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 490] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 490] chdir("./file0") = 0
[pid 490] ioctl(4, LOOP_CLR_FD) = 0
[pid 490] close(4) = 0
[pid 490] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 490] mkdirat(4, "./bus", 000) = 0
[pid 490] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 490] open("./file0", O_RDONLY) = 6
[pid 490] mkdirat(6, "./bus", 000) = 0
[pid 490] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 490] exit_group(0) = ?
[pid 490] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=490, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./39/binderfs") = 0
[ 28.384642][ T490] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/39/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./39/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./39") = 0
mkdir("./40", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 493
./strace-static-x86_64: Process 493 attached
[pid 493] chdir("./40") = 0
[pid 493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 493] setpgid(0, 0) = 0
[pid 493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 493] write(3, "1000", 4) = 4
[pid 493] close(3) = 0
[pid 493] symlink("/dev/binderfs", "./binderfs") = 0
[pid 493] memfd_create("syzkaller", 0) = 3
[pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 493] munmap(0x7f95814a7000, 262144) = 0
[pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 493] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 493] close(3) = 0
[pid 493] mkdir("./file0", 0777) = 0
[ 28.500285][ T493] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.510960][ T493] ext4_test_bit(bit=14, block=18) = 1
[ 28.516408][ T493] is_bad_inode(inode)=0
[ 28.520567][ T493] NEXT_ORPHAN(inode)=0
[ 28.524632][ T493] max_ino=32
[ 28.528092][ T493] i_nlink=1
[ 28.531222][ T493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 493] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 493] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 493] chdir("./file0") = 0
[pid 493] ioctl(4, LOOP_CLR_FD) = 0
[pid 493] close(4) = 0
[pid 493] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 493] mkdirat(4, "./bus", 000) = 0
[pid 493] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 493] open("./file0", O_RDONLY) = 6
[pid 493] mkdirat(6, "./bus", 000) = 0
[pid 493] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 493] exit_group(0) = ?
[pid 493] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=493, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./40/binderfs") = 0
[ 28.540317][ T493] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/40/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./40/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./40") = 0
mkdir("./41", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 496
./strace-static-x86_64: Process 496 attached
[pid 496] chdir("./41") = 0
[pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 496] setpgid(0, 0) = 0
[pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 496] write(3, "1000", 4) = 4
[pid 496] close(3) = 0
[pid 496] symlink("/dev/binderfs", "./binderfs") = 0
[pid 496] memfd_create("syzkaller", 0) = 3
[pid 496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 496] munmap(0x7f95814a7000, 262144) = 0
[pid 496] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 496] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 496] close(3) = 0
[pid 496] mkdir("./file0", 0777) = 0
[ 28.658071][ T496] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.669273][ T496] ext4_test_bit(bit=14, block=18) = 1
[ 28.674750][ T496] is_bad_inode(inode)=0
[ 28.679091][ T496] NEXT_ORPHAN(inode)=0
[ 28.683256][ T496] max_ino=32
[ 28.686769][ T496] i_nlink=1
[ 28.690052][ T496] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 496] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 496] chdir("./file0") = 0
[pid 496] ioctl(4, LOOP_CLR_FD) = 0
[pid 496] close(4) = 0
[pid 496] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 496] mkdirat(4, "./bus", 000) = 0
[pid 496] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 496] open("./file0", O_RDONLY) = 6
[pid 496] mkdirat(6, "./bus", 000) = 0
[pid 496] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 496] exit_group(0) = ?
[pid 496] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=496, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./41/binderfs") = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./41/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./41") = 0
mkdir("./42", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 499
./strace-static-x86_64: Process 499 attached
[pid 499] chdir("./42") = 0
[pid 499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 499] setpgid(0, 0) = 0
[pid 499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 499] write(3, "1000", 4) = 4
[pid 499] close(3) = 0
[pid 499] symlink("/dev/binderfs", "./binderfs") = 0
[pid 499] memfd_create("syzkaller", 0) = 3
[pid 499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 499] munmap(0x7f95814a7000, 262144) = 0
[ 28.699157][ T496] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/41/file0 supports timestamps until 2038 (0x7fffffff)
[pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 499] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 499] close(3) = 0
[pid 499] mkdir("./file0", 0777) = 0
[ 28.809659][ T499] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.820544][ T499] ext4_test_bit(bit=14, block=18) = 1
[ 28.826118][ T499] is_bad_inode(inode)=0
[ 28.830385][ T499] NEXT_ORPHAN(inode)=0
[ 28.834527][ T499] max_ino=32
[ 28.837882][ T499] i_nlink=1
[ 28.841123][ T499] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 499] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 499] chdir("./file0") = 0
[pid 499] ioctl(4, LOOP_CLR_FD) = 0
[pid 499] close(4) = 0
[pid 499] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 499] mkdirat(4, "./bus", 000) = 0
[pid 499] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 499] open("./file0", O_RDONLY) = 6
[pid 499] mkdirat(6, "./bus", 000) = 0
[pid 499] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 499] exit_group(0) = ?
[pid 499] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=499, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./42/binderfs") = 0
[ 28.850203][ T499] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/42/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./42/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./42") = 0
mkdir("./43", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 502
./strace-static-x86_64: Process 502 attached
[pid 502] chdir("./43") = 0
[pid 502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 502] setpgid(0, 0) = 0
[pid 502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 502] write(3, "1000", 4) = 4
[pid 502] close(3) = 0
[pid 502] symlink("/dev/binderfs", "./binderfs") = 0
[pid 502] memfd_create("syzkaller", 0) = 3
[pid 502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 502] munmap(0x7f95814a7000, 262144) = 0
[pid 502] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 502] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 502] close(3) = 0
[pid 502] mkdir("./file0", 0777) = 0
[ 28.984194][ T502] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 28.995132][ T502] ext4_test_bit(bit=14, block=18) = 1
[ 29.000711][ T502] is_bad_inode(inode)=0
[ 29.004956][ T502] NEXT_ORPHAN(inode)=0
[ 29.009175][ T502] max_ino=32
[ 29.012473][ T502] i_nlink=1
[ 29.015683][ T502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 502] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 502] chdir("./file0") = 0
[pid 502] ioctl(4, LOOP_CLR_FD) = 0
[pid 502] close(4) = 0
[pid 502] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 502] mkdirat(4, "./bus", 000) = 0
[pid 502] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 502] open("./file0", O_RDONLY) = 6
[pid 502] mkdirat(6, "./bus", 000) = 0
[pid 502] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 502] exit_group(0) = ?
[pid 502] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=502, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./43/binderfs") = 0
[ 29.024695][ T502] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/43/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./43/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./43") = 0
mkdir("./44", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 505
./strace-static-x86_64: Process 505 attached
[pid 505] chdir("./44") = 0
[pid 505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 505] setpgid(0, 0) = 0
[pid 505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 505] write(3, "1000", 4) = 4
[pid 505] close(3) = 0
[pid 505] symlink("/dev/binderfs", "./binderfs") = 0
[pid 505] memfd_create("syzkaller", 0) = 3
[pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 505] munmap(0x7f95814a7000, 262144) = 0
[pid 505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 505] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 505] close(3) = 0
[pid 505] mkdir("./file0", 0777) = 0
[ 29.093167][ T505] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 29.103958][ T505] ext4_test_bit(bit=14, block=18) = 1
[ 29.109393][ T505] is_bad_inode(inode)=0
[ 29.113561][ T505] NEXT_ORPHAN(inode)=0
[ 29.117760][ T505] max_ino=32
[ 29.120965][ T505] i_nlink=1
[ 29.124092][ T505] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 505] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 505] chdir("./file0") = 0
[pid 505] ioctl(4, LOOP_CLR_FD) = 0
[pid 505] close(4) = 0
[pid 505] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 505] mkdirat(4, "./bus", 000) = 0
[pid 505] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 505] open("./file0", O_RDONLY) = 6
[pid 505] mkdirat(6, "./bus", 000) = 0
[pid 505] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = 0
[pid 505] exit_group(0) = ?
[pid 505] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=505, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./44/binderfs") = 0
[ 29.133449][ T505] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/44/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./44/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./44") = 0
mkdir("./45", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 508
./strace-static-x86_64: Process 508 attached
[pid 508] chdir("./45") = 0
[pid 508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 508] setpgid(0, 0) = 0
[pid 508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 508] write(3, "1000", 4) = 4
[pid 508] close(3) = 0
[pid 508] symlink("/dev/binderfs", "./binderfs") = 0
[pid 508] memfd_create("syzkaller", 0) = 3
[pid 508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 508] munmap(0x7f95814a7000, 262144) = 0
[pid 508] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 508] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 508] close(3) = 0
[pid 508] mkdir("./file0", 0777) = 0
[ 29.263233][ T508] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 29.273847][ T508] ext4_test_bit(bit=14, block=18) = 1
[ 29.279417][ T508] is_bad_inode(inode)=0
[ 29.283565][ T508] NEXT_ORPHAN(inode)=0
[ 29.287881][ T508] max_ino=32
[ 29.291104][ T508] i_nlink=1
[ 29.294227][ T508] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 508] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 508] chdir("./file0") = 0
[pid 508] ioctl(4, LOOP_CLR_FD) = 0
[pid 508] close(4) = 0
[pid 508] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 508] mkdirat(4, "./bus", 000) = 0
[pid 508] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 508] open("./file0", O_RDONLY) = 6
[pid 508] mkdirat(6, "./bus", 000) = 0
[pid 508] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = 0
[pid 508] exit_group(0) = ?
[pid 508] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=508, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./45/binderfs") = 0
[ 29.303431][ T508] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/45/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./45/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./45") = 0
mkdir("./46", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 511
./strace-static-x86_64: Process 511 attached
[pid 511] chdir("./46") = 0
[pid 511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 511] setpgid(0, 0) = 0
[pid 511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 511] write(3, "1000", 4) = 4
[pid 511] close(3) = 0
[pid 511] symlink("/dev/binderfs", "./binderfs") = 0
[pid 511] memfd_create("syzkaller", 0) = 3
[pid 511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 511] munmap(0x7f95814a7000, 262144) = 0
[pid 511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 511] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 511] close(3) = 0
[pid 511] mkdir("./file0", 0777) = 0
[ 29.421515][ T511] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 29.432211][ T511] ext4_test_bit(bit=14, block=18) = 1
[ 29.437798][ T511] is_bad_inode(inode)=0
[ 29.441953][ T511] NEXT_ORPHAN(inode)=0
[ 29.446167][ T511] max_ino=32
[ 29.449501][ T511] i_nlink=1
[ 29.452719][ T511] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 511] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 511] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 511] chdir("./file0") = 0
[pid 511] ioctl(4, LOOP_CLR_FD) = 0
[pid 511] close(4) = 0
[pid 511] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 511] mkdirat(4, "./bus", 000) = 0
[pid 511] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 511] open("./file0", O_RDONLY) = 6
[pid 511] mkdirat(6, "./bus", 000) = 0
[pid 511] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 511] exit_group(0) = ?
[pid 511] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=511, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./46/binderfs") = 0
[ 29.461931][ T511] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/46/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./46/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./46") = 0
mkdir("./47", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 514
./strace-static-x86_64: Process 514 attached
[pid 514] chdir("./47") = 0
[pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 514] setpgid(0, 0) = 0
[pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 514] write(3, "1000", 4) = 4
[pid 514] close(3) = 0
[pid 514] symlink("/dev/binderfs", "./binderfs") = 0
[pid 514] memfd_create("syzkaller", 0) = 3
[pid 514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 514] munmap(0x7f95814a7000, 262144) = 0
[pid 514] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 514] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 514] close(3) = 0
[pid 514] mkdir("./file0", 0777) = 0
[ 29.578462][ T514] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 29.589279][ T514] ext4_test_bit(bit=14, block=18) = 1
[ 29.594782][ T514] is_bad_inode(inode)=0
[ 29.599310][ T514] NEXT_ORPHAN(inode)=0
[ 29.603485][ T514] max_ino=32
[ 29.606773][ T514] i_nlink=1
[ 29.609922][ T514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 514] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 514] chdir("./file0") = 0
[pid 514] ioctl(4, LOOP_CLR_FD) = 0
[pid 514] close(4) = 0
[pid 514] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 514] mkdirat(4, "./bus", 000) = 0
[pid 514] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 514] open("./file0", O_RDONLY) = 6
[pid 514] mkdirat(6, "./bus", 000) = 0
[pid 514] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 514] exit_group(0) = ?
[pid 514] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=514, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./47/binderfs") = 0
[ 29.618985][ T514] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/47/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./47/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./47") = 0
mkdir("./48", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 517
./strace-static-x86_64: Process 517 attached
[pid 517] chdir("./48") = 0
[pid 517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 517] setpgid(0, 0) = 0
[pid 517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 517] write(3, "1000", 4) = 4
[pid 517] close(3) = 0
[pid 517] symlink("/dev/binderfs", "./binderfs") = 0
[pid 517] memfd_create("syzkaller", 0) = 3
[pid 517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 517] munmap(0x7f95814a7000, 262144) = 0
[pid 517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 517] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 517] close(3) = 0
[pid 517] mkdir("./file0", 0777) = 0
[ 29.739925][ T517] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 29.750667][ T517] ext4_test_bit(bit=14, block=18) = 1
[ 29.756208][ T517] is_bad_inode(inode)=0
[ 29.760444][ T517] NEXT_ORPHAN(inode)=0
[ 29.764845][ T517] max_ino=32
[ 29.768355][ T517] i_nlink=1
[ 29.771662][ T517] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 517] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 517] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 517] chdir("./file0") = 0
[pid 517] ioctl(4, LOOP_CLR_FD) = 0
[pid 517] close(4) = 0
[pid 517] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 517] mkdirat(4, "./bus", 000) = 0
[pid 517] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 517] open("./file0", O_RDONLY) = 6
[pid 517] mkdirat(6, "./bus", 000) = 0
[pid 517] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 517] exit_group(0) = ?
[pid 517] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=517, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./48/binderfs") = 0
[ 29.781159][ T517] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/48/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./48/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./48") = 0
mkdir("./49", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 520
./strace-static-x86_64: Process 520 attached
[pid 520] chdir("./49") = 0
[pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 520] setpgid(0, 0) = 0
[pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 520] write(3, "1000", 4) = 4
[pid 520] close(3) = 0
[pid 520] symlink("/dev/binderfs", "./binderfs") = 0
[pid 520] memfd_create("syzkaller", 0) = 3
[pid 520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 520] munmap(0x7f95814a7000, 262144) = 0
[pid 520] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 520] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 520] close(3) = 0
[pid 520] mkdir("./file0", 0777) = 0
[ 29.902652][ T520] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 29.913449][ T520] ext4_test_bit(bit=14, block=18) = 1
[ 29.919212][ T520] is_bad_inode(inode)=0
[ 29.923475][ T520] NEXT_ORPHAN(inode)=0
[ 29.927720][ T520] max_ino=32
[ 29.930926][ T520] i_nlink=1
[ 29.934050][ T520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 520] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 520] chdir("./file0") = 0
[pid 520] ioctl(4, LOOP_CLR_FD) = 0
[pid 520] close(4) = 0
[pid 520] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 520] mkdirat(4, "./bus", 000) = 0
[pid 520] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 520] open("./file0", O_RDONLY) = 6
[pid 520] mkdirat(6, "./bus", 000) = 0
[pid 520] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 520] exit_group(0) = ?
[pid 520] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=520, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./49/binderfs") = 0
[ 29.943179][ T520] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/49/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./49/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./49") = 0
mkdir("./50", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 523
./strace-static-x86_64: Process 523 attached
[pid 523] chdir("./50") = 0
[pid 523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 523] setpgid(0, 0) = 0
[pid 523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 523] write(3, "1000", 4) = 4
[pid 523] close(3) = 0
[pid 523] symlink("/dev/binderfs", "./binderfs") = 0
[pid 523] memfd_create("syzkaller", 0) = 3
[pid 523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 523] munmap(0x7f95814a7000, 262144) = 0
[pid 523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 523] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 523] close(3) = 0
[pid 523] mkdir("./file0", 0777) = 0
[ 30.061311][ T523] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 30.072046][ T523] ext4_test_bit(bit=14, block=18) = 1
[ 30.077545][ T523] is_bad_inode(inode)=0
[ 30.081704][ T523] NEXT_ORPHAN(inode)=0
[ 30.085934][ T523] max_ino=32
[ 30.089243][ T523] i_nlink=1
[ 30.092467][ T523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 523] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 523] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 523] chdir("./file0") = 0
[pid 523] ioctl(4, LOOP_CLR_FD) = 0
[pid 523] close(4) = 0
[pid 523] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 523] mkdirat(4, "./bus", 000) = 0
[pid 523] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 523] open("./file0", O_RDONLY) = 6
[pid 523] mkdirat(6, "./bus", 000) = 0
[pid 523] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 523] exit_group(0) = ?
[pid 523] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=523, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./50/binderfs") = 0
[ 30.101724][ T523] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/50/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./50/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./50") = 0
mkdir("./51", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 526
./strace-static-x86_64: Process 526 attached
[pid 526] chdir("./51") = 0
[pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 526] setpgid(0, 0) = 0
[pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 526] write(3, "1000", 4) = 4
[pid 526] close(3) = 0
[pid 526] symlink("/dev/binderfs", "./binderfs") = 0
[pid 526] memfd_create("syzkaller", 0) = 3
[pid 526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 526] munmap(0x7f95814a7000, 262144) = 0
[pid 526] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 526] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 526] close(3) = 0
[pid 526] mkdir("./file0", 0777) = 0
[ 30.219914][ T526] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 30.230708][ T526] ext4_test_bit(bit=14, block=18) = 1
[ 30.236327][ T526] is_bad_inode(inode)=0
[ 30.240483][ T526] NEXT_ORPHAN(inode)=0
[ 30.244625][ T526] max_ino=32
[ 30.248033][ T526] i_nlink=1
[ 30.251164][ T526] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 526] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 526] chdir("./file0") = 0
[pid 526] ioctl(4, LOOP_CLR_FD) = 0
[pid 526] close(4) = 0
[pid 526] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 526] mkdirat(4, "./bus", 000) = 0
[pid 526] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 526] open("./file0", O_RDONLY) = 6
[pid 526] mkdirat(6, "./bus", 000) = 0
[pid 526] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 526] exit_group(0) = ?
[pid 526] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=526, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./51/binderfs") = 0
[ 30.260396][ T526] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/51/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./51/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./51") = 0
mkdir("./52", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 529
./strace-static-x86_64: Process 529 attached
[pid 529] chdir("./52") = 0
[pid 529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 529] setpgid(0, 0) = 0
[pid 529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 529] write(3, "1000", 4) = 4
[pid 529] close(3) = 0
[pid 529] symlink("/dev/binderfs", "./binderfs") = 0
[pid 529] memfd_create("syzkaller", 0) = 3
[pid 529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 529] munmap(0x7f95814a7000, 262144) = 0
[pid 529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 529] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 529] close(3) = 0
[pid 529] mkdir("./file0", 0777) = 0
[ 30.421455][ T529] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 30.432192][ T529] ext4_test_bit(bit=14, block=18) = 1
[ 30.437719][ T529] is_bad_inode(inode)=0
[ 30.442029][ T529] NEXT_ORPHAN(inode)=0
[ 30.446370][ T529] max_ino=32
[ 30.449574][ T529] i_nlink=1
[ 30.452705][ T529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 529] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 529] chdir("./file0") = 0
[pid 529] ioctl(4, LOOP_CLR_FD) = 0
[pid 529] close(4) = 0
[pid 529] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 529] mkdirat(4, "./bus", 000) = 0
[pid 529] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 529] open("./file0", O_RDONLY) = 6
[pid 529] mkdirat(6, "./bus", 000) = 0
[pid 529] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 529] exit_group(0) = ?
[pid 529] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=529, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./52/binderfs") = 0
[ 30.461859][ T529] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/52/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./52/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./52") = 0
mkdir("./53", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 532
./strace-static-x86_64: Process 532 attached
[pid 532] chdir("./53") = 0
[pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 532] setpgid(0, 0) = 0
[pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 532] write(3, "1000", 4) = 4
[pid 532] close(3) = 0
[pid 532] symlink("/dev/binderfs", "./binderfs") = 0
[pid 532] memfd_create("syzkaller", 0) = 3
[pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 532] munmap(0x7f95814a7000, 262144) = 0
[pid 532] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 532] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 532] close(3) = 0
[pid 532] mkdir("./file0", 0777) = 0
[ 30.569670][ T532] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 30.580528][ T532] ext4_test_bit(bit=14, block=18) = 1
[ 30.586084][ T532] is_bad_inode(inode)=0
[ 30.590320][ T532] NEXT_ORPHAN(inode)=0
[ 30.594456][ T532] max_ino=32
[ 30.597944][ T532] i_nlink=1
[ 30.601086][ T532] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 532] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 532] chdir("./file0") = 0
[pid 532] ioctl(4, LOOP_CLR_FD) = 0
[pid 532] close(4) = 0
[pid 532] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 532] mkdirat(4, "./bus", 000) = 0
[pid 532] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 532] open("./file0", O_RDONLY) = 6
[pid 532] mkdirat(6, "./bus", 000) = 0
[pid 532] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 532] exit_group(0) = ?
[pid 532] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./53/binderfs") = 0
[ 30.610069][ T532] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/53/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./53/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./53") = 0
mkdir("./54", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 535
./strace-static-x86_64: Process 535 attached
[pid 535] chdir("./54") = 0
[pid 535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 535] setpgid(0, 0) = 0
[pid 535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 535] write(3, "1000", 4) = 4
[pid 535] close(3) = 0
[pid 535] symlink("/dev/binderfs", "./binderfs") = 0
[pid 535] memfd_create("syzkaller", 0) = 3
[pid 535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 535] munmap(0x7f95814a7000, 262144) = 0
[pid 535] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 535] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 535] close(3) = 0
[pid 535] mkdir("./file0", 0777) = 0
[ 30.705874][ T535] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 30.716434][ T535] ext4_test_bit(bit=14, block=18) = 1
[ 30.721791][ T535] is_bad_inode(inode)=0
[ 30.725967][ T535] NEXT_ORPHAN(inode)=0
[ 30.730034][ T535] max_ino=32
[ 30.733209][ T535] i_nlink=1
[ 30.736501][ T535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 535] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 535] chdir("./file0") = 0
[pid 535] ioctl(4, LOOP_CLR_FD) = 0
[pid 535] close(4) = 0
[pid 535] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 535] mkdirat(4, "./bus", 000) = 0
[pid 535] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 535] open("./file0", O_RDONLY) = 6
[pid 535] mkdirat(6, "./bus", 000) = 0
[pid 535] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 535] exit_group(0) = ?
[pid 535] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=535, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./54/binderfs") = 0
[ 30.745400][ T535] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/54/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./54/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./54") = 0
mkdir("./55", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 538
./strace-static-x86_64: Process 538 attached
[pid 538] chdir("./55") = 0
[pid 538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 538] setpgid(0, 0) = 0
[pid 538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 538] write(3, "1000", 4) = 4
[pid 538] close(3) = 0
[pid 538] symlink("/dev/binderfs", "./binderfs") = 0
[pid 538] memfd_create("syzkaller", 0) = 3
[pid 538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 538] munmap(0x7f95814a7000, 262144) = 0
[pid 538] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 538] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 538] close(3) = 0
[pid 538] mkdir("./file0", 0777) = 0
[ 30.819835][ T538] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 30.830568][ T538] ext4_test_bit(bit=14, block=18) = 1
[ 30.836200][ T538] is_bad_inode(inode)=0
[ 30.840357][ T538] NEXT_ORPHAN(inode)=0
[ 30.844405][ T538] max_ino=32
[ 30.847611][ T538] i_nlink=1
[ 30.850750][ T538] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 538] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 538] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 538] chdir("./file0") = 0
[pid 538] ioctl(4, LOOP_CLR_FD) = 0
[pid 538] close(4) = 0
[pid 538] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 538] mkdirat(4, "./bus", 000) = 0
[pid 538] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 538] open("./file0", O_RDONLY) = 6
[pid 538] mkdirat(6, "./bus", 000) = 0
[pid 538] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 538] exit_group(0) = ?
[pid 538] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=538, si_uid=0, si_status=0, si_utime=0, si_stime=6} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./55/binderfs") = 0
[ 30.859698][ T538] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/55/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./55/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./55") = 0
mkdir("./56", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 541
./strace-static-x86_64: Process 541 attached
[pid 541] chdir("./56") = 0
[pid 541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 541] setpgid(0, 0) = 0
[pid 541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 541] write(3, "1000", 4) = 4
[pid 541] close(3) = 0
[pid 541] symlink("/dev/binderfs", "./binderfs") = 0
[pid 541] memfd_create("syzkaller", 0) = 3
[pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 541] munmap(0x7f95814a7000, 262144) = 0
[pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 541] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 541] close(3) = 0
[pid 541] mkdir("./file0", 0777) = 0
[ 30.993074][ T541] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 31.003812][ T541] ext4_test_bit(bit=14, block=18) = 1
[ 31.009280][ T541] is_bad_inode(inode)=0
[ 31.013422][ T541] NEXT_ORPHAN(inode)=0
[ 31.017558][ T541] max_ino=32
[ 31.020750][ T541] i_nlink=1
[ 31.023874][ T541] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 541] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 541] chdir("./file0") = 0
[pid 541] ioctl(4, LOOP_CLR_FD) = 0
[pid 541] close(4) = 0
[pid 541] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 541] mkdirat(4, "./bus", 000) = 0
[pid 541] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 541] open("./file0", O_RDONLY) = 6
[pid 541] mkdirat(6, "./bus", 000) = 0
[pid 541] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 541] exit_group(0) = ?
[pid 541] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=541, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./56/binderfs") = 0
[ 31.032966][ T541] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/56/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./56/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./56") = 0
mkdir("./57", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 544
./strace-static-x86_64: Process 544 attached
[pid 544] chdir("./57") = 0
[pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 544] setpgid(0, 0) = 0
[pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 544] write(3, "1000", 4) = 4
[pid 544] close(3) = 0
[pid 544] symlink("/dev/binderfs", "./binderfs") = 0
[pid 544] memfd_create("syzkaller", 0) = 3
[pid 544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 544] munmap(0x7f95814a7000, 262144) = 0
[pid 544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 544] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 544] close(3) = 0
[pid 544] mkdir("./file0", 0777) = 0
[ 31.123662][ T544] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 31.134622][ T544] ext4_test_bit(bit=14, block=18) = 1
[ 31.140095][ T544] is_bad_inode(inode)=0
[ 31.144244][ T544] NEXT_ORPHAN(inode)=0
[ 31.148413][ T544] max_ino=32
[ 31.151601][ T544] i_nlink=1
[ 31.154740][ T544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 544] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 544] chdir("./file0") = 0
[pid 544] ioctl(4, LOOP_CLR_FD) = 0
[pid 544] close(4) = 0
[pid 544] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 544] mkdirat(4, "./bus", 000) = 0
[pid 544] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 544] open("./file0", O_RDONLY) = 6
[pid 544] mkdirat(6, "./bus", 000) = 0
[pid 544] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 544] exit_group(0) = ?
[pid 544] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=544, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./57/binderfs") = 0
[ 31.164098][ T544] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/57/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./57/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./57") = 0
mkdir("./58", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 547
./strace-static-x86_64: Process 547 attached
[pid 547] chdir("./58") = 0
[pid 547] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 547] setpgid(0, 0) = 0
[pid 547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 547] write(3, "1000", 4) = 4
[pid 547] close(3) = 0
[pid 547] symlink("/dev/binderfs", "./binderfs") = 0
[pid 547] memfd_create("syzkaller", 0) = 3
[pid 547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 547] munmap(0x7f95814a7000, 262144) = 0
[pid 547] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 547] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 547] close(3) = 0
[pid 547] mkdir("./file0", 0777) = 0
[ 31.303769][ T547] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 31.314732][ T547] ext4_test_bit(bit=14, block=18) = 1
[ 31.320217][ T547] is_bad_inode(inode)=0
[ 31.324480][ T547] NEXT_ORPHAN(inode)=0
[ 31.328707][ T547] max_ino=32
[ 31.331995][ T547] i_nlink=1
[ 31.335202][ T547] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 547] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 547] chdir("./file0") = 0
[pid 547] ioctl(4, LOOP_CLR_FD) = 0
[pid 547] close(4) = 0
[pid 547] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 547] mkdirat(4, "./bus", 000) = 0
[pid 547] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 547] open("./file0", O_RDONLY) = 6
[pid 547] mkdirat(6, "./bus", 000) = 0
[pid 547] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 547] exit_group(0) = ?
[pid 547] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=547, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./58/binderfs") = 0
[ 31.344283][ T547] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/58/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./58/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./58") = 0
mkdir("./59", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 550
./strace-static-x86_64: Process 550 attached
[pid 550] chdir("./59") = 0
[pid 550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 550] setpgid(0, 0) = 0
[pid 550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 550] write(3, "1000", 4) = 4
[pid 550] close(3) = 0
[pid 550] symlink("/dev/binderfs", "./binderfs") = 0
[pid 550] memfd_create("syzkaller", 0) = 3
[pid 550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 550] munmap(0x7f95814a7000, 262144) = 0
[pid 550] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 550] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 550] close(3) = 0
[pid 550] mkdir("./file0", 0777) = 0
[ 31.465517][ T550] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 31.476294][ T550] ext4_test_bit(bit=14, block=18) = 1
[ 31.481661][ T550] is_bad_inode(inode)=0
[ 31.485866][ T550] NEXT_ORPHAN(inode)=0
[ 31.490044][ T550] max_ino=32
[ 31.493312][ T550] i_nlink=1
[ 31.496719][ T550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 550] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 550] chdir("./file0") = 0
[pid 550] ioctl(4, LOOP_CLR_FD) = 0
[pid 550] close(4) = 0
[pid 550] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 550] mkdirat(4, "./bus", 000) = 0
[pid 550] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 550] open("./file0", O_RDONLY) = 6
[pid 550] mkdirat(6, "./bus", 000) = 0
[pid 550] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 550] exit_group(0) = ?
[pid 550] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=550, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./59/binderfs") = 0
[ 31.505816][ T550] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/59/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./59/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./59") = 0
mkdir("./60", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 553
./strace-static-x86_64: Process 553 attached
[pid 553] chdir("./60") = 0
[pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 553] setpgid(0, 0) = 0
[pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 553] write(3, "1000", 4) = 4
[pid 553] close(3) = 0
[pid 553] symlink("/dev/binderfs", "./binderfs") = 0
[pid 553] memfd_create("syzkaller", 0) = 3
[pid 553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 553] munmap(0x7f95814a7000, 262144) = 0
[pid 553] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 553] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 553] close(3) = 0
[pid 553] mkdir("./file0", 0777) = 0
[ 31.621030][ T553] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 31.631825][ T553] ext4_test_bit(bit=14, block=18) = 1
[ 31.637590][ T553] is_bad_inode(inode)=0
[ 31.641868][ T553] NEXT_ORPHAN(inode)=0
[ 31.646079][ T553] max_ino=32
[ 31.649282][ T553] i_nlink=1
[ 31.652424][ T553] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 553] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 553] chdir("./file0") = 0
[pid 553] ioctl(4, LOOP_CLR_FD) = 0
[pid 553] close(4) = 0
[pid 553] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 553] mkdirat(4, "./bus", 000) = 0
[pid 553] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 553] open("./file0", O_RDONLY) = 6
[pid 553] mkdirat(6, "./bus", 000) = 0
[pid 553] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 553] exit_group(0) = ?
[pid 553] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=553, si_uid=0, si_status=0, si_utime=0, si_stime=5} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./60/binderfs") = 0
[ 31.661378][ T553] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/60/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./60/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./60") = 0
mkdir("./61", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 556
./strace-static-x86_64: Process 556 attached
[pid 556] chdir("./61") = 0
[pid 556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 556] setpgid(0, 0) = 0
[pid 556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 556] write(3, "1000", 4) = 4
[pid 556] close(3) = 0
[pid 556] symlink("/dev/binderfs", "./binderfs") = 0
[pid 556] memfd_create("syzkaller", 0) = 3
[pid 556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 556] munmap(0x7f95814a7000, 262144) = 0
[pid 556] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 556] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 556] close(3) = 0
[pid 556] mkdir("./file0", 0777) = 0
[ 31.783648][ T556] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz-executor122: bad orphan inode 15
[ 31.794485][ T556] ext4_test_bit(bit=14, block=18) = 1
[ 31.799999][ T556] is_bad_inode(inode)=0
[ 31.804161][ T556] NEXT_ORPHAN(inode)=0
[ 31.808398][ T556] max_ino=32
[ 31.811594][ T556] i_nlink=1
[ 31.814730][ T556] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[pid 556] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0
[pid 556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 556] chdir("./file0") = 0
[pid 556] ioctl(4, LOOP_CLR_FD) = 0
[pid 556] close(4) = 0
[pid 556] openat(AT_FDCWD, ".", O_RDONLY) = 4
[pid 556] mkdirat(4, "./bus", 000) = 0
[pid 556] openat(AT_FDCWD, ".", O_RDONLY) = 5
[pid 556] open("./file0", O_RDONLY) = 6
[pid 556] mkdirat(6, "./bus", 000) = 0
[pid 556] renameat2(5, "./bus", 4, "./file0", RENAME_EXCHANGE) = -1 EUCLEAN (Structure needs cleaning)
[pid 556] exit_group(0) = ?
[pid 556] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=556, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556af4620 /* 4 entries */, 32768) = 112
umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./61/binderfs") = 0
[ 31.823710][ T556] ext4 filesystem being mounted at /root/syzkaller.uYsrAf/61/file0 supports timestamps until 2038 (0x7fffffff)
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555556afc660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556afc660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./61/file0") = 0
getdents64(3, 0x555556af4620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./61") = 0
mkdir("./62", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556af35d0) = 559
./strace-static-x86_64: Process 559 attached
[pid 559] chdir("./62") = 0
[pid 559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 559] setpgid(0, 0) = 0
[pid 559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 559] write(3, "1000", 4) = 4
[pid 559] close(3) = 0
[pid 559] symlink("/dev/binderfs", "./binderfs") = 0
[pid 559] memfd_create("syzkaller", 0) = 3
[pid 559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95814a7000
[pid 559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 559] munmap(0x7f95814a7000, 262144) = 0
[pid 559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 559] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 559] close(3) = 0
[pid 559] mkdir("./file0", 0777) = 0