./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2072945590
<...>
[ 97.219896][ T919] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts.
execve("./syz-executor2072945590", ["./syz-executor2072945590"], 0x7ffc9f0bec70 /* 10 vars */) = 0
brk(NULL) = 0x555576190000
brk(0x555576190d00) = 0x555576190d00
arch_prctl(ARCH_SET_FS, 0x555576190380) = 0
set_tid_address(0x555576190650) = 5832
set_robust_list(0x555576190660, 24) = 0
rseq(0x555576190ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2072945590", 4096) = 28
getrandom("\xec\xfc\xd8\x48\xc2\x90\x84\x5a", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555576190d00
brk(0x5555761b1d00) = 0x5555761b1d00
brk(0x5555761b2000) = 0x5555761b2000
mprotect(0x7fb40c787000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
mkdir("./syzkaller.1GOrjr", 0700) = 0
chmod("./syzkaller.1GOrjr", 0777) = 0
chdir("./syzkaller.1GOrjr") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576190650) = 5833
./strace-static-x86_64: Process 5833 attached
[pid 5833] set_robust_list(0x555576190660, 24) = 0
[pid 5833] chdir("./0") = 0
[pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5833] setpgid(0, 0) = 0
[pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5833] write(3, "1000", 4) = 4
[pid 5833] close(3) = 0
[pid 5833] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5833] write(1, "executing program\n", 18executing program
) = 18
[pid 5833] memfd_create("syzkaller", 0) = 3
[pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5833] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5833] munmap(0x7fb404200000, 138412032) = 0
[pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5833] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5833] close(3) = 0
[pid 5833] close(4) = 0
[pid 5833] mkdir("./file0", 0777) = 0
[ 100.432215][ T5833] loop0: detected capacity change from 0 to 32768
[ 100.460479][ T5833] (syz-executor207,5833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 100.475933][ T5833] (syz-executor207,5833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 100.500758][ T5833] JBD2: Ignoring recovery information on journal
[pid 5833] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5833] chdir("./file0") = 0
[pid 5833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5833] exit_group(0) = ?
[pid 5833] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 100.530740][ T5833] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 100.546998][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[ 100.592424][ T5832]
[ 100.594779][ T5832] ======================================================
[ 100.601804][ T5832] WARNING: possible circular locking dependency detected
[ 100.608835][ T5832] 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 Not tainted
[ 100.616074][ T5832] ------------------------------------------------------
[ 100.623183][ T5832] syz-executor207/5832 is trying to acquire lock:
[ 100.629590][ T5832] ffff88807d16b948 ((wq_completion)ocfs2_wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb1/0x170
[ 100.640144][ T5832]
[ 100.640144][ T5832] but task is already holding lock:
[ 100.647513][ T5832] ffff88807dfe60e0 (&type->s_umount_key#43){++++}-{4:4}, at: deactivate_super+0xb5/0xf0
[ 100.657301][ T5832]
[ 100.657301][ T5832] which lock already depends on the new lock.
[ 100.657301][ T5832]
[ 100.667695][ T5832]
[ 100.667695][ T5832] the existing dependency chain (in reverse order) is:
[ 100.676735][ T5832]
[ 100.676735][ T5832] -> #2 (&type->s_umount_key#43){++++}-{4:4}:
[ 100.685099][ T5832] lock_acquire+0x116/0x2f0
[ 100.690132][ T5832] down_read+0xb3/0xa50
[ 100.694839][ T5832] ocfs2_finish_quota_recovery+0x15e/0x2310
[ 100.701263][ T5832] ocfs2_complete_recovery+0x1977/0x2580
[ 100.707438][ T5832] process_scheduled_works+0xac3/0x18e0
[ 100.713524][ T5832] worker_thread+0x870/0xd50
[ 100.718639][ T5832] kthread+0x7b7/0x940
[ 100.723226][ T5832] ret_from_fork+0x4b/0x80
[ 100.728204][ T5832] ret_from_fork_asm+0x1a/0x30
[ 100.733591][ T5832]
[ 100.733591][ T5832] -> #1 ((work_completion)(&journal->j_recovery_work)){+.+.}-{0:0}:
[ 100.743773][ T5832] lock_acquire+0x116/0x2f0
[ 100.748824][ T5832] process_scheduled_works+0x9e9/0x18e0
[ 100.754906][ T5832] worker_thread+0x870/0xd50
[ 100.760026][ T5832] kthread+0x7b7/0x940
[ 100.764702][ T5832] ret_from_fork+0x4b/0x80
[ 100.769636][ T5832] ret_from_fork_asm+0x1a/0x30
[ 100.774948][ T5832]
[ 100.774948][ T5832] -> #0 ((wq_completion)ocfs2_wq){+.+.}-{0:0}:
[ 100.783313][ T5832] validate_chain+0xa69/0x24e0
[ 100.788612][ T5832] __lock_acquire+0xad5/0xd80
[ 100.793809][ T5832] lock_acquire+0x116/0x2f0
[ 100.798841][ T5832] touch_wq_lockdep_map+0xc7/0x170
[ 100.804472][ T5832] __flush_workqueue+0x14c/0x1280
[ 100.810028][ T5832] ocfs2_shutdown_local_alloc+0x10b/0xab0
[ 100.816361][ T5832] ocfs2_dismount_volume+0x204/0x910
[ 100.822187][ T5832] generic_shutdown_super+0x139/0x2d0
[ 100.828098][ T5832] kill_block_super+0x44/0x90
[ 100.833322][ T5832] deactivate_locked_super+0xc4/0x130
[ 100.839217][ T5832] cleanup_mnt+0x422/0x4c0
[ 100.844154][ T5832] task_work_run+0x251/0x310
[ 100.849265][ T5832] ptrace_notify+0x2dc/0x390
[ 100.854380][ T5832] syscall_exit_work+0xc7/0x1d0
[ 100.859750][ T5832] syscall_exit_to_user_mode+0x24a/0x340
[ 100.865901][ T5832] do_syscall_64+0x100/0x210
[ 100.871021][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.877436][ T5832]
[ 100.877436][ T5832] other info that might help us debug this:
[ 100.877436][ T5832]
[ 100.887660][ T5832] Chain exists of:
[ 100.887660][ T5832] (wq_completion)ocfs2_wq --> (work_completion)(&journal->j_recovery_work) --> &type->s_umount_key#43
[ 100.887660][ T5832]
[ 100.904544][ T5832] Possible unsafe locking scenario:
[ 100.904544][ T5832]
[ 100.912005][ T5832] CPU0 CPU1
[ 100.917381][ T5832] ---- ----
[ 100.922751][ T5832] lock(&type->s_umount_key#43);
[ 100.927791][ T5832] lock((work_completion)(&journal->j_recovery_work));
[ 100.937246][ T5832] lock(&type->s_umount_key#43);
[ 100.944795][ T5832] lock((wq_completion)ocfs2_wq);
[ 100.949910][ T5832]
[ 100.949910][ T5832] *** DEADLOCK ***
[ 100.949910][ T5832]
[ 100.958060][ T5832] 1 lock held by syz-executor207/5832:
[ 100.963509][ T5832] #0: ffff88807dfe60e0 (&type->s_umount_key#43){++++}-{4:4}, at: deactivate_super+0xb5/0xf0
[ 100.973724][ T5832]
[ 100.973724][ T5832] stack backtrace:
[ 100.979624][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor207 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full)
[ 100.979648][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 100.979665][ T5832] Call Trace:
[ 100.979673][ T5832]
[ 100.979680][ T5832] dump_stack_lvl+0x241/0x360
[ 100.979703][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10
[ 100.979722][ T5832] ? __pfx__printk+0x10/0x10
[ 100.979741][ T5832] ? print_lock+0x171/0x1a0
[ 100.979764][ T5832] print_circular_bug+0x2e1/0x300
[ 100.979779][ T5832] check_noncircular+0x142/0x160
[ 100.979805][ T5832] validate_chain+0xa69/0x24e0
[ 100.979828][ T5832] ? _raw_spin_unlock_irqrestore+0xde/0x140
[ 100.979852][ T5832] ? dquot_disable+0x1158/0x1cf0
[ 100.979869][ T5832] ? ocfs2_disable_quotas+0x1bc/0x210
[ 100.979883][ T5832] ? kill_block_super+0x44/0x90
[ 100.979899][ T5832] ? debug_object_assert_init+0x30e/0x4d0
[ 100.979924][ T5832] __lock_acquire+0xad5/0xd80
[ 100.979946][ T5832] lock_acquire+0x116/0x2f0
[ 100.979964][ T5832] ? touch_wq_lockdep_map+0xb1/0x170
[ 100.979981][ T5832] ? touch_wq_lockdep_map+0xb1/0x170
[ 100.979994][ T5832] touch_wq_lockdep_map+0xc7/0x170
[ 100.980007][ T5832] ? touch_wq_lockdep_map+0xb1/0x170
[ 100.980021][ T5832] __flush_workqueue+0x14c/0x1280
[ 100.980034][ T5832] ? kfree+0x198/0x430
[ 100.980049][ T5832] ? ocfs2_local_free_info+0x8ba/0xa60
[ 100.980071][ T5832] ? __pfx___flush_workqueue+0x10/0x10
[ 100.980089][ T5832] ? work_grab_pending+0x4d6/0xb00
[ 100.980114][ T5832] ocfs2_shutdown_local_alloc+0x10b/0xab0
[ 100.980138][ T5832] ? __pfx_work_grab_pending+0x10/0x10
[ 100.980163][ T5832] ? __pfx_ocfs2_shutdown_local_alloc+0x10/0x10
[ 100.980186][ T5832] ? lockdep_hardirqs_on+0x9d/0x150
[ 100.980200][ T5832] ? enable_work+0x2e4/0x360
[ 100.980215][ T5832] ? __pfx_enable_work+0x10/0x10
[ 100.980229][ T5832] ? _atomic_dec_and_lock+0x9a/0x130
[ 100.980245][ T5832] ? iput+0x3be/0xa50
[ 100.980264][ T5832] ocfs2_dismount_volume+0x204/0x910
[ 100.980289][ T5832] ? __pfx_ocfs2_dismount_volume+0x10/0x10
[ 100.980316][ T5832] ? __pfx_evict_inodes+0x10/0x10
[ 100.980334][ T5832] ? __pfx_ocfs2_put_super+0x10/0x10
[ 100.980357][ T5832] generic_shutdown_super+0x139/0x2d0
[ 100.980379][ T5832] kill_block_super+0x44/0x90
[ 100.980394][ T5832] deactivate_locked_super+0xc4/0x130
[ 100.980415][ T5832] cleanup_mnt+0x422/0x4c0
[ 100.980434][ T5832] ? lockdep_hardirqs_on+0x9d/0x150
[ 100.980449][ T5832] task_work_run+0x251/0x310
[ 100.980467][ T5832] ? __pfx_task_work_run+0x10/0x10
[ 100.980486][ T5832] ? path_umount+0x251/0xfb0
[ 100.980500][ T5832] ptrace_notify+0x2dc/0x390
[ 100.980519][ T5832] ? __x64_sys_umount+0x122/0x170
[ 100.980533][ T5832] ? user_path_at+0x44/0x60
[ 100.980553][ T5832] ? __pfx_ptrace_notify+0x10/0x10
[ 100.980571][ T5832] ? kmem_cache_free+0x197/0x410
[ 100.980593][ T5832] ? __x64_sys_umount+0x122/0x170
[ 100.980608][ T5832] syscall_exit_work+0xc7/0x1d0
[ 100.980629][ T5832] syscall_exit_to_user_mode+0x24a/0x340
[ 100.980646][ T5832] do_syscall_64+0x100/0x210
[ 100.980661][ T5832] ? clear_bhb_loop+0x45/0xa0
[ 100.980677][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.980692][ T5832] RIP: 0033:0x7fb40c710487
[ 100.980711][ T5832] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 100.980722][ T5832] RSP: 002b:00007fff06a38548 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 100.980738][ T5832] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb40c710487
[ 100.980747][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff06a38600
[ 100.980756][ T5832] RBP: 00007fff06a38600 R08: 0000000000000000 R09: 0000000000000000
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 100.980764][ T5832] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff06a39670
[ 100.980774][ T5832] R13: 00005555761916c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 100.980789][ T5832]
[ 101.367665][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5836 attached
[pid 5836] set_robust_list(0x555576190660, 24) = 0
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5836
[pid 5836] chdir("./1") = 0
[pid 5836] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5836] setpgid(0, 0) = 0
[pid 5836] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5836] write(3, "1000", 4) = 4
[pid 5836] close(3) = 0
[pid 5836] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5836] write(1, "executing program\n", 18executing program
) = 18
[pid 5836] memfd_create("syzkaller", 0) = 3
[pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5836] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5836] munmap(0x7fb404200000, 138412032) = 0
[pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5836] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5836] close(3) = 0
[pid 5836] close(4) = 0
[pid 5836] mkdir("./file0", 0777) = 0
[ 101.594830][ T5836] loop0: detected capacity change from 0 to 32768
[ 101.627040][ T5836] (syz-executor207,5836,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 101.641317][ T5836] (syz-executor207,5836,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 101.659981][ T5836] JBD2: Ignoring recovery information on journal
[ 101.679975][ T5836] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5836] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5836] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5836] chdir("./file0") = 0
[pid 5836] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5836] exit_group(0) = ?
[pid 5836] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5836, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./1/binderfs") = 0
[ 101.691201][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 101.732844][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached
, child_tidptr=0x555576190650) = 5839
[pid 5839] set_robust_list(0x555576190660, 24) = 0
[pid 5839] chdir("./2") = 0
[pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5839] setpgid(0, 0) = 0
[pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5839] write(3, "1000", 4) = 4
[pid 5839] close(3) = 0
[pid 5839] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5839] write(1, "executing program\n", 18) = 18
[pid 5839] memfd_create("syzkaller", 0) = 3
[pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5839] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5839] munmap(0x7fb404200000, 138412032) = 0
[pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5839] close(3) = 0
[pid 5839] close(4) = 0
[pid 5839] mkdir("./file0", 0777) = 0
[ 102.054295][ T5839] loop0: detected capacity change from 0 to 32768
[ 102.091741][ T5839] (syz-executor207,5839,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 102.111047][ T5839] (syz-executor207,5839,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 102.131681][ T5839] JBD2: Ignoring recovery information on journal
[pid 5839] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5839] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5839] chdir("./file0") = 0
[pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5839] exit_group(0) = ?
[pid 5839] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./2/binderfs") = 0
umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./2/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./2") = 0
mkdir("./3", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 102.151720][ T5839] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 102.163390][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[ 102.192972][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5842 attached
, child_tidptr=0x555576190650) = 5842
[pid 5842] set_robust_list(0x555576190660, 24) = 0
[pid 5842] chdir("./3") = 0
[pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5842] setpgid(0, 0) = 0
[pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5842] write(3, "1000", 4) = 4
[pid 5842] close(3) = 0
[pid 5842] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5842] write(1, "executing program\n", 18executing program
) = 18
[pid 5842] memfd_create("syzkaller", 0) = 3
[pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5842] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5842] munmap(0x7fb404200000, 138412032) = 0
[pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5842] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5842] close(3) = 0
[pid 5842] close(4) = 0
[pid 5842] mkdir("./file0", 0777) = 0
[ 102.492722][ T5842] loop0: detected capacity change from 0 to 32768
[ 102.554099][ T5842] (syz-executor207,5842,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 102.568221][ T5842] (syz-executor207,5842,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 102.587366][ T5842] JBD2: Ignoring recovery information on journal
[pid 5842] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5842] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5842] chdir("./file0") = 0
[pid 5842] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5842] exit_group(0) = ?
[pid 5842] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[ 102.606213][ T5842] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 102.618112][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./3/binderfs") = 0
umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./3/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./3") = 0
mkdir("./4", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 102.773091][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576190650) = 5845
./strace-static-x86_64: Process 5845 attached
[pid 5845] set_robust_list(0x555576190660, 24) = 0
[pid 5845] chdir("./4") = 0
[pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5845] setpgid(0, 0) = 0
[pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5845] write(3, "1000", 4) = 4
[pid 5845] close(3) = 0
[pid 5845] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5845] write(1, "executing program\n", 18) = 18
[pid 5845] memfd_create("syzkaller", 0) = 3
[pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5845] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5845] munmap(0x7fb404200000, 138412032) = 0
[pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5845] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5845] close(3) = 0
[pid 5845] close(4) = 0
[pid 5845] mkdir("./file0", 0777) = 0
[ 103.094572][ T5845] loop0: detected capacity change from 0 to 32768
[ 103.117206][ T5845] (syz-executor207,5845,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 103.131249][ T5845] (syz-executor207,5845,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[pid 5845] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5845] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5845] chdir("./file0") = 0
[pid 5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5845] exit_group(0) = ?
[pid 5845] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} ---
[ 103.149816][ T5845] JBD2: Ignoring recovery information on journal
[ 103.170736][ T5845] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 103.182032][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./4/binderfs") = 0
umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./4/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./4") = 0
mkdir("./5", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 103.352609][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached
, child_tidptr=0x555576190650) = 5848
[pid 5848] set_robust_list(0x555576190660, 24) = 0
[pid 5848] chdir("./5") = 0
[pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5848] setpgid(0, 0) = 0
[pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5848] write(3, "1000", 4) = 4
[pid 5848] close(3) = 0
[pid 5848] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5848] write(1, "executing program\n", 18) = 18
[pid 5848] memfd_create("syzkaller", 0) = 3
[pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5848] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5848] munmap(0x7fb404200000, 138412032) = 0
[pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5848] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5848] close(3) = 0
[pid 5848] close(4) = 0
[pid 5848] mkdir("./file0", 0777) = 0
[ 103.676373][ T5848] loop0: detected capacity change from 0 to 32768
[ 103.703368][ T5848] (syz-executor207,5848,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 103.717917][ T5848] (syz-executor207,5848,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 103.737856][ T5848] JBD2: Ignoring recovery information on journal
[ 103.759256][ T5848] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5848] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5848] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5848] chdir("./file0") = 0
[pid 5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5848] exit_group(0) = ?
[pid 5848] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} ---
[ 103.771132][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./5/binderfs") = 0
umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./5/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./5") = 0
mkdir("./6", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 103.893798][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5851 attached
[pid 5851] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5851
[pid 5851] <... set_robust_list resumed>) = 0
[pid 5851] chdir("./6") = 0
[pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5851] setpgid(0, 0) = 0
[pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5851] write(3, "1000", 4) = 4
[pid 5851] close(3) = 0
[pid 5851] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5851] write(1, "executing program\n", 18) = 18
[pid 5851] memfd_create("syzkaller", 0) = 3
[pid 5851] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5851] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5851] munmap(0x7fb404200000, 138412032) = 0
[pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5851] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5851] close(3) = 0
[pid 5851] close(4) = 0
[pid 5851] mkdir("./file0", 0777) = 0
[ 104.181599][ T5851] loop0: detected capacity change from 0 to 32768
[ 104.241213][ T5851] (syz-executor207,5851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 104.256165][ T5851] (syz-executor207,5851,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 104.274685][ T5851] JBD2: Ignoring recovery information on journal
[pid 5851] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5851] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5851] chdir("./file0") = 0
[pid 5851] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5851] exit_group(0) = ?
[pid 5851] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[ 104.293351][ T5851] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 104.304681][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./6/binderfs") = 0
umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./6/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./6") = 0
mkdir("./7", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 104.392938][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5854 attached
[pid 5854] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5854
[pid 5854] <... set_robust_list resumed>) = 0
[pid 5854] chdir("./7") = 0
[pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5854] setpgid(0, 0) = 0
[pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5854] write(3, "1000", 4) = 4
[pid 5854] close(3) = 0
[pid 5854] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5854] write(1, "executing program\n", 18) = 18
[pid 5854] memfd_create("syzkaller", 0) = 3
[pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5854] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5854] munmap(0x7fb404200000, 138412032) = 0
[pid 5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5854] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5854] close(3) = 0
[pid 5854] close(4) = 0
[pid 5854] mkdir("./file0", 0777) = 0
[ 104.683678][ T5854] loop0: detected capacity change from 0 to 32768
[ 104.715457][ T5854] (syz-executor207,5854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 104.729848][ T5854] (syz-executor207,5854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 104.749608][ T5854] JBD2: Ignoring recovery information on journal
[ 104.769957][ T5854] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5854] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5854] chdir("./file0") = 0
[pid 5854] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5854] exit_group(0) = ?
[pid 5854] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./7/binderfs") = 0
[ 104.781782][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./7/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./7") = 0
mkdir("./8", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 104.809987][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached
[pid 5857] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5857
[pid 5857] <... set_robust_list resumed>) = 0
[pid 5857] chdir("./8") = 0
[pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5857] setpgid(0, 0) = 0
[pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5857] write(3, "1000", 4) = 4
[pid 5857] close(3) = 0
[pid 5857] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5857] write(1, "executing program\n", 18) = 18
[pid 5857] memfd_create("syzkaller", 0) = 3
[pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5857] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5857] munmap(0x7fb404200000, 138412032) = 0
[pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5857] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5857] close(3) = 0
[pid 5857] close(4) = 0
[pid 5857] mkdir("./file0", 0777) = 0
[ 105.085320][ T5857] loop0: detected capacity change from 0 to 32768
[ 105.129747][ T5857] (syz-executor207,5857,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 105.143860][ T5857] (syz-executor207,5857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 105.162709][ T5857] JBD2: Ignoring recovery information on journal
[pid 5857] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5857] chdir("./file0") = 0
[pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 105.182122][ T5857] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 105.193791][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[pid 5857] exit_group(0) = ?
[pid 5857] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./8/binderfs") = 0
umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./8/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./8") = 0
mkdir("./9", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 105.356533][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5860 attached
, child_tidptr=0x555576190650) = 5860
[pid 5860] set_robust_list(0x555576190660, 24) = 0
[pid 5860] chdir("./9") = 0
[pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5860] setpgid(0, 0) = 0
[pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5860] write(3, "1000", 4) = 4
[pid 5860] close(3) = 0
[pid 5860] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5860] write(1, "executing program\n", 18executing program
) = 18
[pid 5860] memfd_create("syzkaller", 0) = 3
[pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5860] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5860] munmap(0x7fb404200000, 138412032) = 0
[pid 5860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5860] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5860] close(3) = 0
[pid 5860] close(4) = 0
[pid 5860] mkdir("./file0", 0777) = 0
[ 105.645573][ T5860] loop0: detected capacity change from 0 to 32768
[ 105.670894][ T5860] (syz-executor207,5860,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[pid 5860] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5860] chdir("./file0") = 0
[pid 5860] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5860] exit_group(0) = ?
[pid 5860] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./9/binderfs") = 0
[ 105.685105][ T5860] (syz-executor207,5860,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 105.703845][ T5860] JBD2: Ignoring recovery information on journal
[ 105.724875][ T5860] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 105.736134][ T2970] ocfs2: Finishing quota recovery on device (7,0) for slot 0
umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./9/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./9") = 0
mkdir("./10", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 105.765981][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5863 attached
, child_tidptr=0x555576190650) = 5863
[pid 5863] set_robust_list(0x555576190660, 24) = 0
[pid 5863] chdir("./10") = 0
[pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5863] setpgid(0, 0) = 0
[pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5863] write(3, "1000", 4) = 4
[pid 5863] close(3) = 0
[pid 5863] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5863] write(1, "executing program\n", 18executing program
) = 18
[pid 5863] memfd_create("syzkaller", 0) = 3
[pid 5863] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5863] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5863] munmap(0x7fb404200000, 138412032) = 0
[pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5863] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5863] close(3) = 0
[pid 5863] close(4) = 0
[pid 5863] mkdir("./file0", 0777) = 0
[ 106.070422][ T5863] loop0: detected capacity change from 0 to 32768
[ 106.107278][ T5863] (syz-executor207,5863,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 106.122131][ T5863] (syz-executor207,5863,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 106.141464][ T5863] JBD2: Ignoring recovery information on journal
[ 106.161307][ T5863] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5863] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5863] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5863] chdir("./file0") = 0
[pid 5863] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5863] exit_group(0) = ?
[pid 5863] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} ---
[ 106.173130][ T2970] ocfs2: Finishing quota recovery on device (7,0) for slot 0
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./10/binderfs") = 0
umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./10/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./10") = 0
mkdir("./11", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 106.354762][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached
, child_tidptr=0x555576190650) = 5866
[pid 5866] set_robust_list(0x555576190660, 24) = 0
[pid 5866] chdir("./11") = 0
[pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5866] setpgid(0, 0) = 0
[pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5866] write(3, "1000", 4) = 4
[pid 5866] close(3) = 0
[pid 5866] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5866] write(1, "executing program\n", 18) = 18
[pid 5866] memfd_create("syzkaller", 0) = 3
[pid 5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5866] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5866] munmap(0x7fb404200000, 138412032) = 0
[pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5866] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5866] close(3) = 0
[pid 5866] close(4) = 0
[pid 5866] mkdir("./file0", 0777) = 0
[ 106.669812][ T5866] loop0: detected capacity change from 0 to 32768
[ 106.703651][ T5866] (syz-executor207,5866,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 106.717968][ T5866] (syz-executor207,5866,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 106.736341][ T5866] JBD2: Ignoring recovery information on journal
[ 106.756588][ T5866] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5866] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5866] chdir("./file0") = 0
[pid 5866] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5866] exit_group(0) = ?
[pid 5866] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[ 106.770898][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./11/binderfs") = 0
umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./11/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./11") = 0
mkdir("./12", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 106.944964][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5869 attached
[pid 5869] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5869
[pid 5869] <... set_robust_list resumed>) = 0
[pid 5869] chdir("./12") = 0
[pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5869] setpgid(0, 0) = 0
[pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5869] write(3, "1000", 4) = 4
[pid 5869] close(3) = 0
[pid 5869] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5869] write(1, "executing program\n", 18) = 18
[pid 5869] memfd_create("syzkaller", 0) = 3
[pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5869] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5869] munmap(0x7fb404200000, 138412032) = 0
[pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5869] close(3) = 0
[pid 5869] close(4) = 0
[pid 5869] mkdir("./file0", 0777) = 0
[ 107.263309][ T5869] loop0: detected capacity change from 0 to 32768
[ 107.299414][ T5869] (syz-executor207,5869,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 107.314304][ T5869] (syz-executor207,5869,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 107.333214][ T5869] JBD2: Ignoring recovery information on journal
[ 107.352854][ T5869] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5869] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5869] chdir("./file0") = 0
[pid 5869] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5869] exit_group(0) = ?
[ 107.364415][ T2970] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[pid 5869] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} ---
umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./12/binderfs") = 0
umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./12/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./12") = 0
mkdir("./13", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 107.477667][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576190650) = 5872
./strace-static-x86_64: Process 5872 attached
[pid 5872] set_robust_list(0x555576190660, 24) = 0
[pid 5872] chdir("./13") = 0
[pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5872] setpgid(0, 0) = 0
[pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5872] write(3, "1000", 4) = 4
[pid 5872] close(3) = 0
[pid 5872] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5872] write(1, "executing program\n", 18executing program
) = 18
[pid 5872] memfd_create("syzkaller", 0) = 3
[pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5872] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5872] munmap(0x7fb404200000, 138412032) = 0
[pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5872] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5872] close(3) = 0
[pid 5872] close(4) = 0
[pid 5872] mkdir("./file0", 0777) = 0
[ 107.755310][ T5872] loop0: detected capacity change from 0 to 32768
[ 107.792609][ T5872] (syz-executor207,5872,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 107.812647][ T5872] (syz-executor207,5872,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 107.840682][ T5872] JBD2: Ignoring recovery information on journal
[pid 5872] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5872] chdir("./file0") = 0
[pid 5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5872] exit_group(0) = ?
[pid 5872] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[ 107.860845][ T5872] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 107.872267][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./13/binderfs") = 0
umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./13/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./13") = 0
mkdir("./14", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 107.991641][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5875 attached
[pid 5875] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5875
[pid 5875] <... set_robust_list resumed>) = 0
[pid 5875] chdir("./14") = 0
[pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5875] setpgid(0, 0) = 0
[pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5875] write(3, "1000", 4) = 4
[pid 5875] close(3) = 0
[pid 5875] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5875] write(1, "executing program\n", 18) = 18
[pid 5875] memfd_create("syzkaller", 0) = 3
[pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5875] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5875] munmap(0x7fb404200000, 138412032) = 0
[pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5875] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5875] close(3) = 0
[pid 5875] close(4) = 0
[pid 5875] mkdir("./file0", 0777) = 0
[ 108.291440][ T5875] loop0: detected capacity change from 0 to 32768
[ 108.307868][ T5875] (syz-executor207,5875,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 108.321989][ T5875] (syz-executor207,5875,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[pid 5875] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5875] chdir("./file0") = 0
[pid 5875] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5875] exit_group(0) = ?
[ 108.340349][ T5875] JBD2: Ignoring recovery information on journal
[ 108.360882][ T5875] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 108.372258][ T12] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[pid 5875] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=15 /* 0.15 s */} ---
umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./14/binderfs") = 0
umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./14/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./14") = 0
mkdir("./15", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 108.574501][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5878 attached
[pid 5878] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5878
[pid 5878] <... set_robust_list resumed>) = 0
[pid 5878] chdir("./15") = 0
[pid 5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5878] setpgid(0, 0) = 0
[pid 5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5878] write(3, "1000", 4) = 4
[pid 5878] close(3) = 0
[pid 5878] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5878] write(1, "executing program\n", 18) = 18
[pid 5878] memfd_create("syzkaller", 0) = 3
[pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5878] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5878] munmap(0x7fb404200000, 138412032) = 0
[pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5878] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5878] close(3) = 0
[pid 5878] close(4) = 0
[pid 5878] mkdir("./file0", 0777) = 0
[ 108.888321][ T5878] loop0: detected capacity change from 0 to 32768
[ 108.930721][ T5878] (syz-executor207,5878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 108.945520][ T5878] (syz-executor207,5878,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 108.964446][ T5878] JBD2: Ignoring recovery information on journal
[pid 5878] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5878] chdir("./file0") = 0
[pid 5878] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5878] exit_group(0) = ?
[pid 5878] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=16 /* 0.16 s */} ---
umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./15/binderfs") = 0
[ 108.982801][ T5878] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 108.994515][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./15/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./15") = 0
mkdir("./16", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 109.032048][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5881 attached
[pid 5881] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5881
[pid 5881] <... set_robust_list resumed>) = 0
[pid 5881] chdir("./16") = 0
[pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5881] setpgid(0, 0) = 0
[pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5881] write(3, "1000", 4) = 4
[pid 5881] close(3) = 0
[pid 5881] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5881] write(1, "executing program\n", 18) = 18
[pid 5881] memfd_create("syzkaller", 0) = 3
[pid 5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5881] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5881] munmap(0x7fb404200000, 138412032) = 0
[pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5881] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5881] close(3) = 0
[pid 5881] close(4) = 0
[pid 5881] mkdir("./file0", 0777) = 0
[ 109.360369][ T5881] loop0: detected capacity change from 0 to 32768
[ 109.384758][ T5881] (syz-executor207,5881,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[pid 5881] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5881] chdir("./file0") = 0
[pid 5881] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5881] exit_group(0) = ?
[pid 5881] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./16/binderfs") = 0
[ 109.398910][ T5881] (syz-executor207,5881,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 109.418564][ T5881] JBD2: Ignoring recovery information on journal
[ 109.439592][ T5881] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 109.450867][ T3536] ocfs2: Finishing quota recovery on device (7,0) for slot 0
umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./16/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./16") = 0
mkdir("./17", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 109.479059][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached
[pid 5884] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5884
[pid 5884] <... set_robust_list resumed>) = 0
[pid 5884] chdir("./17") = 0
[pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5884] setpgid(0, 0) = 0
[pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5884] write(3, "1000", 4) = 4
[pid 5884] close(3) = 0
[pid 5884] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5884] write(1, "executing program\n", 18) = 18
[pid 5884] memfd_create("syzkaller", 0) = 3
[pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5884] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5884] munmap(0x7fb404200000, 138412032) = 0
[pid 5884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5884] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5884] close(3) = 0
[pid 5884] close(4) = 0
[pid 5884] mkdir("./file0", 0777) = 0
[ 109.785087][ T5884] loop0: detected capacity change from 0 to 32768
[ 109.821214][ T5884] (syz-executor207,5884,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 109.835907][ T5884] (syz-executor207,5884,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 109.854826][ T5884] JBD2: Ignoring recovery information on journal
[ 109.875240][ T5884] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[pid 5884] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5884] chdir("./file0") = 0
[pid 5884] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5884] exit_group(0) = ?
[pid 5884] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[ 109.886560][ T53] ocfs2: Finishing quota recovery on device (7,0) for slot 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./17/binderfs") = 0
umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./17/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./17") = 0
mkdir("./18", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
[ 110.020498][ T5832] ocfs2: Unmounting device (7,0) on (node local)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached
[pid 5887] set_robust_list(0x555576190660, 24
[pid 5832] <... clone resumed>, child_tidptr=0x555576190650) = 5887
[pid 5887] <... set_robust_list resumed>) = 0
[pid 5887] chdir("./18") = 0
[pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5887] setpgid(0, 0) = 0
[pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5887] write(3, "1000", 4) = 4
[pid 5887] close(3) = 0
[pid 5887] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5887] write(1, "executing program\n", 18) = 18
[pid 5887] memfd_create("syzkaller", 0) = 3
[pid 5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb404200000
[pid 5887] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5887] munmap(0x7fb404200000, 138412032) = 0
[pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5887] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5887] close(3) = 0
[pid 5887] close(4) = 0
[pid 5887] mkdir("./file0", 0777) = 0
[ 110.323458][ T5887] loop0: detected capacity change from 0 to 32768
[ 110.346778][ T5887] (syz-executor207,5887,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[pid 5887] mount("/dev/loop0", "./file0", "ocfs2", MS_RELATIME, "usrquota,coherency=full,errors=continue,heartbeat=none,errors=continue,nointr,grpquota,") = 0
[pid 5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5887] chdir("./file0") = 0
[pid 5887] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 110.360946][ T5887] (syz-executor207,5887,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 110.380871][ T5887] JBD2: Ignoring recovery information on journal
[ 110.400069][ T5887] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 110.411762][ T53] ocfs2: Finishing quota recovery on device (7,0) for slot 0
[pid 5887] exit_group(0) = ?
[pid 5887] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555761916f0 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./18/binderfs") = 0
umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555576199730 /* 2 entries */, 32768) = 48
getdents64(4, 0x555576199730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./18/file0") = 0
getdents64(3, 0x5555761916f0 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./18") = 0
mkdir("./19", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3