./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3911296290 <...> Warning: Permanently added '10.128.1.130' (ECDSA) to the list of known hosts. execve("./syz-executor3911296290", ["./syz-executor3911296290"], 0x7ffd92d4e960 /* 10 vars */) = 0 brk(NULL) = 0x555555df9000 brk(0x555555df9c40) = 0x555555df9c40 arch_prctl(ARCH_SET_FS, 0x555555df9300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555555df95d0) = 4996 set_robust_list(0x555555df95e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f15b4153490, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f15b4153b60}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f15b4153530, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f15b4153b60}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3911296290", 4096) = 28 brk(0x555555e1ac40) = 0x555555e1ac40 brk(0x555555e1b000) = 0x555555e1b000 mprotect(0x7f15b4215000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 4996 mkdir("./syzkaller.QLAjJX", 0700) = 0 chmod("./syzkaller.QLAjJX", 0777) = 0 chdir("./syzkaller.QLAjJX") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 4997 ./strace-static-x86_64: Process 4997 attached [pid 4997] set_robust_list(0x555555df95e0, 24) = 0 [pid 4997] chdir("./0") = 0 [pid 4997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] setpgid(0, 0) = 0 [pid 4997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4997] write(3, "1000", 4) = 4 [pid 4997] close(3) = 0 [pid 4997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 4997] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4997] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4999 attached , parent_tid=[4999], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 4999 [pid 4997] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4999] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 4999] memfd_create("syzkaller", 0) = 3 [pid 4999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 4999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 4999] munmap(0x7f15abd22000, 524288) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4999] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4999] close(3) = 0 [pid 4999] mkdir("./bus", 0777) = 0 syzkaller login: [ 65.429942][ T4999] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4999 'syz-executor391' [ 65.454034][ T4999] loop0: detected capacity change from 0 to 1024 [ 65.464529][ T4999] ======================================================= [ 65.464529][ T4999] WARNING: The mand mount option has been deprecated and [pid 4999] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 4999] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] chdir("./bus") = 0 [pid 4999] ioctl(4, LOOP_CLR_FD) = 0 [pid 4999] close(4) = 0 [pid 4999] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4999] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4997] <... futex resumed>) = 0 [pid 4997] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 4997] <... futex resumed>) = 1 [pid 4999] rename("./file1", "./bus" [pid 4997] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4999] <... rename resumed>) = 0 [pid 4997] <... mmap resumed>) = 0x7f15abd81000 [ 65.464529][ T4999] and is ignored by this kernel. Remove the mand [ 65.464529][ T4999] option from the mount to silence this warning. [ 65.464529][ T4999] ======================================================= [pid 4997] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4997] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5000], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5000 [pid 4997] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5000 attached [pid 5000] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5000] creat("./file1", 000) = 4 [pid 5000] creat("./file1", 000) = 5 [pid 5000] creat("./file1", 000) = 6 [pid 5000] creat("./file1", 000) = 7 [pid 5000] creat("./file1", 000) = 8 [pid 5000] creat("./file1", 000) = 9 [pid 5000] creat("./file1", 000) = 10 [pid 5000] creat("./file1", 000) = 11 [pid 5000] creat("./file1", 000) = 12 [pid 5000] creat("./file1", 000) = 13 [pid 5000] creat("./file1", 000) = 14 [pid 5000] creat("./file1", 000) = 15 [pid 5000] creat("./file1", 000) = 16 [pid 5000] creat("./file1", 000) = 17 [pid 5000] creat("./file1", 000) = 18 [pid 5000] creat("./file1", 000) = 19 [pid 5000] creat("./file1", 000) = 20 [pid 5000] creat("./file1", 000) = 21 [pid 5000] creat("./file1", 000) = 22 [pid 5000] creat("./file1", 000) = 23 [pid 4997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] creat("./file1", 000) = 24 [pid 5000] creat("./file1", 000) = 25 [pid 5000] creat("./file1", 000) = 26 [pid 5000] creat("./file1", 000) = 27 [pid 5000] creat("./file1", 000) = 28 [pid 5000] creat("./file1", 000) = 29 [pid 5000] creat("./file1", 000) = 30 [pid 5000] creat("./file1", 000) = 31 [pid 5000] creat("./file1", 000) = 32 [pid 5000] creat("./file1", 000) = 33 [pid 5000] creat("./file1", 000) = 34 [pid 5000] creat("./file1", 000) = 35 [pid 5000] creat("./file1", 000) = 36 [pid 5000] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] exit_group(0 [pid 4999] <... futex resumed>) = ? [pid 4997] <... exit_group resumed>) = ? [pid 5000] +++ exited with 0 +++ [pid 4999] +++ exited with 0 +++ [pid 4997] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4997, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/bus") = 0 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5001 ./strace-static-x86_64: Process 5001 attached [pid 5001] set_robust_list(0x555555df95e0, 24) = 0 [pid 5001] chdir("./1") = 0 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setpgid(0, 0) = 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1000", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5001] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5001] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5002 attached , parent_tid=[5002], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5002 [pid 5001] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5002] memfd_create("syzkaller", 0) = 3 [pid 5002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 65.624886][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5002] munmap(0x7f15abd22000, 524288) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5002] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5002] close(3) = 0 [pid 5002] mkdir("./bus", 0777) = 0 [pid 5002] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5002] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] chdir("./bus") = 0 [pid 5002] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] close(4) = 0 [pid 5002] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5001] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] rename("./file1", "./bus" [pid 5001] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5001] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5001] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5003], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5003 [pid 5002] <... rename resumed>) = 0 [pid 5001] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] rename("./file1", "./bus" [pid 5001] <... futex resumed>) = 0 [pid 5001] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5003 attached [pid 5003] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5002] rename("./file1", "./bus" [pid 5003] creat("./file1", 000 [pid 5002] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] <... creat resumed>) = 4 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 5 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 6 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 7 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 8 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000 [pid 5002] rename("./file1", "./bus" [pid 5003] <... creat resumed>) = 9 [pid 5002] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 10 [pid 5003] creat("./file1", 000) = 11 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 12 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] creat("./file1", 000) = 13 [pid 5002] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5002] rename("./file1", "./bus" [pid 5003] creat("./file1", 000 [pid 5002] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] <... creat resumed>) = 14 [pid 5002] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] creat("./file1", 000 [pid 5002] <... futex resumed>) = 0 [pid 5003] <... creat resumed>) = 15 [pid 5002] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5003] creat("./file1", 000) = 16 [pid 5003] creat("./file1", 000) = 17 [pid 5003] creat("./file1", 000) = 18 [pid 5003] creat("./file1", 000) = 19 [pid 5003] creat("./file1", 000) = 20 [pid 5003] creat("./file1", 000) = 21 [pid 5003] creat("./file1", 000) = 22 [pid 5003] creat("./file1", 000) = 23 [pid 5003] creat("./file1", 000) = 24 [pid 5003] creat("./file1", 000) = 25 [pid 5003] creat("./file1", 000) = 26 [pid 5003] creat("./file1", 000) = 27 [ 65.691986][ T5002] loop0: detected capacity change from 0 to 1024 [pid 5003] creat("./file1", 000) = 28 [pid 5003] creat("./file1", 000) = 29 [pid 5003] creat("./file1", 000) = 30 [pid 5003] creat("./file1", 000) = 31 [pid 5003] creat("./file1", 000) = 32 [pid 5003] creat("./file1", 000) = 33 [pid 5003] creat("./file1", 000) = 34 [pid 5003] creat("./file1", 000) = 35 [pid 5003] creat("./file1", 000) = 36 [pid 5003] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5003] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] exit_group(0 [pid 5002] <... futex resumed>) = ? [pid 5001] <... exit_group resumed>) = ? [pid 5002] +++ exited with 0 +++ [pid 5003] <... futex resumed>) = ? [pid 5003] +++ exited with 0 +++ [pid 5001] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/bus") = 0 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5004 attached [pid 5004] set_robust_list(0x555555df95e0, 24) = 0 [pid 5004] chdir("./2" [pid 4996] <... clone resumed>, child_tidptr=0x555555df95d0) = 5004 [pid 5004] <... chdir resumed>) = 0 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5004] setpgid(0, 0) = 0 [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5004] write(3, "1000", 4) = 4 [pid 5004] close(3) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5004] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5004] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5004] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5005], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5005 [pid 5004] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5005 attached [pid 5005] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5005] memfd_create("syzkaller", 0) = 3 [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 65.764424][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5005] munmap(0x7f15abd22000, 524288) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5005] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5005] close(3) = 0 [pid 5005] mkdir("./bus", 0777) = 0 [pid 5005] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5005] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5005] chdir("./bus") = 0 [pid 5005] ioctl(4, LOOP_CLR_FD) = 0 [pid 5005] close(4) = 0 [pid 5005] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5004] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5004] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5004] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5006], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5006 [pid 5004] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5005] <... futex resumed>) = 1 [pid 5005] rename("./file1", "./bus") = 0 [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5006 attached [pid 5006] set_robust_list(0x7f15abda19e0, 24 [pid 5005] rename("./file1", "./bus" [pid 5006] <... set_robust_list resumed>) = 0 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] creat("./file1", 000 [pid 5005] rename("./file1", "./bus" [pid 5006] <... creat resumed>) = 4 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] creat("./file1", 000) = 5 [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] creat("./file1", 000) = 6 [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] creat("./file1", 000) = 7 [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 8 [pid 5005] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] creat("./file1", 000) = 9 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 10 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 11 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 12 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 13 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 14 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 15 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 65.837154][ T5005] loop0: detected capacity change from 0 to 1024 [pid 5006] <... creat resumed>) = 16 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 17 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 18 [pid 5005] rename("./file1", "./bus" [pid 5006] creat("./file1", 000 [pid 5005] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] <... creat resumed>) = 19 [pid 5005] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] creat("./file1", 000 [pid 5005] <... futex resumed>) = 0 [pid 5006] <... creat resumed>) = 20 [pid 5005] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] creat("./file1", 000) = 21 [pid 5006] creat("./file1", 000) = 22 [pid 5006] creat("./file1", 000) = 23 [pid 5006] creat("./file1", 000) = 24 [pid 5006] creat("./file1", 000) = 25 [pid 5006] creat("./file1", 000) = 26 [pid 5006] creat("./file1", 000) = 27 [pid 5006] creat("./file1", 000) = 28 [pid 5006] creat("./file1", 000) = 29 [pid 5006] creat("./file1", 000) = 30 [pid 5006] creat("./file1", 000) = 31 [pid 5006] creat("./file1", 000) = 32 [pid 5006] creat("./file1", 000) = 33 [pid 5006] creat("./file1", 000) = 34 [pid 5006] creat("./file1", 000) = 35 [pid 5006] creat("./file1", 000) = 36 [pid 5006] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... futex resumed>) = 0 [pid 5004] exit_group(0 [pid 5005] <... futex resumed>) = ? [pid 5004] <... exit_group resumed>) = ? [pid 5005] +++ exited with 0 +++ [pid 5006] <... futex resumed>) = ? [pid 5006] +++ exited with 0 +++ [pid 5004] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/bus") = 0 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5007 ./strace-static-x86_64: Process 5007 attached [pid 5007] set_robust_list(0x555555df95e0, 24) = 0 [pid 5007] chdir("./3") = 0 [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5007] setpgid(0, 0) = 0 [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5007] write(3, "1000", 4) = 4 [pid 5007] close(3) = 0 [ 65.926774][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5007] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5007] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5007] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5007] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5008], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5008 [pid 5007] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5008 attached [pid 5008] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5008] memfd_create("syzkaller", 0) = 3 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5008] munmap(0x7f15abd22000, 524288) = 0 [pid 5008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5008] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5008] close(3) = 0 [pid 5008] mkdir("./bus", 0777) = 0 [pid 5008] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5008] chdir("./bus") = 0 [pid 5008] ioctl(4, LOOP_CLR_FD) = 0 [pid 5008] close(4) = 0 [pid 5008] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5007] <... futex resumed>) = 0 [pid 5007] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5007] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5007] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5009], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5009 [pid 5007] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] <... futex resumed>) = 1 [pid 5007] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5008] rename("./file1", "./bus") = 0 [pid 5008] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus"./strace-static-x86_64: Process 5009 attached ) = -1 ENOENT (No such file or directory) [pid 5009] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5008] rename("./file1", "./bus" [pid 5009] creat("./file1", 000 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 4 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 5 [pid 5009] creat("./file1", 000 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] <... creat resumed>) = 6 [pid 5008] rename("./file1", "./bus" [pid 5009] creat("./file1", 000 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] <... creat resumed>) = 7 [pid 5008] rename("./file1", "./bus" [pid 5009] creat("./file1", 000) = 8 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 9 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 10 [ 65.999234][ T5008] loop0: detected capacity change from 0 to 1024 [pid 5009] creat("./file1", 000 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 11 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 12 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 13 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 14 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 15 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 16 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 17 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 18 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 19 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 20 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 21 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 22 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 23 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 24 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 25 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 26 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 27 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 28 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] creat("./file1", 000 [pid 5008] rename("./file1", "./bus" [pid 5009] <... creat resumed>) = 29 [pid 5008] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5008] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] creat("./file1", 000) = 30 [pid 5009] creat("./file1", 000) = 31 [pid 5009] creat("./file1", 000) = 32 [pid 5009] creat("./file1", 000) = 33 [pid 5009] creat("./file1", 000) = 34 [pid 5009] creat("./file1", 000) = 35 [pid 5009] creat("./file1", 000) = 36 [pid 5009] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5007] <... futex resumed>) = 0 [pid 5009] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] exit_group(0) = ? [pid 5008] <... futex resumed>) = ? [pid 5009] <... futex resumed>) = ? [pid 5008] +++ exited with 0 +++ [pid 5009] +++ exited with 0 +++ [pid 5007] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/bus") = 0 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5010 ./strace-static-x86_64: Process 5010 attached [pid 5010] set_robust_list(0x555555df95e0, 24) = 0 [pid 5010] chdir("./4") = 0 [pid 5010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5010] setpgid(0, 0) = 0 [pid 5010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5010] write(3, "1000", 4) = 4 [pid 5010] close(3) = 0 [pid 5010] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5010] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5010] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5010] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5011 attached , parent_tid=[5011], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5011 [pid 5010] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] set_robust_list(0x7f15b41429e0, 24 [pid 5010] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] <... set_robust_list resumed>) = 0 [ 66.093955][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5011] memfd_create("syzkaller", 0) = 3 [pid 5011] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5011] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5011] munmap(0x7f15abd22000, 524288) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5011] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5011] close(3) = 0 [pid 5011] mkdir("./bus", 0777) = 0 [pid 5011] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5011] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5011] chdir("./bus") = 0 [pid 5011] ioctl(4, LOOP_CLR_FD) = 0 [pid 5011] close(4) = 0 [pid 5011] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5010] <... futex resumed>) = 0 [pid 5010] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5010] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5010] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5010] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5010] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5012], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5012 [pid 5010] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5010] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... futex resumed>) = 1 [pid 5011] rename("./file1", "./bus") = 0 [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus"./strace-static-x86_64: Process 5012 attached ) = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus" [pid 5012] set_robust_list(0x7f15abda19e0, 24 [pid 5011] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5011] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] <... set_robust_list resumed>) = 0 [pid 5012] creat("./file1", 000) = 4 [pid 5012] creat("./file1", 000) = 5 [pid 5012] creat("./file1", 000) = 6 [pid 5012] creat("./file1", 000) = 7 [pid 5012] creat("./file1", 000) = 8 [pid 5012] creat("./file1", 000) = 9 [pid 5012] creat("./file1", 000) = 10 [pid 5012] creat("./file1", 000) = 11 [pid 5012] creat("./file1", 000) = 12 [pid 5012] creat("./file1", 000) = 13 [pid 5012] creat("./file1", 000) = 14 [pid 5012] creat("./file1", 000) = 15 [pid 5012] creat("./file1", 000) = 16 [pid 5012] creat("./file1", 000) = 17 [ 66.166934][ T5011] loop0: detected capacity change from 0 to 1024 [pid 5012] creat("./file1", 000) = 18 [pid 5012] creat("./file1", 000 [pid 5010] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5012] <... creat resumed>) = 19 [pid 5012] creat("./file1", 000) = 20 [pid 5012] creat("./file1", 000) = 21 [pid 5012] creat("./file1", 000) = 22 [pid 5012] creat("./file1", 000) = 23 [pid 5012] creat("./file1", 000) = 24 [pid 5012] creat("./file1", 000) = 25 [pid 5012] creat("./file1", 000) = 26 [pid 5012] creat("./file1", 000) = 27 [pid 5012] creat("./file1", 000) = 28 [pid 5012] creat("./file1", 000) = 29 [pid 5012] creat("./file1", 000) = 30 [pid 5012] creat("./file1", 000) = 31 [pid 5012] creat("./file1", 000) = 32 [pid 5012] creat("./file1", 000) = 33 [pid 5012] creat("./file1", 000) = 34 [pid 5012] creat("./file1", 000) = 35 [pid 5012] creat("./file1", 000) = 36 [pid 5012] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5012] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5010] exit_group(0) = ? [pid 5011] <... futex resumed>) = ? [pid 5011] +++ exited with 0 +++ [pid 5012] <... futex resumed>) = ? [pid 5012] +++ exited with 0 +++ [pid 5010] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5010, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/bus") = 0 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5013 ./strace-static-x86_64: Process 5013 attached [pid 5013] set_robust_list(0x555555df95e0, 24) = 0 [pid 5013] chdir("./5") = 0 [pid 5013] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5013] setpgid(0, 0) = 0 [pid 5013] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5013] write(3, "1000", 4) = 4 [pid 5013] close(3) = 0 [pid 5013] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5013] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5013] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5013] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5014 attached , parent_tid=[5014], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5014 [pid 5013] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 66.291444][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5013] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5014] memfd_create("syzkaller", 0) = 3 [pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5014] munmap(0x7f15abd22000, 524288) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5014] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5014] close(3) = 0 [pid 5014] mkdir("./bus", 0777) = 0 [pid 5014] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5014] chdir("./bus") = 0 [pid 5014] ioctl(4, LOOP_CLR_FD) = 0 [pid 5014] close(4) = 0 [pid 5014] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... futex resumed>) = 0 [pid 5013] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5013] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5013] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5013] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5013] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5015], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5015 [pid 5013] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5013] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... futex resumed>) = 1 [pid 5014] rename("./file1", "./bus") = 0 [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus"./strace-static-x86_64: Process 5015 attached ) = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus" [pid 5015] set_robust_list(0x7f15abda19e0, 24 [pid 5014] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus" [pid 5015] <... set_robust_list resumed>) = 0 [pid 5014] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus" [pid 5015] creat("./file1", 000 [pid 5014] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5014] rename("./file1", "./bus" [pid 5015] <... creat resumed>) = 4 [pid 5014] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5014] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5014] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5015] creat("./file1", 000) = 5 [pid 5015] creat("./file1", 000) = 6 [pid 5015] creat("./file1", 000) = 7 [pid 5015] creat("./file1", 000) = 8 [pid 5015] creat("./file1", 000) = 9 [pid 5015] creat("./file1", 000) = 10 [pid 5015] creat("./file1", 000) = 11 [pid 5015] creat("./file1", 000) = 12 [pid 5015] creat("./file1", 000) = 13 [ 66.364496][ T5014] loop0: detected capacity change from 0 to 1024 [pid 5015] creat("./file1", 000) = 14 [pid 5015] creat("./file1", 000) = 15 [pid 5015] creat("./file1", 000) = 16 [pid 5015] creat("./file1", 000) = 17 [pid 5015] creat("./file1", 000) = 18 [pid 5015] creat("./file1", 000) = 19 [pid 5015] creat("./file1", 000) = 20 [pid 5015] creat("./file1", 000) = 21 [pid 5015] creat("./file1", 000) = 22 [pid 5015] creat("./file1", 000) = 23 [pid 5015] creat("./file1", 000) = 24 [pid 5015] creat("./file1", 000) = 25 [pid 5015] creat("./file1", 000) = 26 [pid 5015] creat("./file1", 000) = 27 [pid 5015] creat("./file1", 000) = 28 [pid 5015] creat("./file1", 000) = 29 [pid 5015] creat("./file1", 000 [pid 5013] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5015] <... creat resumed>) = 30 [pid 5015] creat("./file1", 000) = 31 [pid 5015] creat("./file1", 000) = 32 [pid 5015] creat("./file1", 000) = 33 [pid 5015] creat("./file1", 000) = 34 [pid 5015] creat("./file1", 000) = 35 [pid 5015] creat("./file1", 000) = 36 [pid 5015] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5015] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5013] exit_group(0 [pid 5015] <... futex resumed>) = ? [pid 5014] <... futex resumed>) = ? [pid 5013] <... exit_group resumed>) = ? [pid 5015] +++ exited with 0 +++ [pid 5014] +++ exited with 0 +++ [pid 5013] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5013, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/bus") = 0 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5016 ./strace-static-x86_64: Process 5016 attached [pid 5016] set_robust_list(0x555555df95e0, 24) = 0 [pid 5016] chdir("./6") = 0 [pid 5016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] setpgid(0, 0) = 0 [pid 5016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5016] write(3, "1000", 4) = 4 [pid 5016] close(3) = 0 [pid 5016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5016] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5016] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5016] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5017], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5017 ./strace-static-x86_64: Process 5017 attached [pid 5017] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5017] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5016] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5017] <... futex resumed>) = 0 [pid 5016] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5017] memfd_create("syzkaller", 0) = 3 [pid 5017] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 66.458597][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5017] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5017] munmap(0x7f15abd22000, 524288) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5017] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5017] close(3) = 0 [pid 5017] mkdir("./bus", 0777) = 0 [pid 5017] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5017] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5017] chdir("./bus") = 0 [pid 5017] ioctl(4, LOOP_CLR_FD) = 0 [pid 5017] close(4) = 0 [pid 5017] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5016] <... futex resumed>) = 0 [pid 5016] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5016] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5016] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5016] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5017] <... futex resumed>) = 1 [pid 5016] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5018], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5018 [pid 5016] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5016] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5017] rename("./file1", "./bus") = 0 [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus"./strace-static-x86_64: Process 5018 attached ) = -1 ENOENT (No such file or directory) [pid 5018] set_robust_list(0x7f15abda19e0, 24 [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... set_robust_list resumed>) = 0 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 4 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 5 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 6 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] <... creat resumed>) = 7 [pid 5017] rename("./file1", "./bus" [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] <... creat resumed>) = 8 [pid 5017] rename("./file1", "./bus" [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] <... creat resumed>) = 9 [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000) = 10 [pid 5017] rename("./file1", "./bus" [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] <... creat resumed>) = 11 [pid 5017] rename("./file1", "./bus" [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 12 [ 66.524374][ T5017] loop0: detected capacity change from 0 to 1024 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 13 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 14 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] <... creat resumed>) = 15 [pid 5017] rename("./file1", "./bus" [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5018] <... creat resumed>) = 16 [pid 5017] rename("./file1", "./bus" [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 17 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 18 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 19 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 20 [pid 5018] creat("./file1", 000 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 21 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 22 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 23 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] rename("./file1", "./bus" [pid 5018] <... creat resumed>) = 24 [pid 5017] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5018] creat("./file1", 000 [pid 5017] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5017] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5018] <... creat resumed>) = 25 [pid 5018] creat("./file1", 000) = 26 [pid 5018] creat("./file1", 000) = 27 [pid 5018] creat("./file1", 000) = 28 [pid 5018] creat("./file1", 000) = 29 [pid 5018] creat("./file1", 000) = 30 [pid 5018] creat("./file1", 000) = 31 [pid 5018] creat("./file1", 000) = 32 [pid 5018] creat("./file1", 000) = 33 [pid 5018] creat("./file1", 000) = 34 [pid 5018] creat("./file1", 000) = 35 [pid 5018] creat("./file1", 000) = 36 [pid 5018] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5016] <... futex resumed>) = 0 [pid 5018] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5016] exit_group(0) = ? [pid 5018] <... futex resumed>) = ? [pid 5017] <... futex resumed>) = ? [pid 5017] +++ exited with 0 +++ [pid 5018] +++ exited with 0 +++ [pid 5016] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5016, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/bus") = 0 umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5019 ./strace-static-x86_64: Process 5019 attached [pid 5019] set_robust_list(0x555555df95e0, 24) = 0 [pid 5019] chdir("./7") = 0 [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5019] setpgid(0, 0) = 0 [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5019] write(3, "1000", 4) = 4 [pid 5019] close(3) = 0 [pid 5019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5019] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5019] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5019] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5020 attached , parent_tid=[5020], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5020 [pid 5019] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5019] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5020] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5020] memfd_create("syzkaller", 0) = 3 [pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 66.618472][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5020] munmap(0x7f15abd22000, 524288) = 0 [pid 5020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5020] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5020] close(3) = 0 [pid 5020] mkdir("./bus", 0777) = 0 [pid 5020] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5020] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5020] chdir("./bus") = 0 [pid 5020] ioctl(4, LOOP_CLR_FD) = 0 [pid 5020] close(4) = 0 [pid 5020] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] <... futex resumed>) = 0 [pid 5019] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5019] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5019] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5019] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5021], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5021 [pid 5019] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5019] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5020] <... futex resumed>) = 1 [pid 5020] rename("./file1", "./bus") = 0 [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus"./strace-static-x86_64: Process 5021 attached ) = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5020] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5021] set_robust_list(0x7f15abda19e0, 24 [pid 5020] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5021] <... set_robust_list resumed>) = 0 [pid 5020] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5021] creat("./file1", 000) = 4 [pid 5021] creat("./file1", 000) = 5 [pid 5021] creat("./file1", 000) = 6 [pid 5021] creat("./file1", 000) = 7 [pid 5021] creat("./file1", 000) = 8 [pid 5021] creat("./file1", 000) = 9 [pid 5021] creat("./file1", 000) = 10 [pid 5021] creat("./file1", 000) = 11 [pid 5021] creat("./file1", 000) = 12 [pid 5021] creat("./file1", 000) = 13 [pid 5021] creat("./file1", 000) = 14 [pid 5021] creat("./file1", 000) = 15 [pid 5021] creat("./file1", 000) = 16 [pid 5021] creat("./file1", 000) = 17 [pid 5021] creat("./file1", 000) = 18 [pid 5021] creat("./file1", 000) = 19 [pid 5021] creat("./file1", 000) = 20 [ 66.672511][ T5020] loop0: detected capacity change from 0 to 1024 [pid 5021] creat("./file1", 000) = 21 [pid 5021] creat("./file1", 000) = 22 [pid 5021] creat("./file1", 000) = 23 [pid 5021] creat("./file1", 000) = 24 [pid 5021] creat("./file1", 000) = 25 [pid 5021] creat("./file1", 000) = 26 [pid 5021] creat("./file1", 000) = 27 [pid 5021] creat("./file1", 000) = 28 [pid 5021] creat("./file1", 000) = 29 [pid 5021] creat("./file1", 000) = 30 [pid 5021] creat("./file1", 000 [pid 5019] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5019] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5021] <... creat resumed>) = 31 [pid 5019] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5021] creat("./file1", 000) = 32 [pid 5021] creat("./file1", 000) = 33 [pid 5021] creat("./file1", 000) = 34 [pid 5021] creat("./file1", 000) = 35 [pid 5021] creat("./file1", 000) = 36 [pid 5021] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5021] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5019] exit_group(0 [pid 5021] <... futex resumed>) = ? [pid 5020] <... futex resumed>) = ? [pid 5019] <... exit_group resumed>) = ? [pid 5021] +++ exited with 0 +++ [pid 5020] +++ exited with 0 +++ [pid 5019] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5019, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/bus") = 0 umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5022 ./strace-static-x86_64: Process 5022 attached [pid 5022] set_robust_list(0x555555df95e0, 24) = 0 [pid 5022] chdir("./8") = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5022] setpgid(0, 0) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 66.756424][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5022] write(3, "1000", 4) = 4 [pid 5022] close(3) = 0 [pid 5022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5022] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5022] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5022] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5023], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5023 ./strace-static-x86_64: Process 5023 attached [pid 5023] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5023] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5022] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5023] <... futex resumed>) = 0 [pid 5022] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5023] memfd_create("syzkaller", 0) = 3 [pid 5023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5023] munmap(0x7f15abd22000, 524288) = 0 [pid 5023] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5023] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5023] close(3) = 0 [pid 5023] mkdir("./bus", 0777) = 0 [pid 5023] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5023] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5023] chdir("./bus") = 0 [pid 5023] ioctl(4, LOOP_CLR_FD) = 0 [pid 5023] close(4) = 0 [pid 5023] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5022] <... futex resumed>) = 0 [pid 5022] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5022] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5022] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5022] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5024], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5024 [pid 5022] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5022] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5023] <... futex resumed>) = 1 [pid 5023] rename("./file1", "./bus") = 0 [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5024 attached [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus" [pid 5024] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 4 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] <... creat resumed>) = 5 [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 6 [pid 5024] creat("./file1", 000) = 7 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 8 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] <... creat resumed>) = 9 [pid 5023] rename("./file1", "./bus" [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] <... creat resumed>) = 10 [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 11 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] <... creat resumed>) = 12 [ 66.839467][ T5023] loop0: detected capacity change from 0 to 1024 [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 13 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] <... creat resumed>) = 14 [pid 5023] rename("./file1", "./bus" [pid 5024] creat("./file1", 000) = 15 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 16 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 17 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 18 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 19 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 20 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] <... creat resumed>) = 21 [pid 5023] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5024] creat("./file1", 000 [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 22 [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5023] rename("./file1", "./bus" [pid 5024] <... creat resumed>) = 23 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5024] creat("./file1", 000) = 24 [pid 5023] rename("./file1", "./bus" [pid 5024] creat("./file1", 000 [pid 5023] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5023] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... creat resumed>) = 25 [pid 5023] <... futex resumed>) = 0 [pid 5023] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] creat("./file1", 000) = 26 [pid 5024] creat("./file1", 000) = 27 [pid 5024] creat("./file1", 000) = 28 [pid 5024] creat("./file1", 000) = 29 [pid 5024] creat("./file1", 000) = 30 [pid 5024] creat("./file1", 000) = 31 [pid 5024] creat("./file1", 000) = 32 [pid 5024] creat("./file1", 000) = 33 [pid 5024] creat("./file1", 000) = 34 [pid 5024] creat("./file1", 000) = 35 [pid 5024] creat("./file1", 000 [pid 5022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5022] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5024] <... creat resumed>) = 36 [pid 5024] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5024] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5022] exit_group(0 [pid 5023] <... futex resumed>) = ? [pid 5024] <... futex resumed>) = ? [pid 5022] <... exit_group resumed>) = ? [pid 5023] +++ exited with 0 +++ [pid 5024] +++ exited with 0 +++ [pid 5022] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./8/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/bus") = 0 umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5025 ./strace-static-x86_64: Process 5025 attached [pid 5025] set_robust_list(0x555555df95e0, 24) = 0 [pid 5025] chdir("./9") = 0 [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5025] setpgid(0, 0) = 0 [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5025] write(3, "1000", 4) = 4 [pid 5025] close(3) = 0 [pid 5025] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5025] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5025] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5025] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5026 attached , parent_tid=[5026], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5026 [pid 5025] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5025] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5026] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5026] memfd_create("syzkaller", 0) = 3 [pid 5026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 66.944497][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5026] munmap(0x7f15abd22000, 524288) = 0 [pid 5026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5026] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5026] close(3) = 0 [pid 5026] mkdir("./bus", 0777) = 0 [pid 5026] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5026] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5026] chdir("./bus") = 0 [pid 5026] ioctl(4, LOOP_CLR_FD) = 0 [pid 5026] close(4) = 0 [pid 5026] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5025] <... futex resumed>) = 0 [pid 5025] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5025] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5026] rename("./file1", "./bus" [pid 5025] <... futex resumed>) = 0 [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5025] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5025] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5027], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5027 ./strace-static-x86_64: Process 5027 attached [pid 5027] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5025] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] creat("./file1", 000 [pid 5025] <... futex resumed>) = 0 [pid 5025] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5026] <... rename resumed>) = 0 [pid 5027] <... creat resumed>) = 4 [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 5 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 6 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 7 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 8 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 9 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 10 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 11 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 12 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 13 [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 14 [ 67.008285][ T5026] loop0: detected capacity change from 0 to 1024 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 15 [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 16 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 17 [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 18 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 19 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 20 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 21 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 22 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 23 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 24 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 25 [pid 5026] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5027] creat("./file1", 000 [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 26 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] rename("./file1", "./bus" [pid 5027] <... creat resumed>) = 27 [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 28 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5025] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5025] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 29 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 30 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5027] <... creat resumed>) = 31 [pid 5026] rename("./file1", "./bus" [pid 5027] creat("./file1", 000 [pid 5026] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5026] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... creat resumed>) = 32 [pid 5026] <... futex resumed>) = 0 [pid 5027] creat("./file1", 000 [pid 5026] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5027] <... creat resumed>) = 33 [pid 5027] creat("./file1", 000) = 34 [pid 5027] creat("./file1", 000) = 35 [pid 5027] creat("./file1", 000) = 36 [pid 5027] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5027] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5025] exit_group(0 [pid 5027] <... futex resumed>) = ? [pid 5026] <... futex resumed>) = ? [pid 5025] <... exit_group resumed>) = ? [pid 5027] +++ exited with 0 +++ [pid 5026] +++ exited with 0 +++ [pid 5025] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5025, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./9/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/bus") = 0 umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5028 ./strace-static-x86_64: Process 5028 attached [pid 5028] set_robust_list(0x555555df95e0, 24) = 0 [pid 5028] chdir("./10") = 0 [pid 5028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5028] setpgid(0, 0) = 0 [pid 5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5028] write(3, "1000", 4) = 4 [pid 5028] close(3) = 0 [pid 5028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5028] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [ 67.109184][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5028] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5028] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5029 attached , parent_tid=[5029], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5029 [pid 5028] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5029] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5029] memfd_create("syzkaller", 0) = 3 [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5029] munmap(0x7f15abd22000, 524288) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5029] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5029] close(3) = 0 [pid 5029] mkdir("./bus", 0777) = 0 [pid 5029] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5029] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5029] chdir("./bus") = 0 [pid 5029] ioctl(4, LOOP_CLR_FD) = 0 [pid 5029] close(4) = 0 [pid 5029] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5028] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5028] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5028] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5030], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5030 [pid 5028] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5028] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] <... futex resumed>) = 1 [pid 5029] rename("./file1", "./bus") = 0 [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5030 attached [pid 5029] rename("./file1", "./bus" [pid 5030] set_robust_list(0x7f15abda19e0, 24 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus" [pid 5030] <... set_robust_list resumed>) = 0 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000 [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus" [pid 5030] <... creat resumed>) = 4 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000 [pid 5029] rename("./file1", "./bus" [pid 5030] <... creat resumed>) = 5 [pid 5030] creat("./file1", 000 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus" [pid 5030] <... creat resumed>) = 6 [pid 5030] creat("./file1", 000 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5029] rename("./file1", "./bus" [pid 5030] <... creat resumed>) = 7 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000) = 8 [pid 5029] rename("./file1", "./bus" [pid 5030] creat("./file1", 000 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] <... creat resumed>) = 9 [pid 5029] rename("./file1", "./bus" [pid 5030] creat("./file1", 000) = 10 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000 [pid 5029] rename("./file1", "./bus" [pid 5030] <... creat resumed>) = 11 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000 [pid 5029] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5030] <... creat resumed>) = 12 [pid 5029] rename("./file1", "./bus" [pid 5030] creat("./file1", 000 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] <... creat resumed>) = 13 [pid 5029] rename("./file1", "./bus" [pid 5030] creat("./file1", 000 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] <... creat resumed>) = 14 [pid 5029] rename("./file1", "./bus" [pid 5030] creat("./file1", 000) = 15 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000 [pid 5029] rename("./file1", "./bus" [pid 5030] <... creat resumed>) = 16 [pid 5029] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5030] creat("./file1", 000) = 17 [pid 5029] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] creat("./file1", 000 [pid 5029] <... futex resumed>) = 0 [pid 5030] <... creat resumed>) = 18 [pid 5029] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] creat("./file1", 000) = 19 [pid 5030] creat("./file1", 000) = 20 [ 67.185905][ T5029] loop0: detected capacity change from 0 to 1024 [pid 5030] creat("./file1", 000) = 21 [pid 5030] creat("./file1", 000) = 22 [pid 5030] creat("./file1", 000) = 23 [pid 5030] creat("./file1", 000) = 24 [pid 5030] creat("./file1", 000) = 25 [pid 5030] creat("./file1", 000) = 26 [pid 5030] creat("./file1", 000) = 27 [pid 5030] creat("./file1", 000) = 28 [pid 5030] creat("./file1", 000) = 29 [pid 5030] creat("./file1", 000) = 30 [pid 5030] creat("./file1", 000) = 31 [pid 5030] creat("./file1", 000) = 32 [pid 5030] creat("./file1", 000) = 33 [pid 5030] creat("./file1", 000) = 34 [pid 5030] creat("./file1", 000) = 35 [pid 5030] creat("./file1", 000) = 36 [pid 5030] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... futex resumed>) = 0 [pid 5028] exit_group(0 [pid 5029] <... futex resumed>) = ? [pid 5028] <... exit_group resumed>) = ? [pid 5029] +++ exited with 0 +++ [pid 5030] <... futex resumed>) = ? [pid 5030] +++ exited with 0 +++ [pid 5028] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5028, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./10/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/bus") = 0 umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5031 ./strace-static-x86_64: Process 5031 attached [pid 5031] set_robust_list(0x555555df95e0, 24) = 0 [pid 5031] chdir("./11") = 0 [pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5031] setpgid(0, 0) = 0 [pid 5031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1000", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5031] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5031] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5031] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5032], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5032 [pid 5031] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5032 attached [pid 5032] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5032] memfd_create("syzkaller", 0) = 3 [ 67.267914][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5032] munmap(0x7f15abd22000, 524288) = 0 [pid 5032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5032] close(3) = 0 [pid 5032] mkdir("./bus", 0777) = 0 [pid 5032] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5032] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5032] chdir("./bus") = 0 [pid 5032] ioctl(4, LOOP_CLR_FD) = 0 [pid 5032] close(4) = 0 [pid 5032] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = 0 [pid 5031] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5031] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5031] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5033], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5033 [pid 5032] <... futex resumed>) = 1 [pid 5031] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5032] rename("./file1", "./bus" [pid 5031] <... futex resumed>) = 0 [pid 5032] <... rename resumed>) = 0 [pid 5031] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5032] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5032] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5033] creat("./file1", 000) = 4 [pid 5033] creat("./file1", 000) = 5 [pid 5033] creat("./file1", 000) = 6 [pid 5033] creat("./file1", 000) = 7 [pid 5033] creat("./file1", 000) = 8 [pid 5033] creat("./file1", 000) = 9 [ 67.339500][ T5032] loop0: detected capacity change from 0 to 1024 [pid 5033] creat("./file1", 000) = 10 [pid 5033] creat("./file1", 000) = 11 [pid 5033] creat("./file1", 000) = 12 [pid 5033] creat("./file1", 000) = 13 [pid 5033] creat("./file1", 000) = 14 [pid 5033] creat("./file1", 000) = 15 [pid 5033] creat("./file1", 000) = 16 [pid 5033] creat("./file1", 000) = 17 [pid 5033] creat("./file1", 000) = 18 [pid 5033] creat("./file1", 000) = 19 [pid 5033] creat("./file1", 000) = 20 [pid 5033] creat("./file1", 000) = 21 [pid 5033] creat("./file1", 000) = 22 [pid 5033] creat("./file1", 000) = 23 [pid 5033] creat("./file1", 000) = 24 [pid 5033] creat("./file1", 000) = 25 [pid 5033] creat("./file1", 000) = 26 [pid 5033] creat("./file1", 000) = 27 [pid 5033] creat("./file1", 000) = 28 [pid 5033] creat("./file1", 000) = 29 [pid 5033] creat("./file1", 000) = 30 [pid 5033] creat("./file1", 000) = 31 [pid 5033] creat("./file1", 000) = 32 [pid 5033] creat("./file1", 000) = 33 [pid 5033] creat("./file1", 000) = 34 [pid 5033] creat("./file1", 000) = 35 [pid 5031] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5033] creat("./file1", 000) = 36 [pid 5033] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5033] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5031] exit_group(0 [pid 5033] <... futex resumed>) = ? [pid 5032] <... futex resumed>) = ? [pid 5031] <... exit_group resumed>) = ? [pid 5032] +++ exited with 0 +++ [pid 5033] +++ exited with 0 +++ [pid 5031] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5031, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./11/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/bus") = 0 umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5034 ./strace-static-x86_64: Process 5034 attached [pid 5034] set_robust_list(0x555555df95e0, 24) = 0 [pid 5034] chdir("./12") = 0 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5034] write(3, "1000", 4) = 4 [pid 5034] close(3) = 0 [pid 5034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5034] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5034] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5034] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5035 attached , parent_tid=[5035], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5035 [pid 5035] set_robust_list(0x7f15b41429e0, 24 [pid 5034] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... set_robust_list resumed>) = 0 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5035] memfd_create("syzkaller", 0) = 3 [pid 5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 67.429588][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5035] munmap(0x7f15abd22000, 524288) = 0 [pid 5035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5035] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5035] close(3) = 0 [pid 5035] mkdir("./bus", 0777) = 0 [pid 5035] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5035] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5035] chdir("./bus") = 0 [pid 5035] ioctl(4, LOOP_CLR_FD) = 0 [pid 5035] close(4) = 0 [pid 5035] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = 0 [pid 5034] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5034] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5034] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5036], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5036 [pid 5034] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5034] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5035] <... futex resumed>) = 1 [pid 5035] rename("./file1", "./bus") = 0 [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus"./strace-static-x86_64: Process 5036 attached [pid 5036] set_robust_list(0x7f15abda19e0, 24 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] <... set_robust_list resumed>) = 0 [pid 5035] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 4 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 5 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 6 [pid 5036] creat("./file1", 000) = 7 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 8 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000) = 9 [pid 5036] creat("./file1", 000) = 10 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 11 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000) = 12 [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000) = 13 [pid 5036] creat("./file1", 000) = 14 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000) = 15 [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000) = 16 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000) = 17 [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000) = 18 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 19 [pid 5036] creat("./file1", 000) = 20 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 67.502694][ T5035] loop0: detected capacity change from 0 to 1024 [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000) = 21 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 22 [pid 5036] creat("./file1", 000) = 23 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5035] rename("./file1", "./bus" [pid 5036] creat("./file1", 000) = 24 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 25 [pid 5036] creat("./file1", 000) = 26 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5036] creat("./file1", 000 [pid 5035] rename("./file1", "./bus" [pid 5036] <... creat resumed>) = 27 [pid 5036] creat("./file1", 000) = 28 [pid 5035] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5035] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5036] creat("./file1", 000) = 29 [pid 5035] <... futex resumed>) = 0 [pid 5036] creat("./file1", 000 [pid 5035] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5036] <... creat resumed>) = 30 [pid 5036] creat("./file1", 000) = 31 [pid 5036] creat("./file1", 000) = 32 [pid 5036] creat("./file1", 000) = 33 [pid 5036] creat("./file1", 000) = 34 [pid 5036] creat("./file1", 000) = 35 [pid 5036] creat("./file1", 000) = 36 [pid 5036] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5036] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] exit_group(0 [pid 5036] <... futex resumed>) = ? [pid 5035] <... futex resumed>) = ? [pid 5034] <... exit_group resumed>) = ? [pid 5036] +++ exited with 0 +++ [pid 5035] +++ exited with 0 +++ [pid 5034] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./12/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/bus") = 0 umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5037 attached [pid 5037] set_robust_list(0x555555df95e0, 24 [pid 4996] <... clone resumed>, child_tidptr=0x555555df95d0) = 5037 [pid 5037] <... set_robust_list resumed>) = 0 [pid 5037] chdir("./13") = 0 [pid 5037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5037] setpgid(0, 0) = 0 [pid 5037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5037] write(3, "1000", 4) = 4 [pid 5037] close(3) = 0 [pid 5037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5037] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5037] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5037] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5038 attached , parent_tid=[5038], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5038 [pid 5038] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5037] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] memfd_create("syzkaller", 0 [pid 5037] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5038] <... memfd_create resumed>) = 3 [pid 5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 67.584067][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5038] munmap(0x7f15abd22000, 524288) = 0 [pid 5038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5038] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5038] close(3) = 0 [pid 5038] mkdir("./bus", 0777) = 0 [pid 5038] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5038] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5038] chdir("./bus") = 0 [pid 5038] ioctl(4, LOOP_CLR_FD) = 0 [pid 5038] close(4) = 0 [pid 5038] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5037] <... futex resumed>) = 0 [pid 5038] <... futex resumed>) = 1 [pid 5037] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] rename("./file1", "./bus" [pid 5037] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5037] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5037] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5039], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5039 [pid 5037] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5037] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... rename resumed>) = 0 [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus"./strace-static-x86_64: Process 5039 attached [pid 5039] set_robust_list(0x7f15abda19e0, 24 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] <... set_robust_list resumed>) = 0 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 4 [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 5 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 6 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 7 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 8 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] creat("./file1", 000 [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 9 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 10 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] creat("./file1", 000 [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 11 [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 12 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 13 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 14 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] creat("./file1", 000) = 15 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 16 [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 67.653440][ T5038] loop0: detected capacity change from 0 to 1024 [pid 5039] <... creat resumed>) = 17 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] <... creat resumed>) = 18 [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000) = 19 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] creat("./file1", 000 [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 20 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] creat("./file1", 000 [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 21 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] creat("./file1", 000 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5038] rename("./file1", "./bus" [pid 5039] <... creat resumed>) = 22 [pid 5038] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5039] creat("./file1", 000 [pid 5038] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5038] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5039] <... creat resumed>) = 23 [pid 5039] creat("./file1", 000) = 24 [pid 5039] creat("./file1", 000) = 25 [pid 5039] creat("./file1", 000) = 26 [pid 5039] creat("./file1", 000) = 27 [pid 5039] creat("./file1", 000) = 28 [pid 5039] creat("./file1", 000) = 29 [pid 5039] creat("./file1", 000) = 30 [pid 5039] creat("./file1", 000 [pid 5037] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5039] <... creat resumed>) = 31 [pid 5039] creat("./file1", 000) = 32 [pid 5039] creat("./file1", 000) = 33 [pid 5039] creat("./file1", 000) = 34 [pid 5039] creat("./file1", 000) = 35 [pid 5039] creat("./file1", 000) = 36 [pid 5039] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5039] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5037] exit_group(0 [pid 5038] <... futex resumed>) = ? [pid 5037] <... exit_group resumed>) = ? [pid 5038] +++ exited with 0 +++ [pid 5039] <... futex resumed>) = ? [pid 5039] +++ exited with 0 +++ [pid 5037] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5037, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./13/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/bus") = 0 umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5040 ./strace-static-x86_64: Process 5040 attached [pid 5040] set_robust_list(0x555555df95e0, 24) = 0 [pid 5040] chdir("./14") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] write(3, "1000", 4) = 4 [ 67.746086][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5040] close(3) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5040] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5040] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5040] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5041 attached [pid 5041] set_robust_list(0x7f15b41429e0, 24 [pid 5040] <... clone resumed>, parent_tid=[5041], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5041 [pid 5040] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... set_robust_list resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5040] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5041] memfd_create("syzkaller", 0) = 3 [pid 5041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5041] munmap(0x7f15abd22000, 524288) = 0 [pid 5041] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5041] close(3) = 0 [pid 5041] mkdir("./bus", 0777) = 0 [pid 5041] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5041] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5041] chdir("./bus") = 0 [pid 5041] ioctl(4, LOOP_CLR_FD) = 0 [pid 5041] close(4) = 0 [pid 5041] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5040] <... futex resumed>) = 0 [pid 5041] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] <... futex resumed>) = 0 [pid 5041] rename("./file1", "./bus" [pid 5040] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... rename resumed>) = 0 [pid 5040] <... futex resumed>) = 0 [pid 5041] rename("./file1", "./bus" [pid 5040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5040] <... mmap resumed>) = 0x7f15abd81000 [pid 5041] rename("./file1", "./bus" [pid 5040] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5040] <... mprotect resumed>) = 0 [pid 5041] rename("./file1", "./bus" [pid 5040] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5042 attached [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] set_robust_list(0x7f15abda19e0, 24 [pid 5040] <... clone resumed>, parent_tid=[5042], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5042 [pid 5042] <... set_robust_list resumed>) = 0 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5040] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5042] creat("./file1", 000 [pid 5041] rename("./file1", "./bus" [pid 5040] <... futex resumed>) = 0 [pid 5042] <... creat resumed>) = 4 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5040] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 5 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5042] <... creat resumed>) = 6 [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5042] <... creat resumed>) = 7 [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 8 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] creat("./file1", 000 [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 9 [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5042] <... creat resumed>) = 10 [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [ 67.825992][ T5041] loop0: detected capacity change from 0 to 1024 [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 11 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] creat("./file1", 000 [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 12 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] creat("./file1", 000 [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 13 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5042] <... creat resumed>) = 14 [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] <... creat resumed>) = 15 [pid 5041] rename("./file1", "./bus" [pid 5042] creat("./file1", 000 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 16 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] creat("./file1", 000 [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 17 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] creat("./file1", 000 [pid 5041] rename("./file1", "./bus" [pid 5042] <... creat resumed>) = 18 [pid 5041] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5042] creat("./file1", 000 [pid 5041] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5042] <... creat resumed>) = 19 [pid 5042] creat("./file1", 000) = 20 [pid 5042] creat("./file1", 000) = 21 [pid 5042] creat("./file1", 000) = 22 [pid 5042] creat("./file1", 000) = 23 [pid 5042] creat("./file1", 000) = 24 [pid 5042] creat("./file1", 000) = 25 [pid 5042] creat("./file1", 000) = 26 [pid 5042] creat("./file1", 000) = 27 [pid 5042] creat("./file1", 000) = 28 [pid 5042] creat("./file1", 000) = 29 [pid 5042] creat("./file1", 000) = 30 [pid 5042] creat("./file1", 000) = 31 [pid 5042] creat("./file1", 000) = 32 [pid 5042] creat("./file1", 000) = 33 [pid 5042] creat("./file1", 000) = 34 [pid 5042] creat("./file1", 000) = 35 [pid 5042] creat("./file1", 000) = 36 [pid 5042] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 0 [pid 5040] exit_group(0 [pid 5041] <... futex resumed>) = ? [pid 5040] <... exit_group resumed>) = ? [pid 5041] +++ exited with 0 +++ [pid 5042] <... futex resumed>) = ? [pid 5042] +++ exited with 0 +++ [pid 5040] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./14/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/bus") = 0 umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5043 ./strace-static-x86_64: Process 5043 attached [pid 5043] set_robust_list(0x555555df95e0, 24) = 0 [pid 5043] chdir("./15") = 0 [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5043] setpgid(0, 0) = 0 [pid 5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1000", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5043] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5043] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5043] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5044 attached [pid 5044] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5044] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] <... clone resumed>, parent_tid=[5044], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5044 [pid 5043] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5044] <... futex resumed>) = 0 [pid 5043] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5044] memfd_create("syzkaller", 0) = 3 [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 67.922992][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5044] munmap(0x7f15abd22000, 524288) = 0 [pid 5044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5044] close(3) = 0 [pid 5044] mkdir("./bus", 0777) = 0 [pid 5044] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5044] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5044] chdir("./bus") = 0 [pid 5044] ioctl(4, LOOP_CLR_FD) = 0 [pid 5044] close(4) = 0 [pid 5044] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5043] <... futex resumed>) = 0 [pid 5043] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5044] <... futex resumed>) = 1 [pid 5043] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5044] rename("./file1", "./bus" [pid 5043] <... futex resumed>) = 0 [pid 5044] <... rename resumed>) = 0 [pid 5043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5043] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5044] rename("./file1", "./bus" [pid 5043] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5045 attached [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] set_robust_list(0x7f15abda19e0, 24 [pid 5044] rename("./file1", "./bus" [pid 5043] <... clone resumed>, parent_tid=[5045], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5045 [pid 5045] <... set_robust_list resumed>) = 0 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5043] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5045] creat("./file1", 000 [pid 5043] <... futex resumed>) = 0 [pid 5044] rename("./file1", "./bus" [pid 5043] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5045] <... creat resumed>) = 4 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 5 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 6 [pid 5045] creat("./file1", 000) = 7 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000) = 8 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 9 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000) = 10 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 11 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 12 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 13 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000) = 14 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 15 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000) = 16 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 17 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000) = 18 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 19 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 20 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 21 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 67.987533][ T5044] loop0: detected capacity change from 0 to 1024 [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5045] <... creat resumed>) = 22 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 23 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 24 [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 25 [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] <... creat resumed>) = 26 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] <... creat resumed>) = 27 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] <... creat resumed>) = 28 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 29 [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 30 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 31 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] <... creat resumed>) = 32 [pid 5044] rename("./file1", "./bus" [pid 5045] creat("./file1", 000) = 33 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 34 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] creat("./file1", 000) = 35 [pid 5045] creat("./file1", 000 [pid 5044] rename("./file1", "./bus" [pid 5045] <... creat resumed>) = 36 [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5045] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5043] <... futex resumed>) = 0 [pid 5044] rename("./file1", "./bus" [pid 5045] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5044] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5044] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5044] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5044] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5043] exit_group(0 [pid 5045] <... futex resumed>) = ? [pid 5044] <... futex resumed>) = ? [pid 5043] <... exit_group resumed>) = ? [pid 5045] +++ exited with 0 +++ [pid 5044] +++ exited with 0 +++ [pid 5043] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5043, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./15/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/bus") = 0 umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5046 attached , child_tidptr=0x555555df95d0) = 5046 [pid 5046] set_robust_list(0x555555df95e0, 24) = 0 [pid 5046] chdir("./16") = 0 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5046] setpgid(0, 0) = 0 [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5046] write(3, "1000", 4) = 4 [pid 5046] close(3) = 0 [pid 5046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5046] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5046] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5046] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5047 attached , parent_tid=[5047], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5047 [pid 5046] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5047] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5047] memfd_create("syzkaller", 0) = 3 [pid 5047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5047] munmap(0x7f15abd22000, 524288) = 0 [pid 5047] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 68.077411][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5047] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5047] close(3) = 0 [pid 5047] mkdir("./bus", 0777) = 0 [pid 5047] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5047] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5047] chdir("./bus") = 0 [pid 5047] ioctl(4, LOOP_CLR_FD) = 0 [pid 5047] close(4) = 0 [pid 5047] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5046] <... futex resumed>) = 0 [pid 5046] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5046] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5046] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5047] rename("./file1", "./bus" [pid 5046] <... clone resumed>, parent_tid=[5048], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5048 [pid 5046] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5046] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5048 attached [pid 5048] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5048] creat("./file1", 000 [pid 5047] <... rename resumed>) = 0 [pid 5048] <... creat resumed>) = 4 [pid 5048] creat("./file1", 000) = 5 [pid 5048] creat("./file1", 000) = 6 [pid 5048] creat("./file1", 000) = 7 [pid 5048] creat("./file1", 000) = 8 [pid 5048] creat("./file1", 000) = 9 [pid 5048] creat("./file1", 000) = 10 [pid 5048] creat("./file1", 000) = 11 [pid 5048] creat("./file1", 000) = 12 [pid 5048] creat("./file1", 000) = 13 [pid 5048] creat("./file1", 000) = 14 [pid 5048] creat("./file1", 000) = 15 [pid 5048] creat("./file1", 000) = 16 [pid 5048] creat("./file1", 000) = 17 [pid 5048] creat("./file1", 000 [pid 5047] rename("./file1", "./bus" [pid 5048] <... creat resumed>) = 18 [pid 5048] creat("./file1", 000) = 19 [pid 5048] creat("./file1", 000) = 20 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5048] creat("./file1", 000) = 21 [pid 5047] rename("./file1", "./bus" [pid 5048] creat("./file1", 000 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5048] <... creat resumed>) = 22 [pid 5048] creat("./file1", 000 [pid 5047] rename("./file1", "./bus" [pid 5048] <... creat resumed>) = 23 [pid 5048] creat("./file1", 000) = 24 [pid 5048] creat("./file1", 000) = 25 [pid 5048] creat("./file1", 000) = 26 [pid 5048] creat("./file1", 000) = 27 [pid 5048] creat("./file1", 000) = 28 [pid 5048] creat("./file1", 000 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5048] <... creat resumed>) = 29 [pid 5048] creat("./file1", 000) = 30 [pid 5047] rename("./file1", "./bus" [pid 5048] creat("./file1", 000) = 31 [pid 5048] creat("./file1", 000 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus" [pid 5048] <... creat resumed>) = 32 [ 68.138528][ T5047] loop0: detected capacity change from 0 to 1024 [pid 5048] creat("./file1", 000) = 33 [pid 5048] creat("./file1", 000 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus" [pid 5048] <... creat resumed>) = 34 [pid 5048] creat("./file1", 000 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus" [pid 5048] <... creat resumed>) = 35 [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5048] creat("./file1", 000) = 36 [pid 5048] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5046] <... futex resumed>) = 0 [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus" [pid 5048] <... futex resumed>) = 1 [pid 5048] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5047] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5047] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5047] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5046] exit_group(0 [pid 5048] <... futex resumed>) = ? [pid 5047] <... futex resumed>) = ? [pid 5046] <... exit_group resumed>) = ? [pid 5048] +++ exited with 0 +++ [pid 5047] +++ exited with 0 +++ [pid 5046] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./16/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./16/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/bus") = 0 umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5049 attached [pid 5049] set_robust_list(0x555555df95e0, 24) = 0 [pid 5049] chdir("./17") = 0 [pid 4996] <... clone resumed>, child_tidptr=0x555555df95d0) = 5049 [pid 5049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5049] setpgid(0, 0) = 0 [pid 5049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5049] write(3, "1000", 4) = 4 [pid 5049] close(3) = 0 [pid 5049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5049] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5049] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5049] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5050], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5050 [pid 5049] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5050 attached [pid 5050] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5050] memfd_create("syzkaller", 0) = 3 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5050] munmap(0x7f15abd22000, 524288) = 0 [pid 5050] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 68.230333][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5050] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5050] close(3) = 0 [pid 5050] mkdir("./bus", 0777) = 0 [pid 5050] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5050] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5050] chdir("./bus") = 0 [pid 5050] ioctl(4, LOOP_CLR_FD) = 0 [pid 5050] close(4) = 0 [pid 5050] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5049] <... futex resumed>) = 0 [pid 5049] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] <... futex resumed>) = 1 [pid 5049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5050] rename("./file1", "./bus" [pid 5049] <... mmap resumed>) = 0x7f15abd81000 [pid 5050] <... rename resumed>) = 0 [pid 5049] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5049] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5051], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5051 [pid 5049] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5050] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5050] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5051 attached [pid 5051] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5051] creat("./file1", 000) = 4 [pid 5051] creat("./file1", 000) = 5 [pid 5051] creat("./file1", 000) = 6 [pid 5051] creat("./file1", 000) = 7 [pid 5051] creat("./file1", 000) = 8 [pid 5051] creat("./file1", 000) = 9 [ 68.289297][ T5050] loop0: detected capacity change from 0 to 1024 [pid 5051] creat("./file1", 000) = 10 [pid 5051] creat("./file1", 000) = 11 [pid 5051] creat("./file1", 000) = 12 [pid 5051] creat("./file1", 000) = 13 [pid 5051] creat("./file1", 000) = 14 [pid 5051] creat("./file1", 000) = 15 [pid 5051] creat("./file1", 000) = 16 [pid 5051] creat("./file1", 000) = 17 [pid 5051] creat("./file1", 000) = 18 [pid 5051] creat("./file1", 000) = 19 [pid 5051] creat("./file1", 000) = 20 [pid 5051] creat("./file1", 000) = 21 [pid 5051] creat("./file1", 000) = 22 [pid 5051] creat("./file1", 000) = 23 [pid 5051] creat("./file1", 000) = 24 [pid 5051] creat("./file1", 000) = 25 [pid 5051] creat("./file1", 000) = 26 [pid 5051] creat("./file1", 000) = 27 [pid 5051] creat("./file1", 000) = 28 [pid 5049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5049] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5051] creat("./file1", 000) = 29 [pid 5051] creat("./file1", 000) = 30 [pid 5051] creat("./file1", 000) = 31 [pid 5051] creat("./file1", 000) = 32 [pid 5051] creat("./file1", 000) = 33 [pid 5051] creat("./file1", 000) = 34 [pid 5051] creat("./file1", 000) = 35 [pid 5051] creat("./file1", 000) = 36 [pid 5051] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5049] exit_group(0 [pid 5050] <... futex resumed>) = ? [pid 5049] <... exit_group resumed>) = ? [pid 5050] +++ exited with 0 +++ [pid 5051] +++ exited with 0 +++ [pid 5049] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5049, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./17/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./17/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./17/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./17/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/bus") = 0 umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5052 ./strace-static-x86_64: Process 5052 attached [pid 5052] set_robust_list(0x555555df95e0, 24) = 0 [pid 5052] chdir("./18") = 0 [pid 5052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5052] setpgid(0, 0) = 0 [pid 5052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5052] write(3, "1000", 4) = 4 [pid 5052] close(3) = 0 [pid 5052] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5052] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 68.396065][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5052] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5052] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5053 attached , parent_tid=[5053], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5053 [pid 5053] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5053] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5052] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5052] <... futex resumed>) = 0 [pid 5052] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5053] memfd_create("syzkaller", 0) = 3 [pid 5053] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5053] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5053] munmap(0x7f15abd22000, 524288) = 0 [pid 5053] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5053] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5053] close(3) = 0 [pid 5053] mkdir("./bus", 0777) = 0 [pid 5053] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5053] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5053] chdir("./bus") = 0 [pid 5053] ioctl(4, LOOP_CLR_FD) = 0 [pid 5053] close(4) = 0 [pid 5053] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5052] <... futex resumed>) = 0 [pid 5052] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5052] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5052] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5052] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5052] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5054], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5054 [pid 5052] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5052] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5053] <... futex resumed>) = 1 [pid 5053] rename("./file1", "./bus") = 0 [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5054 attached [pid 5054] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 4 [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] <... creat resumed>) = 5 [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 6 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000) = 7 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 8 [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 9 [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 10 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000) = 11 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 12 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 13 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 14 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 15 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 16 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 17 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5054] creat("./file1", 000 [pid 5053] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [ 68.471655][ T5053] loop0: detected capacity change from 0 to 1024 [pid 5054] <... creat resumed>) = 18 [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 19 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 20 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 21 [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 22 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] rename("./file1", "./bus" [pid 5054] <... creat resumed>) = 23 [pid 5054] creat("./file1", 000 [pid 5053] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5053] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5053] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5054] <... creat resumed>) = 24 [pid 5054] creat("./file1", 000) = 25 [pid 5054] creat("./file1", 000) = 26 [pid 5054] creat("./file1", 000) = 27 [pid 5054] creat("./file1", 000) = 28 [pid 5054] creat("./file1", 000) = 29 [pid 5052] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5054] creat("./file1", 000) = 30 [pid 5054] creat("./file1", 000) = 31 [pid 5054] creat("./file1", 000) = 32 [pid 5054] creat("./file1", 000) = 33 [pid 5054] creat("./file1", 000) = 34 [pid 5054] creat("./file1", 000) = 35 [pid 5054] creat("./file1", 000) = 36 [pid 5054] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5052] exit_group(0 [pid 5053] <... futex resumed>) = ? [pid 5052] <... exit_group resumed>) = ? [pid 5054] +++ exited with 0 +++ [pid 5053] +++ exited with 0 +++ [pid 5052] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5052, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./18/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./18/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./18/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./18/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/bus") = 0 umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5055 ./strace-static-x86_64: Process 5055 attached [pid 5055] set_robust_list(0x555555df95e0, 24) = 0 [pid 5055] chdir("./19") = 0 [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5055] setpgid(0, 0) = 0 [pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5055] write(3, "1000", 4) = 4 [pid 5055] close(3) = 0 [pid 5055] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5055] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5055] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [ 68.558297][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5055] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5056 attached , parent_tid=[5056], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5056 [pid 5056] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5056] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5055] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5056] <... futex resumed>) = 0 [pid 5056] memfd_create("syzkaller", 0 [pid 5055] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5056] <... memfd_create resumed>) = 3 [pid 5056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5056] munmap(0x7f15abd22000, 524288) = 0 [pid 5056] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5056] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5056] close(3) = 0 [pid 5056] mkdir("./bus", 0777) = 0 [pid 5056] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5056] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5056] chdir("./bus") = 0 [pid 5056] ioctl(4, LOOP_CLR_FD) = 0 [pid 5056] close(4) = 0 [pid 5056] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5055] <... futex resumed>) = 0 [pid 5055] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5055] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5055] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5055] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5056] <... futex resumed>) = 1 ./strace-static-x86_64: Process 5057 attached [pid 5056] rename("./file1", "./bus" [pid 5057] set_robust_list(0x7f15abda19e0, 24 [pid 5055] <... clone resumed>, parent_tid=[5057], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5057 [pid 5055] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] <... set_robust_list resumed>) = 0 [pid 5056] <... rename resumed>) = 0 [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus" [pid 5055] <... futex resumed>) = 0 [pid 5055] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 4 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 5 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 6 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 7 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 8 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 9 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 10 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 11 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 12 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 13 [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 14 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 15 [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 16 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000) = 17 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 18 [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 19 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 20 [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 21 [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 22 [ 68.634321][ T5056] loop0: detected capacity change from 0 to 1024 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000) = 23 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000) = 24 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 25 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 26 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] <... creat resumed>) = 27 [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000) = 28 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 29 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5057] creat("./file1", 000 [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 30 [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] <... creat resumed>) = 31 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] rename("./file1", "./bus" [pid 5057] creat("./file1", 000 [pid 5056] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5056] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] <... creat resumed>) = 32 [pid 5056] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] creat("./file1", 000) = 33 [pid 5057] creat("./file1", 000) = 34 [pid 5057] creat("./file1", 000) = 35 [pid 5057] creat("./file1", 000) = 36 [pid 5057] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5055] <... futex resumed>) = 0 [pid 5057] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5055] exit_group(0 [pid 5057] <... futex resumed>) = ? [pid 5056] <... futex resumed>) = ? [pid 5055] <... exit_group resumed>) = ? [pid 5057] +++ exited with 0 +++ [pid 5056] +++ exited with 0 +++ [pid 5055] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5055, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./19/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./19/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./19/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./19/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/bus") = 0 umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5058 ./strace-static-x86_64: Process 5058 attached [pid 5058] set_robust_list(0x555555df95e0, 24) = 0 [pid 5058] chdir("./20") = 0 [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5058] setpgid(0, 0) = 0 [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5058] write(3, "1000", 4) = 4 [pid 5058] close(3) = 0 [pid 5058] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5058] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5058] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5058] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5059 attached , parent_tid=[5059], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5059 [pid 5059] set_robust_list(0x7f15b41429e0, 24 [pid 5058] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] <... set_robust_list resumed>) = 0 [ 68.719139][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5058] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5059] memfd_create("syzkaller", 0) = 3 [pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5059] munmap(0x7f15abd22000, 524288) = 0 [pid 5059] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5059] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5059] close(3) = 0 [pid 5059] mkdir("./bus", 0777) = 0 [pid 5059] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5059] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5059] chdir("./bus") = 0 [pid 5059] ioctl(4, LOOP_CLR_FD) = 0 [pid 5059] close(4) = 0 [pid 5059] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = 0 [pid 5058] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5058] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5059] <... futex resumed>) = 1 [pid 5058] <... mprotect resumed>) = 0 [pid 5059] rename("./file1", "./bus" [pid 5058] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5060 attached [pid 5059] <... rename resumed>) = 0 [pid 5058] <... clone resumed>, parent_tid=[5060], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5060 [pid 5058] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5059] rename("./file1", "./bus" [pid 5060] set_robust_list(0x7f15abda19e0, 24 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... set_robust_list resumed>) = 0 [pid 5060] creat("./file1", 000) = 4 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 5 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 6 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 7 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000) = 8 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 9 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 10 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000) = 11 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 12 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 13 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 14 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 15 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 68.791869][ T5059] loop0: detected capacity change from 0 to 1024 [pid 5060] <... creat resumed>) = 16 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 17 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000) = 18 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 19 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 20 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 21 [pid 5059] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 22 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 23 [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 24 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 25 [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5060] <... creat resumed>) = 26 [pid 5059] rename("./file1", "./bus" [pid 5060] creat("./file1", 000 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 27 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 28 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] rename("./file1", "./bus" [pid 5060] <... creat resumed>) = 29 [pid 5059] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5060] creat("./file1", 000 [pid 5059] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5059] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5060] <... creat resumed>) = 30 [pid 5060] creat("./file1", 000) = 31 [pid 5060] creat("./file1", 000) = 32 [pid 5060] creat("./file1", 000) = 33 [pid 5060] creat("./file1", 000) = 34 [pid 5060] creat("./file1", 000) = 35 [pid 5060] creat("./file1", 000) = 36 [pid 5060] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5058] <... futex resumed>) = 0 [pid 5060] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5058] exit_group(0 [pid 5060] <... futex resumed>) = ? [pid 5059] <... futex resumed>) = ? [pid 5058] <... exit_group resumed>) = ? [pid 5060] +++ exited with 0 +++ [pid 5059] +++ exited with 0 +++ [pid 5058] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5058, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./20/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./20/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./20/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./20/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/bus") = 0 umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5061 ./strace-static-x86_64: Process 5061 attached [pid 5061] set_robust_list(0x555555df95e0, 24) = 0 [pid 5061] chdir("./21") = 0 [pid 5061] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] setpgid(0, 0) = 0 [pid 5061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5061] write(3, "1000", 4) = 4 [pid 5061] close(3) = 0 [pid 5061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5061] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5062 attached , parent_tid=[5062], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5062 [pid 5062] set_robust_list(0x7f15b41429e0, 24 [pid 5061] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5062] <... set_robust_list resumed>) = 0 [pid 5061] <... futex resumed>) = 0 [ 68.883209][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5062] memfd_create("syzkaller", 0 [pid 5061] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5062] <... memfd_create resumed>) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5062] munmap(0x7f15abd22000, 524288) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./bus", 0777) = 0 [pid 5062] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5062] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./bus") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [pid 5062] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5061] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5061] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5061] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5063], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5063 [pid 5061] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5062] <... futex resumed>) = 1 [pid 5062] rename("./file1", "./bus") = 0 [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus"./strace-static-x86_64: Process 5063 attached ) = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5063] set_robust_list(0x7f15abda19e0, 24 [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5062] rename("./file1", "./bus" [pid 5063] <... set_robust_list resumed>) = 0 [pid 5062] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5062] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5063] creat("./file1", 000 [pid 5062] <... futex resumed>) = 0 [pid 5063] <... creat resumed>) = 4 [pid 5062] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5063] creat("./file1", 000) = 5 [pid 5063] creat("./file1", 000) = 6 [pid 5063] creat("./file1", 000) = 7 [pid 5063] creat("./file1", 000) = 8 [pid 5063] creat("./file1", 000) = 9 [pid 5063] creat("./file1", 000) = 10 [pid 5063] creat("./file1", 000) = 11 [pid 5063] creat("./file1", 000) = 12 [pid 5063] creat("./file1", 000) = 13 [ 68.955326][ T5062] loop0: detected capacity change from 0 to 1024 [pid 5063] creat("./file1", 000) = 14 [pid 5063] creat("./file1", 000) = 15 [pid 5063] creat("./file1", 000) = 16 [pid 5063] creat("./file1", 000) = 17 [pid 5063] creat("./file1", 000) = 18 [pid 5063] creat("./file1", 000) = 19 [pid 5063] creat("./file1", 000 [pid 5061] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5061] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5063] <... creat resumed>) = 20 [pid 5063] creat("./file1", 000) = 21 [pid 5063] creat("./file1", 000) = 22 [pid 5063] creat("./file1", 000) = 23 [pid 5063] creat("./file1", 000) = 24 [pid 5063] creat("./file1", 000) = 25 [pid 5063] creat("./file1", 000) = 26 [pid 5063] creat("./file1", 000) = 27 [pid 5063] creat("./file1", 000) = 28 [pid 5063] creat("./file1", 000) = 29 [pid 5063] creat("./file1", 000) = 30 [pid 5063] creat("./file1", 000) = 31 [pid 5063] creat("./file1", 000) = 32 [pid 5063] creat("./file1", 000) = 33 [pid 5063] creat("./file1", 000) = 34 [pid 5063] creat("./file1", 000) = 35 [pid 5063] creat("./file1", 000) = 36 [pid 5063] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] exit_group(0 [pid 5063] <... futex resumed>) = ? [pid 5062] <... futex resumed>) = ? [pid 5061] <... exit_group resumed>) = ? [pid 5063] +++ exited with 0 +++ [pid 5062] +++ exited with 0 +++ [pid 5061] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5061, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./21/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./21/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./21/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./21/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/bus") = 0 umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5064 ./strace-static-x86_64: Process 5064 attached [pid 5064] set_robust_list(0x555555df95e0, 24) = 0 [pid 5064] chdir("./22") = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.052349][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5064] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5064] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5065 attached , parent_tid=[5065], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5065 [pid 5065] set_robust_list(0x7f15b41429e0, 24 [pid 5064] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... set_robust_list resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5064] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5065] memfd_create("syzkaller", 0) = 3 [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5065] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5065] munmap(0x7f15abd22000, 524288) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5065] close(3) = 0 [pid 5065] mkdir("./bus", 0777) = 0 [pid 5065] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5065] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] chdir("./bus") = 0 [pid 5065] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] close(4) = 0 [pid 5065] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5064] <... futex resumed>) = 0 [pid 5064] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] rename("./file1", "./bus" [pid 5064] <... futex resumed>) = 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5064] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5065] <... rename resumed>) = 0 [pid 5064] <... mprotect resumed>) = 0 [pid 5064] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5065] rename("./file1", "./bus" [pid 5064] <... clone resumed>, parent_tid=[5066], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5066 [pid 5064] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5064] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus"./strace-static-x86_64: Process 5066 attached [pid 5066] set_robust_list(0x7f15abda19e0, 24 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5066] <... set_robust_list resumed>) = 0 [pid 5065] rename("./file1", "./bus" [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 4 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 5 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 6 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5066] creat("./file1", 000 [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 7 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 8 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5066] creat("./file1", 000 [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 9 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 10 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5066] creat("./file1", 000 [pid 5065] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5066] <... creat resumed>) = 11 [ 69.141360][ T5065] loop0: detected capacity change from 0 to 1024 [pid 5066] creat("./file1", 000 [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 12 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5066] creat("./file1", 000 [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 13 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 14 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] rename("./file1", "./bus" [pid 5066] <... creat resumed>) = 15 [pid 5066] creat("./file1", 000 [pid 5065] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5065] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] <... creat resumed>) = 16 [pid 5065] <... futex resumed>) = 0 [pid 5066] creat("./file1", 000 [pid 5065] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... creat resumed>) = 17 [pid 5066] creat("./file1", 000) = 18 [pid 5066] creat("./file1", 000) = 19 [pid 5066] creat("./file1", 000) = 20 [pid 5066] creat("./file1", 000) = 21 [pid 5066] creat("./file1", 000) = 22 [pid 5066] creat("./file1", 000) = 23 [pid 5066] creat("./file1", 000) = 24 [pid 5066] creat("./file1", 000) = 25 [pid 5066] creat("./file1", 000) = 26 [pid 5066] creat("./file1", 000) = 27 [pid 5066] creat("./file1", 000) = 28 [pid 5066] creat("./file1", 000) = 29 [pid 5066] creat("./file1", 000 [pid 5064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... creat resumed>) = 30 [pid 5066] creat("./file1", 000) = 31 [pid 5066] creat("./file1", 000) = 32 [pid 5066] creat("./file1", 000) = 33 [pid 5066] creat("./file1", 000) = 34 [pid 5066] creat("./file1", 000) = 35 [pid 5066] creat("./file1", 000) = 36 [pid 5066] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5064] exit_group(0 [pid 5065] <... futex resumed>) = ? [pid 5066] <... futex resumed>) = ? [pid 5064] <... exit_group resumed>) = ? [pid 5065] +++ exited with 0 +++ [pid 5066] +++ exited with 0 +++ [pid 5064] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./22/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./22/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./22/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./22/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/bus") = 0 umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5067 ./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x555555df95e0, 24) = 0 [pid 5067] chdir("./23") = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5067] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5067] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5068 attached [pid 5068] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5068] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... clone resumed>, parent_tid=[5068], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5068 [pid 5067] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5068] <... futex resumed>) = 0 [ 69.235350][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5067] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5068] munmap(0x7f15abd22000, 524288) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5068] close(3) = 0 [pid 5068] mkdir("./bus", 0777) = 0 [pid 5068] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5068] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./bus") = 0 [pid 5068] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] close(4) = 0 [pid 5068] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5068] rename("./file1", "./bus" [pid 5067] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rename resumed>) = 0 [pid 5067] <... futex resumed>) = 0 [pid 5068] rename("./file1", "./bus" [pid 5067] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5067] <... futex resumed>) = 0 [pid 5068] rename("./file1", "./bus" [pid 5067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5067] <... mmap resumed>) = 0x7f15abd81000 [pid 5068] rename("./file1", "./bus" [pid 5067] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5067] <... mprotect resumed>) = 0 [pid 5068] rename("./file1", "./bus" [pid 5067] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5067] <... clone resumed>, parent_tid=[5069], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5069 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5067] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] rename("./file1", "./bus" [pid 5067] <... futex resumed>) = 0 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5067] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus"./strace-static-x86_64: Process 5069 attached ) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5069] set_robust_list(0x7f15abda19e0, 24 [pid 5068] rename("./file1", "./bus" [pid 5069] <... set_robust_list resumed>) = 0 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] creat("./file1", 000 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] <... creat resumed>) = 4 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] creat("./file1", 000 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] <... creat resumed>) = 5 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5069] creat("./file1", 000 [pid 5068] rename("./file1", "./bus" [pid 5069] <... creat resumed>) = 6 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5069] creat("./file1", 000 [pid 5068] rename("./file1", "./bus" [pid 5069] <... creat resumed>) = 7 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] creat("./file1", 000 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] <... creat resumed>) = 8 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] rename("./file1", "./bus" [pid 5069] creat("./file1", 000 [pid 5068] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5068] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5068] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] <... creat resumed>) = 9 [pid 5069] creat("./file1", 000) = 10 [pid 5069] creat("./file1", 000) = 11 [pid 5069] creat("./file1", 000) = 12 [pid 5069] creat("./file1", 000) = 13 [pid 5069] creat("./file1", 000) = 14 [pid 5069] creat("./file1", 000) = 15 [pid 5069] creat("./file1", 000) = 16 [pid 5069] creat("./file1", 000) = 17 [ 69.305825][ T5068] loop0: detected capacity change from 0 to 1024 [pid 5069] creat("./file1", 000) = 18 [pid 5069] creat("./file1", 000) = 19 [pid 5069] creat("./file1", 000) = 20 [pid 5069] creat("./file1", 000) = 21 [pid 5069] creat("./file1", 000) = 22 [pid 5069] creat("./file1", 000) = 23 [pid 5069] creat("./file1", 000) = 24 [pid 5069] creat("./file1", 000) = 25 [pid 5069] creat("./file1", 000) = 26 [pid 5069] creat("./file1", 000) = 27 [pid 5069] creat("./file1", 000) = 28 [pid 5069] creat("./file1", 000) = 29 [pid 5067] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] creat("./file1", 000) = 30 [pid 5069] creat("./file1", 000) = 31 [pid 5069] creat("./file1", 000) = 32 [pid 5069] creat("./file1", 000) = 33 [pid 5069] creat("./file1", 000) = 34 [pid 5069] creat("./file1", 000) = 35 [pid 5069] creat("./file1", 000) = 36 [pid 5069] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] exit_group(0 [pid 5069] <... futex resumed>) = ? [pid 5068] <... futex resumed>) = ? [pid 5067] <... exit_group resumed>) = ? [pid 5068] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5067] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./23/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./23/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./23/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./23/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/bus") = 0 umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5070 ./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x555555df95e0, 24) = 0 [ 69.392446][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5070] chdir("./24") = 0 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5070] setpgid(0, 0) = 0 [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5070] write(3, "1000", 4) = 4 [pid 5070] close(3) = 0 [pid 5070] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5070] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5070] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5071 attached , parent_tid=[5071], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5071 [pid 5070] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5071] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5071] memfd_create("syzkaller", 0) = 3 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5071] munmap(0x7f15abd22000, 524288) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5071] close(3) = 0 [pid 5071] mkdir("./bus", 0777) = 0 [pid 5071] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5071] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./bus") = 0 [pid 5071] ioctl(4, LOOP_CLR_FD) = 0 [pid 5071] close(4) = 0 [pid 5071] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5070] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5070] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5070] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5071] <... futex resumed>) = 1 [pid 5071] rename("./file1", "./bus" [pid 5070] <... clone resumed>, parent_tid=[5072], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5072 [pid 5070] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5070] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] <... rename resumed>) = 0 [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus"./strace-static-x86_64: Process 5072 attached ) = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5072] set_robust_list(0x7f15abda19e0, 24 [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus" [pid 5072] <... set_robust_list resumed>) = 0 [pid 5071] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5072] creat("./file1", 000 [pid 5071] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5071] rename("./file1", "./bus" [pid 5072] <... creat resumed>) = 4 [pid 5071] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5072] creat("./file1", 000 [pid 5071] rename("./file1", "./bus" [pid 5072] <... creat resumed>) = 5 [pid 5071] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5072] creat("./file1", 000 [pid 5071] rename("./file1", "./bus" [pid 5072] <... creat resumed>) = 6 [pid 5071] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5072] creat("./file1", 000) = 7 [pid 5071] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] creat("./file1", 000) = 8 [pid 5071] <... futex resumed>) = 0 [pid 5072] creat("./file1", 000) = 9 [pid 5071] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] creat("./file1", 000) = 10 [pid 5072] creat("./file1", 000) = 11 [ 69.462504][ T5071] loop0: detected capacity change from 0 to 1024 [pid 5072] creat("./file1", 000) = 12 [pid 5072] creat("./file1", 000) = 13 [pid 5072] creat("./file1", 000) = 14 [pid 5072] creat("./file1", 000) = 15 [pid 5072] creat("./file1", 000) = 16 [pid 5072] creat("./file1", 000) = 17 [pid 5072] creat("./file1", 000) = 18 [pid 5072] creat("./file1", 000) = 19 [pid 5072] creat("./file1", 000) = 20 [pid 5072] creat("./file1", 000) = 21 [pid 5072] creat("./file1", 000) = 22 [pid 5072] creat("./file1", 000) = 23 [pid 5072] creat("./file1", 000) = 24 [pid 5072] creat("./file1", 000) = 25 [pid 5072] creat("./file1", 000) = 26 [pid 5072] creat("./file1", 000) = 27 [pid 5072] creat("./file1", 000) = 28 [pid 5072] creat("./file1", 000) = 29 [pid 5072] creat("./file1", 000) = 30 [pid 5072] creat("./file1", 000) = 31 [pid 5072] creat("./file1", 000) = 32 [pid 5072] creat("./file1", 000) = 33 [pid 5072] creat("./file1", 000) = 34 [pid 5072] creat("./file1", 000) = 35 [pid 5072] creat("./file1", 000) = 36 [pid 5072] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5072] <... futex resumed>) = 1 [pid 5070] exit_group(0 [pid 5071] <... futex resumed>) = ? [pid 5070] <... exit_group resumed>) = ? [pid 5072] +++ exited with 0 +++ [pid 5071] +++ exited with 0 +++ [pid 5070] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./24/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./24/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./24/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./24/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/bus") = 0 umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached , child_tidptr=0x555555df95d0) = 5073 [pid 5073] set_robust_list(0x555555df95e0, 24) = 0 [pid 5073] chdir("./25") = 0 [pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5073] setpgid(0, 0) = 0 [pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5073] write(3, "1000", 4) = 4 [ 69.553074][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5073] close(3) = 0 [pid 5073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5073] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5073] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5073] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5074 attached , parent_tid=[5074], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5074 [pid 5074] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5074] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5074] <... futex resumed>) = 0 [pid 5073] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5074] memfd_create("syzkaller", 0) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5074] munmap(0x7f15abd22000, 524288) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5074] close(3) = 0 [pid 5074] mkdir("./bus", 0777) = 0 [pid 5074] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5074] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5074] chdir("./bus") = 0 [pid 5074] ioctl(4, LOOP_CLR_FD) = 0 [pid 5074] close(4) = 0 [pid 5074] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 0 [pid 5073] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5073] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5073] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5075 attached , parent_tid=[5075], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5075 [pid 5073] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] set_robust_list(0x7f15abda19e0, 24 [pid 5073] <... futex resumed>) = 0 [pid 5073] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5074] <... futex resumed>) = 1 [pid 5075] <... set_robust_list resumed>) = 0 [pid 5074] rename("./file1", "./bus") = 0 [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 4 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] <... creat resumed>) = 5 [pid 5074] rename("./file1", "./bus" [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 6 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 7 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 8 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] creat("./file1", 000 [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 9 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 10 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 11 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 12 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 13 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] creat("./file1", 000 [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 14 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 15 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] creat("./file1", 000 [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 16 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 17 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 18 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 69.633325][ T5074] loop0: detected capacity change from 0 to 1024 [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 19 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] <... creat resumed>) = 20 [pid 5074] rename("./file1", "./bus" [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] <... creat resumed>) = 21 [pid 5074] rename("./file1", "./bus" [pid 5075] creat("./file1", 000) = 22 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] creat("./file1", 000 [pid 5074] rename("./file1", "./bus" [pid 5075] <... creat resumed>) = 23 [pid 5075] creat("./file1", 000 [pid 5074] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5075] <... creat resumed>) = 24 [pid 5074] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5075] creat("./file1", 000 [pid 5074] <... futex resumed>) = 0 [pid 5074] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5075] <... creat resumed>) = 25 [pid 5075] creat("./file1", 000) = 26 [pid 5075] creat("./file1", 000) = 27 [pid 5075] creat("./file1", 000) = 28 [pid 5075] creat("./file1", 000) = 29 [pid 5075] creat("./file1", 000) = 30 [pid 5075] creat("./file1", 000) = 31 [pid 5075] creat("./file1", 000) = 32 [pid 5075] creat("./file1", 000) = 33 [pid 5075] creat("./file1", 000) = 34 [pid 5075] creat("./file1", 000) = 35 [pid 5075] creat("./file1", 000) = 36 [pid 5075] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5073] <... futex resumed>) = 0 [pid 5075] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5073] exit_group(0 [pid 5074] <... futex resumed>) = ? [pid 5073] <... exit_group resumed>) = ? [pid 5075] <... futex resumed>) = ? [pid 5074] +++ exited with 0 +++ [pid 5075] +++ exited with 0 +++ [pid 5073] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5073, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./25/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./25/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./25/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./25/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/bus") = 0 umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5076 ./strace-static-x86_64: Process 5076 attached [pid 5076] set_robust_list(0x555555df95e0, 24) = 0 [pid 5076] chdir("./26") = 0 [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setpgid(0, 0) = 0 [pid 5076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1000", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5076] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5076] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5076] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5077 attached , parent_tid=[5077], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5077 [pid 5076] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] set_robust_list(0x7f15b41429e0, 24 [pid 5076] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5077] <... set_robust_list resumed>) = 0 [ 69.719917][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5077] memfd_create("syzkaller", 0) = 3 [pid 5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5077] munmap(0x7f15abd22000, 524288) = 0 [pid 5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5077] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5077] close(3) = 0 [pid 5077] mkdir("./bus", 0777) = 0 [pid 5077] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5077] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5077] chdir("./bus") = 0 [pid 5077] ioctl(4, LOOP_CLR_FD) = 0 [pid 5077] close(4) = 0 [pid 5077] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] <... futex resumed>) = 0 [pid 5076] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5077] <... futex resumed>) = 0 [pid 5076] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rename("./file1", "./bus" [pid 5076] <... futex resumed>) = 0 [pid 5077] <... rename resumed>) = 0 [pid 5076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5077] rename("./file1", "./bus" [pid 5076] <... mmap resumed>) = 0x7f15abd81000 [pid 5076] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus" [pid 5076] <... mprotect resumed>) = 0 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5076] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5076] <... clone resumed>, parent_tid=[5078], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5078 [pid 5076] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5077] rename("./file1", "./bus" [pid 5076] <... futex resumed>) = 0 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5076] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus"./strace-static-x86_64: Process 5078 attached ) = -1 ENOENT (No such file or directory) [pid 5078] set_robust_list(0x7f15abda19e0, 24 [pid 5077] rename("./file1", "./bus" [pid 5078] <... set_robust_list resumed>) = 0 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] creat("./file1", 000 [pid 5077] rename("./file1", "./bus" [pid 5078] <... creat resumed>) = 4 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus" [pid 5078] creat("./file1", 000 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... creat resumed>) = 5 [pid 5077] rename("./file1", "./bus" [pid 5078] creat("./file1", 000 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... creat resumed>) = 6 [pid 5077] rename("./file1", "./bus" [pid 5078] creat("./file1", 000 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... creat resumed>) = 7 [pid 5077] rename("./file1", "./bus" [pid 5078] creat("./file1", 000 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... creat resumed>) = 8 [pid 5077] rename("./file1", "./bus" [pid 5078] creat("./file1", 000 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... creat resumed>) = 9 [pid 5077] rename("./file1", "./bus" [pid 5078] creat("./file1", 000 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] <... creat resumed>) = 10 [pid 5077] rename("./file1", "./bus" [ 69.791294][ T5077] loop0: detected capacity change from 0 to 1024 [pid 5078] creat("./file1", 000) = 11 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] creat("./file1", 000 [pid 5077] rename("./file1", "./bus" [pid 5078] <... creat resumed>) = 12 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5078] creat("./file1", 000 [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus" [pid 5078] <... creat resumed>) = 13 [pid 5077] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5077] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5078] creat("./file1", 000 [pid 5077] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5077] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5078] <... creat resumed>) = 14 [pid 5078] creat("./file1", 000) = 15 [pid 5078] creat("./file1", 000) = 16 [pid 5078] creat("./file1", 000) = 17 [pid 5078] creat("./file1", 000) = 18 [pid 5078] creat("./file1", 000) = 19 [pid 5078] creat("./file1", 000) = 20 [pid 5078] creat("./file1", 000 [pid 5076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5078] <... creat resumed>) = 21 [pid 5078] creat("./file1", 000) = 22 [pid 5078] creat("./file1", 000) = 23 [pid 5078] creat("./file1", 000) = 24 [pid 5078] creat("./file1", 000) = 25 [pid 5078] creat("./file1", 000) = 26 [pid 5078] creat("./file1", 000) = 27 [pid 5078] creat("./file1", 000) = 28 [pid 5078] creat("./file1", 000) = 29 [pid 5078] creat("./file1", 000) = 30 [pid 5078] creat("./file1", 000) = 31 [pid 5078] creat("./file1", 000) = 32 [pid 5078] creat("./file1", 000) = 33 [pid 5078] creat("./file1", 000) = 34 [pid 5078] creat("./file1", 000) = 35 [pid 5078] creat("./file1", 000) = 36 [pid 5078] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5078] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5076] exit_group(0 [pid 5077] <... futex resumed>) = ? [pid 5078] <... futex resumed>) = ? [pid 5076] <... exit_group resumed>) = ? [pid 5077] +++ exited with 0 +++ [pid 5078] +++ exited with 0 +++ [pid 5076] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5076, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./26/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./26/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./26/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./26/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/bus") = 0 umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x555555df95e0, 24) = 0 [pid 5079] chdir("./27") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5079] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5079] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5080], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5080 [pid 5079] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5080 attached [pid 5080] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5080] memfd_create("syzkaller", 0) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 69.904882][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5080] munmap(0x7f15abd22000, 524288) = 0 [pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5080] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5080] close(3) = 0 [pid 5080] mkdir("./bus", 0777) = 0 [pid 5080] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5080] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] chdir("./bus") = 0 [pid 5080] ioctl(4, LOOP_CLR_FD) = 0 [pid 5080] close(4) = 0 [pid 5080] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5079] <... futex resumed>) = 0 [pid 5080] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5079] <... futex resumed>) = 0 [pid 5080] rename("./file1", "./bus" [pid 5079] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5080] <... rename resumed>) = 0 [pid 5079] <... futex resumed>) = 0 [pid 5079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5080] rename("./file1", "./bus" [pid 5079] <... mmap resumed>) = 0x7f15abd81000 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5079] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5080] rename("./file1", "./bus" [pid 5079] <... mprotect resumed>) = 0 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5079] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus" [pid 5079] <... clone resumed>, parent_tid=[5081], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5081 [pid 5079] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5079] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus"./strace-static-x86_64: Process 5081 attached ) = -1 ENOENT (No such file or directory) [pid 5081] set_robust_list(0x7f15abda19e0, 24 [pid 5080] rename("./file1", "./bus" [pid 5081] <... set_robust_list resumed>) = 0 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5081] creat("./file1", 000 [pid 5080] rename("./file1", "./bus" [pid 5081] <... creat resumed>) = 4 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5081] creat("./file1", 000 [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus" [pid 5081] <... creat resumed>) = 5 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus" [pid 5081] creat("./file1", 000 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus" [pid 5081] <... creat resumed>) = 6 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus" [pid 5081] creat("./file1", 000 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus" [pid 5081] <... creat resumed>) = 7 [pid 5081] creat("./file1", 000 [pid 5080] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5081] <... creat resumed>) = 8 [pid 5081] creat("./file1", 000 [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5080] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5080] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... creat resumed>) = 9 [pid 5081] creat("./file1", 000) = 10 [ 69.969866][ T5080] loop0: detected capacity change from 0 to 1024 [pid 5081] creat("./file1", 000) = 11 [pid 5081] creat("./file1", 000) = 12 [pid 5081] creat("./file1", 000) = 13 [pid 5081] creat("./file1", 000) = 14 [pid 5081] creat("./file1", 000) = 15 [pid 5081] creat("./file1", 000) = 16 [pid 5081] creat("./file1", 000) = 17 [pid 5081] creat("./file1", 000) = 18 [pid 5081] creat("./file1", 000) = 19 [pid 5081] creat("./file1", 000) = 20 [pid 5081] creat("./file1", 000) = 21 [pid 5081] creat("./file1", 000) = 22 [pid 5081] creat("./file1", 000) = 23 [pid 5081] creat("./file1", 000) = 24 [pid 5081] creat("./file1", 000) = 25 [pid 5081] creat("./file1", 000) = 26 [pid 5081] creat("./file1", 000) = 27 [pid 5081] creat("./file1", 000) = 28 [pid 5081] creat("./file1", 000) = 29 [pid 5081] creat("./file1", 000) = 30 [pid 5081] creat("./file1", 000) = 31 [pid 5081] creat("./file1", 000) = 32 [pid 5081] creat("./file1", 000 [pid 5079] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5079] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... creat resumed>) = 33 [pid 5081] creat("./file1", 000) = 34 [pid 5081] creat("./file1", 000) = 35 [pid 5081] creat("./file1", 000) = 36 [pid 5081] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5079] exit_group(0 [pid 5080] <... futex resumed>) = ? [pid 5079] <... exit_group resumed>) = ? [pid 5080] +++ exited with 0 +++ [pid 5081] <... futex resumed>) = ? [pid 5081] +++ exited with 0 +++ [pid 5079] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./27/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./27/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./27/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./27/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/bus") = 0 umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5082 ./strace-static-x86_64: Process 5082 attached [pid 5082] set_robust_list(0x555555df95e0, 24) = 0 [pid 5082] chdir("./28") = 0 [pid 5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] setpgid(0, 0) = 0 [pid 5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5082] write(3, "1000", 4) = 4 [pid 5082] close(3) = 0 [pid 5082] symlink("/dev/binderfs", "./binderfs") = 0 [ 70.065597][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5082] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5082] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5083 attached [pid 5083] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5083] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... clone resumed>, parent_tid=[5083], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5083 [pid 5082] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5082] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] memfd_create("syzkaller", 0) = 3 [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5083] munmap(0x7f15abd22000, 524288) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5083] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5083] close(3) = 0 [pid 5083] mkdir("./bus", 0777) = 0 [pid 5083] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5083] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] chdir("./bus") = 0 [pid 5083] ioctl(4, LOOP_CLR_FD) = 0 [pid 5083] close(4) = 0 [pid 5083] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5082] <... futex resumed>) = 0 [pid 5083] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5083] <... futex resumed>) = 0 [pid 5083] rename("./file1", "./bus") = 0 [pid 5082] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rename("./file1", "./bus" [pid 5082] <... futex resumed>) = 0 [pid 5082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus" [pid 5082] <... mmap resumed>) = 0x7f15abd81000 [pid 5082] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus" [pid 5082] <... mprotect resumed>) = 0 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5082] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5082] <... clone resumed>, parent_tid=[5084], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5084 [pid 5082] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] rename("./file1", "./bus" [pid 5082] <... futex resumed>) = 0 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5082] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus"./strace-static-x86_64: Process 5084 attached ) = -1 ENOENT (No such file or directory) [pid 5084] set_robust_list(0x7f15abda19e0, 24 [pid 5083] rename("./file1", "./bus" [pid 5084] <... set_robust_list resumed>) = 0 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5084] creat("./file1", 000 [pid 5083] rename("./file1", "./bus" [pid 5084] <... creat resumed>) = 4 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus" [pid 5084] creat("./file1", 000 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5084] <... creat resumed>) = 5 [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5084] creat("./file1", 000 [pid 5083] rename("./file1", "./bus" [pid 5084] <... creat resumed>) = 6 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5084] creat("./file1", 000 [pid 5083] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5084] <... creat resumed>) = 7 [pid 5083] rename("./file1", "./bus" [pid 5084] creat("./file1", 000) = 8 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5084] creat("./file1", 000 [pid 5083] rename("./file1", "./bus" [pid 5084] <... creat resumed>) = 9 [pid 5084] creat("./file1", 000 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5084] <... creat resumed>) = 10 [pid 5083] rename("./file1", "./bus" [pid 5084] creat("./file1", 000) = 11 [pid 5083] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5084] creat("./file1", 000) = 12 [pid 5083] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] creat("./file1", 000 [pid 5083] <... futex resumed>) = 0 [pid 5084] <... creat resumed>) = 13 [ 70.143764][ T5083] loop0: detected capacity change from 0 to 1024 [pid 5083] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] creat("./file1", 000) = 14 [pid 5084] creat("./file1", 000) = 15 [pid 5084] creat("./file1", 000) = 16 [pid 5084] creat("./file1", 000) = 17 [pid 5084] creat("./file1", 000) = 18 [pid 5084] creat("./file1", 000) = 19 [pid 5084] creat("./file1", 000) = 20 [pid 5084] creat("./file1", 000) = 21 [pid 5084] creat("./file1", 000) = 22 [pid 5084] creat("./file1", 000) = 23 [pid 5084] creat("./file1", 000) = 24 [pid 5084] creat("./file1", 000) = 25 [pid 5084] creat("./file1", 000) = 26 [pid 5084] creat("./file1", 000) = 27 [pid 5084] creat("./file1", 000) = 28 [pid 5084] creat("./file1", 000) = 29 [pid 5084] creat("./file1", 000) = 30 [pid 5082] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] creat("./file1", 000) = 31 [pid 5084] creat("./file1", 000) = 32 [pid 5084] creat("./file1", 000) = 33 [pid 5084] creat("./file1", 000) = 34 [pid 5084] creat("./file1", 000) = 35 [pid 5084] creat("./file1", 000) = 36 [pid 5084] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] exit_group(0 [pid 5084] <... futex resumed>) = ? [pid 5083] <... futex resumed>) = ? [pid 5082] <... exit_group resumed>) = ? [pid 5083] +++ exited with 0 +++ [pid 5084] +++ exited with 0 +++ [pid 5082] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./28/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./28/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./28/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./28/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/bus") = 0 umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] set_robust_list(0x555555df95e0, 24) = 0 [pid 5085] chdir("./29") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5085] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5085] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5086 attached , parent_tid=[5086], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5086 [pid 5085] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5086] set_robust_list(0x7f15b41429e0, 24 [pid 5085] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5086] <... set_robust_list resumed>) = 0 [pid 5086] memfd_create("syzkaller", 0) = 3 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5086] munmap(0x7f15abd22000, 524288) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 70.235742][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5086] close(3) = 0 [pid 5086] mkdir("./bus", 0777) = 0 [pid 5086] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5086] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5086] chdir("./bus") = 0 [pid 5086] ioctl(4, LOOP_CLR_FD) = 0 [pid 5086] close(4) = 0 [pid 5086] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... futex resumed>) = 0 [pid 5085] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5086] <... futex resumed>) = 1 [pid 5085] <... mmap resumed>) = 0x7f15abd81000 [pid 5086] rename("./file1", "./bus" [pid 5085] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] <... rename resumed>) = 0 [pid 5085] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5087], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5087 [pid 5085] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5087 attached [pid 5085] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5087] set_robust_list(0x7f15abda19e0, 24 [pid 5086] rename("./file1", "./bus" [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 4 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000) = 5 [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 6 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 7 [pid 5086] rename("./file1", "./bus" [pid 5087] creat("./file1", 000) = 8 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 9 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 10 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 11 [pid 5086] rename("./file1", "./bus" [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 12 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 13 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 14 [pid 5086] rename("./file1", "./bus" [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 70.286281][ T5086] loop0: detected capacity change from 0 to 1024 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 15 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 16 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 17 [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 18 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 19 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 20 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 21 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 22 [pid 5086] rename("./file1", "./bus" [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 23 [pid 5086] rename("./file1", "./bus" [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 24 [pid 5086] rename("./file1", "./bus" [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 25 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 26 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 27 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 28 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 29 [pid 5087] creat("./file1", 000 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 30 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 31 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus" [pid 5087] <... creat resumed>) = 32 [pid 5086] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5087] <... creat resumed>) = 33 [pid 5086] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5087] creat("./file1", 000 [pid 5086] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] <... creat resumed>) = 34 [pid 5086] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5087] creat("./file1", 000) = 35 [pid 5087] creat("./file1", 000) = 36 [pid 5087] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] <... futex resumed>) = 0 [pid 5087] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] exit_group(0 [pid 5086] <... futex resumed>) = ? [pid 5085] <... exit_group resumed>) = ? [pid 5087] <... futex resumed>) = ? [pid 5086] +++ exited with 0 +++ [pid 5087] +++ exited with 0 +++ [pid 5085] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./29/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./29/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./29/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./29/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/bus") = 0 umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./29/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached [pid 5088] set_robust_list(0x555555df95e0, 24) = 0 [pid 5088] chdir("./30") = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5088] setpgid(0, 0) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5088] write(3, "1000", 4) = 4 [pid 5088] close(3) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5088] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5088] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5088] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5089], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5089 [pid 4996] <... clone resumed>, child_tidptr=0x555555df95d0) = 5088 [pid 5088] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5089 attached [pid 5089] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5089] memfd_create("syzkaller", 0) = 3 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 70.383448][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5089] munmap(0x7f15abd22000, 524288) = 0 [pid 5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5089] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5089] close(3) = 0 [pid 5089] mkdir("./bus", 0777) = 0 [pid 5089] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5089] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5089] chdir("./bus") = 0 [pid 5089] ioctl(4, LOOP_CLR_FD) = 0 [pid 5089] close(4) = 0 [pid 5089] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5088] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5089] rename("./file1", "./bus" [pid 5088] <... mmap resumed>) = 0x7f15abd81000 [pid 5088] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5088] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5090], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5090 [pid 5088] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5088] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... rename resumed>) = 0 [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus"./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5090] creat("./file1", 000) = 4 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5090] creat("./file1", 000) = 5 [pid 5090] creat("./file1", 000) = 6 [pid 5090] creat("./file1", 000) = 7 [pid 5090] creat("./file1", 000 [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 8 [pid 5090] creat("./file1", 000) = 9 [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 10 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 11 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5090] creat("./file1", 000 [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 12 [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [ 70.446798][ T5089] loop0: detected capacity change from 0 to 1024 [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 13 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 14 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 15 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] <... creat resumed>) = 16 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus" [pid 5090] creat("./file1", 000 [pid 5089] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5089] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5090] <... creat resumed>) = 17 [pid 5090] creat("./file1", 000 [pid 5089] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... creat resumed>) = 18 [pid 5090] creat("./file1", 000) = 19 [pid 5090] creat("./file1", 000) = 20 [pid 5090] creat("./file1", 000) = 21 [pid 5090] creat("./file1", 000) = 22 [pid 5090] creat("./file1", 000) = 23 [pid 5090] creat("./file1", 000) = 24 [pid 5090] creat("./file1", 000) = 25 [pid 5090] creat("./file1", 000) = 26 [pid 5090] creat("./file1", 000) = 27 [pid 5090] creat("./file1", 000) = 28 [pid 5090] creat("./file1", 000) = 29 [pid 5090] creat("./file1", 000) = 30 [pid 5090] creat("./file1", 000) = 31 [pid 5090] creat("./file1", 000) = 32 [pid 5090] creat("./file1", 000) = 33 [pid 5090] creat("./file1", 000) = 34 [pid 5090] creat("./file1", 000) = 35 [pid 5090] creat("./file1", 000) = 36 [pid 5090] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5088] <... futex resumed>) = 0 [pid 5090] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5088] exit_group(0 [pid 5090] <... futex resumed>) = ? [pid 5089] <... futex resumed>) = ? [pid 5088] <... exit_group resumed>) = ? [pid 5090] +++ exited with 0 +++ [pid 5089] +++ exited with 0 +++ [pid 5088] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./30/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./30/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./30/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./30/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./30/bus") = 0 umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./30/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./30") = 0 mkdir("./31", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5091 ./strace-static-x86_64: Process 5091 attached [pid 5091] set_robust_list(0x555555df95e0, 24) = 0 [pid 5091] chdir("./31") = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5091] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5091] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5091] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5092 attached , parent_tid=[5092], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5092 [pid 5092] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5091] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5092] memfd_create("syzkaller", 0) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5092] munmap(0x7f15abd22000, 524288) = 0 [ 70.537501][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5092] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5092] close(3) = 0 [pid 5092] mkdir("./bus", 0777) = 0 [pid 5092] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5092] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5092] chdir("./bus") = 0 [pid 5092] ioctl(4, LOOP_CLR_FD) = 0 [pid 5092] close(4) = 0 [pid 5092] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = 0 [pid 5091] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] <... futex resumed>) = 1 [pid 5091] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5092] rename("./file1", "./bus" [pid 5091] <... mmap resumed>) = 0x7f15abd81000 [pid 5092] <... rename resumed>) = 0 [pid 5091] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5092] rename("./file1", "./bus" [pid 5091] <... mprotect resumed>) = 0 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5091] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5093 attached [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5091] <... clone resumed>, parent_tid=[5093], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5093 [pid 5092] rename("./file1", "./bus" [pid 5091] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5091] <... futex resumed>) = 0 [pid 5092] rename("./file1", "./bus" [pid 5091] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5093] set_robust_list(0x7f15abda19e0, 24 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 4 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 5 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 6 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 7 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 8 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 9 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5093] <... creat resumed>) = 10 [ 70.587943][ T5092] loop0: detected capacity change from 0 to 1024 [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 11 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 12 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 13 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 14 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 15 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] creat("./file1", 000 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 16 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] rename("./file1", "./bus" [pid 5093] <... creat resumed>) = 17 [pid 5092] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5093] creat("./file1", 000 [pid 5092] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5092] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... creat resumed>) = 18 [pid 5093] creat("./file1", 000) = 19 [pid 5093] creat("./file1", 000) = 20 [pid 5093] creat("./file1", 000) = 21 [pid 5093] creat("./file1", 000) = 22 [pid 5093] creat("./file1", 000) = 23 [pid 5093] creat("./file1", 000) = 24 [pid 5093] creat("./file1", 000) = 25 [pid 5093] creat("./file1", 000) = 26 [pid 5093] creat("./file1", 000) = 27 [pid 5093] creat("./file1", 000) = 28 [pid 5093] creat("./file1", 000) = 29 [pid 5093] creat("./file1", 000) = 30 [pid 5093] creat("./file1", 000) = 31 [pid 5093] creat("./file1", 000) = 32 [pid 5093] creat("./file1", 000 [pid 5091] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5093] <... creat resumed>) = 33 [pid 5093] creat("./file1", 000) = 34 [pid 5093] creat("./file1", 000) = 35 [pid 5093] creat("./file1", 000) = 36 [pid 5093] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5093] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] exit_group(0 [pid 5093] <... futex resumed>) = ? [pid 5092] <... futex resumed>) = ? [pid 5091] <... exit_group resumed>) = ? [pid 5093] +++ exited with 0 +++ [pid 5092] +++ exited with 0 +++ [pid 5091] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./31/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./31/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./31/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./31/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./31/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./31/bus") = 0 umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./31/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./31") = 0 mkdir("./32", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5094 ./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x555555df95e0, 24) = 0 [pid 5094] chdir("./32") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5094] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5095 attached , parent_tid=[5095], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5095 [pid 5095] set_robust_list(0x7f15b41429e0, 24 [pid 5094] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] <... set_robust_list resumed>) = 0 [pid 5095] memfd_create("syzkaller", 0) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 70.692776][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5095] munmap(0x7f15abd22000, 524288) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5095] close(3) = 0 [pid 5095] mkdir("./bus", 0777) = 0 [pid 5095] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5095] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5095] chdir("./bus") = 0 [pid 5095] ioctl(4, LOOP_CLR_FD) = 0 [pid 5095] close(4) = 0 [pid 5095] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5094] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5095] rename("./file1", "./bus" [pid 5094] <... mmap resumed>) = 0x7f15abd81000 [pid 5094] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5096], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5096 [pid 5094] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] <... rename resumed>) = 0 [pid 5094] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5096] creat("./file1", 000) = 4 [pid 5096] creat("./file1", 000) = 5 [pid 5096] creat("./file1", 000) = 6 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 7 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 8 [pid 5096] creat("./file1", 000) = 9 [pid 5096] creat("./file1", 000) = 10 [pid 5095] rename("./file1", "./bus" [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 11 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 12 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 13 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] creat("./file1", 000) = 14 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 15 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] creat("./file1", 000) = 16 [pid 5095] rename("./file1", "./bus" [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 17 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 18 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 19 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 20 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 21 [pid 5096] creat("./file1", 000) = 22 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 23 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 24 [pid 5095] rename("./file1", "./bus" [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 25 [ 70.756505][ T5095] loop0: detected capacity change from 0 to 1024 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 26 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 27 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 28 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 29 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 30 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 31 [pid 5095] rename("./file1", "./bus" [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 32 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 33 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 34 [pid 5096] creat("./file1", 000 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5096] <... creat resumed>) = 35 [pid 5096] creat("./file1", 000 [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus" [pid 5096] <... creat resumed>) = 36 [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5096] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5095] rename("./file1", "./bus" [pid 5096] <... futex resumed>) = 1 [pid 5096] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5095] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5095] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] exit_group(0) = ? [pid 5095] +++ exited with 0 +++ [pid 5096] <... futex resumed>) = ? [pid 5096] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./32/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./32/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./32/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./32/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./32/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./32/bus") = 0 umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./32/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./32") = 0 mkdir("./33", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5097 attached , child_tidptr=0x555555df95d0) = 5097 [pid 5097] set_robust_list(0x555555df95e0, 24) = 0 [pid 5097] chdir("./33") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [ 70.840635][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5097] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5097] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5097] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5098] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] <... clone resumed>, parent_tid=[5098], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5098 [pid 5097] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5098] munmap(0x7f15abd22000, 524288) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5098] close(3) = 0 [pid 5098] mkdir("./bus", 0777) = 0 [pid 5098] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5098] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5098] chdir("./bus") = 0 [pid 5098] ioctl(4, LOOP_CLR_FD) = 0 [pid 5098] close(4) = 0 [pid 5098] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5097] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5098] rename("./file1", "./bus" [pid 5097] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5097] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5099], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5099 [pid 5097] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] <... rename resumed>) = 0 [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus"./strace-static-x86_64: Process 5099 attached ) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5099] set_robust_list(0x7f15abda19e0, 24 [pid 5098] rename("./file1", "./bus" [pid 5099] <... set_robust_list resumed>) = 0 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] creat("./file1", 000 [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 4 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 5 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] creat("./file1", 000 [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 6 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000) = 7 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] creat("./file1", 000 [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 8 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000) = 9 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] creat("./file1", 000 [pid 5098] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 10 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] <... creat resumed>) = 11 [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 70.923381][ T5098] loop0: detected capacity change from 0 to 1024 [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 12 [pid 5099] creat("./file1", 000 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] <... creat resumed>) = 13 [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000) = 14 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] creat("./file1", 000 [pid 5098] rename("./file1", "./bus" [pid 5099] <... creat resumed>) = 15 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5098] rename("./file1", "./bus" [pid 5099] creat("./file1", 000) = 16 [pid 5098] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5099] creat("./file1", 000 [pid 5098] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... creat resumed>) = 17 [pid 5098] <... futex resumed>) = 0 [pid 5098] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] creat("./file1", 000) = 18 [pid 5099] creat("./file1", 000) = 19 [pid 5099] creat("./file1", 000) = 20 [pid 5099] creat("./file1", 000) = 21 [pid 5099] creat("./file1", 000) = 22 [pid 5099] creat("./file1", 000) = 23 [pid 5099] creat("./file1", 000) = 24 [pid 5099] creat("./file1", 000) = 25 [pid 5099] creat("./file1", 000) = 26 [pid 5099] creat("./file1", 000) = 27 [pid 5099] creat("./file1", 000) = 28 [pid 5099] creat("./file1", 000 [pid 5097] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5099] <... creat resumed>) = 29 [pid 5099] creat("./file1", 000) = 30 [pid 5099] creat("./file1", 000) = 31 [pid 5099] creat("./file1", 000) = 32 [pid 5099] creat("./file1", 000) = 33 [pid 5099] creat("./file1", 000) = 34 [pid 5099] creat("./file1", 000) = 35 [pid 5099] creat("./file1", 000) = 36 [pid 5099] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] exit_group(0 [pid 5098] <... futex resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5098] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./33/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./33/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./33/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./33/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./33/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./33/bus") = 0 umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./33/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./33") = 0 mkdir("./34", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5100 ./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x555555df95e0, 24) = 0 [pid 5100] chdir("./34") = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5100] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5100] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5100] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5101], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5101 [pid 5100] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5101 attached [pid 5101] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5101] memfd_create("syzkaller", 0) = 3 [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5101] munmap(0x7f15abd22000, 524288) = 0 [pid 5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 71.025712][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5101] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5101] close(3) = 0 [pid 5101] mkdir("./bus", 0777) = 0 [pid 5101] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5101] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./bus") = 0 [pid 5101] ioctl(4, LOOP_CLR_FD) = 0 [pid 5101] close(4) = 0 [pid 5101] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] <... futex resumed>) = 0 [pid 5101] <... futex resumed>) = 1 [pid 5101] rename("./file1", "./bus" [pid 5100] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5100] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5100] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5102], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5102 [pid 5100] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5100] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... rename resumed>) = 0 [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus"./strace-static-x86_64: Process 5102 attached ) = -1 ENOENT (No such file or directory) [pid 5102] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5102] creat("./file1", 000 [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 4 [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5102] <... creat resumed>) = 5 [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 71.080293][ T5101] loop0: detected capacity change from 0 to 1024 [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 6 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5102] creat("./file1", 000 [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 7 [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5102] <... creat resumed>) = 8 [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 9 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5102] creat("./file1", 000 [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 10 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000) = 11 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 12 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 13 [pid 5102] creat("./file1", 000 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5102] <... creat resumed>) = 14 [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000) = 15 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5101] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5102] creat("./file1", 000 [pid 5101] rename("./file1", "./bus" [pid 5102] <... creat resumed>) = 16 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5102] creat("./file1", 000) = 17 [pid 5101] rename("./file1", "./bus" [pid 5102] creat("./file1", 000) = 18 [pid 5101] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5102] creat("./file1", 000) = 19 [pid 5101] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] creat("./file1", 000 [pid 5101] <... futex resumed>) = 0 [pid 5100] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5101] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] <... creat resumed>) = 20 [pid 5102] creat("./file1", 000) = 21 [pid 5102] creat("./file1", 000) = 22 [pid 5102] creat("./file1", 000) = 23 [pid 5102] creat("./file1", 000) = 24 [pid 5102] creat("./file1", 000) = 25 [pid 5102] creat("./file1", 000) = 26 [pid 5102] creat("./file1", 000) = 27 [pid 5102] creat("./file1", 000) = 28 [pid 5102] creat("./file1", 000) = 29 [pid 5102] creat("./file1", 000) = 30 [pid 5102] creat("./file1", 000) = 31 [pid 5102] creat("./file1", 000) = 32 [pid 5102] creat("./file1", 000) = 33 [pid 5102] creat("./file1", 000) = 34 [pid 5102] creat("./file1", 000) = 35 [pid 5102] creat("./file1", 000) = 36 [pid 5102] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5102] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5100] exit_group(0 [pid 5101] <... futex resumed>) = ? [pid 5100] <... exit_group resumed>) = ? [pid 5102] <... futex resumed>) = ? [pid 5101] +++ exited with 0 +++ [pid 5102] +++ exited with 0 +++ [pid 5100] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./34/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./34/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./34/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./34/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./34/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./34/bus") = 0 umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./34/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./34") = 0 mkdir("./35", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x555555df95e0, 24 [pid 4996] <... clone resumed>, child_tidptr=0x555555df95d0) = 5103 [pid 5103] <... set_robust_list resumed>) = 0 [pid 5103] chdir("./35") = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5103] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 71.188395][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5103] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5104 attached , parent_tid=[5104], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5104 [pid 5104] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5104] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5103] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] memfd_create("syzkaller", 0) = 3 [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5104] munmap(0x7f15abd22000, 524288) = 0 [pid 5104] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5104] close(3) = 0 [pid 5104] mkdir("./bus", 0777) = 0 [pid 5104] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5104] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5104] chdir("./bus") = 0 [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 5104] close(4) = 0 [pid 5104] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5104] rename("./file1", "./bus" [pid 5103] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5103] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5103] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5104] <... rename resumed>) = 0 [pid 5103] <... clone resumed>, parent_tid=[5105], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5105 [pid 5104] rename("./file1", "./bus" [pid 5103] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5103] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5105 attached [pid 5104] rename("./file1", "./bus" [pid 5105] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 4 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] <... creat resumed>) = 5 [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] <... creat resumed>) = 6 [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5105] <... creat resumed>) = 7 [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 8 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 9 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 10 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 11 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 12 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 13 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 14 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 15 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 16 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 17 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 18 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 19 [pid 5105] creat("./file1", 000 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5105] <... creat resumed>) = 20 [ 71.264413][ T5104] loop0: detected capacity change from 0 to 1024 [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5105] <... creat resumed>) = 21 [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 22 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 23 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 24 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 25 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 26 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 27 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 28 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5105] creat("./file1", 000 [pid 5104] rename("./file1", "./bus" [pid 5105] <... creat resumed>) = 29 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 30 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] rename("./file1", "./bus" [pid 5105] creat("./file1", 000) = 31 [pid 5104] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5104] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] creat("./file1", 000 [pid 5104] <... futex resumed>) = 0 [pid 5105] <... creat resumed>) = 32 [pid 5104] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] creat("./file1", 000) = 33 [pid 5105] creat("./file1", 000) = 34 [pid 5105] creat("./file1", 000) = 35 [pid 5105] creat("./file1", 000) = 36 [pid 5105] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5103] <... futex resumed>) = 0 [pid 5105] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] exit_group(0 [pid 5104] <... futex resumed>) = ? [pid 5103] <... exit_group resumed>) = ? [pid 5104] +++ exited with 0 +++ [pid 5105] <... futex resumed>) = ? [pid 5105] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./35/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./35/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./35/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./35/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./35/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./35/bus") = 0 umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./35/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./35") = 0 mkdir("./36", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5106 ./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x555555df95e0, 24) = 0 [pid 5106] chdir("./36") = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5106] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5107], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5107 ./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5107] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5107] <... futex resumed>) = 0 [pid 5106] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5107] munmap(0x7f15abd22000, 524288) = 0 [pid 5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 71.350081][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5107] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5107] close(3) = 0 [pid 5107] mkdir("./bus", 0777) = 0 [pid 5107] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5107] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5107] chdir("./bus") = 0 [pid 5107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5107] close(4) = 0 [pid 5107] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5106] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5108], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5108 [pid 5106] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... futex resumed>) = 1 [pid 5107] rename("./file1", "./bus") = 0 [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus"./strace-static-x86_64: Process 5108 attached [pid 5108] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5108] creat("./file1", 000) = 4 [pid 5108] creat("./file1", 000 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 5 [pid 5108] creat("./file1", 000 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] <... creat resumed>) = 6 [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 7 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5108] <... creat resumed>) = 8 [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 9 [pid 5108] creat("./file1", 000) = 10 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 11 [pid 5108] creat("./file1", 000) = 12 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 13 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 14 [pid 5108] creat("./file1", 000 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] <... creat resumed>) = 15 [pid 5108] creat("./file1", 000) = 16 [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 17 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 18 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 19 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 20 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000) = 21 [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 22 [pid 5108] creat("./file1", 000) = 23 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5108] <... creat resumed>) = 24 [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 25 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 26 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [ 71.409890][ T5107] loop0: detected capacity change from 0 to 1024 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 27 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] <... creat resumed>) = 28 [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 29 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 30 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000) = 31 [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 32 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 33 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] creat("./file1", 000) = 34 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 35 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5108] creat("./file1", 000 [pid 5107] rename("./file1", "./bus" [pid 5108] <... creat resumed>) = 36 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus" [pid 5108] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5106] <... futex resumed>) = 0 [pid 5107] rename("./file1", "./bus" [pid 5108] <... futex resumed>) = 1 [pid 5108] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5107] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5107] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5107] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] exit_group(0 [pid 5108] <... futex resumed>) = ? [pid 5107] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5108] +++ exited with 0 +++ [pid 5107] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./36/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./36/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./36/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./36/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./36/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./36/bus") = 0 umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./36/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./36") = 0 mkdir("./37", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5109 ./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x555555df95e0, 24) = 0 [pid 5109] chdir("./37") = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 71.492875][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 [pid 5109] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5109] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5109] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5109] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5110 attached , parent_tid=[5110], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5110 [pid 5109] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5109] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5110] memfd_create("syzkaller", 0) = 3 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5110] munmap(0x7f15abd22000, 524288) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5110] close(3) = 0 [pid 5110] mkdir("./bus", 0777) = 0 [pid 5110] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5110] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5110] chdir("./bus") = 0 [pid 5110] ioctl(4, LOOP_CLR_FD) = 0 [pid 5110] close(4) = 0 [pid 5110] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] <... futex resumed>) = 0 [pid 5109] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 0 [pid 5109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5110] rename("./file1", "./bus" [pid 5109] <... mmap resumed>) = 0x7f15abd81000 [pid 5109] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5109] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5111], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5111 [pid 5109] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5109] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5110] <... rename resumed>) = 0 [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus"./strace-static-x86_64: Process 5111 attached ) = -1 ENOENT (No such file or directory) [pid 5111] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5110] rename("./file1", "./bus" [pid 5111] creat("./file1", 000) = 4 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 5 [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 6 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 7 [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 8 [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 9 [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 10 [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 11 [pid 5110] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 12 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 13 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000) = 14 [pid 5111] creat("./file1", 000) = 15 [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 16 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 17 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 18 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 19 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 20 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 21 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [ 71.579618][ T5110] loop0: detected capacity change from 0 to 1024 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 22 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 23 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 24 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 25 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] rename("./file1", "./bus" [pid 5111] <... creat resumed>) = 26 [pid 5110] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5111] creat("./file1", 000 [pid 5110] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... creat resumed>) = 27 [pid 5110] <... futex resumed>) = 0 [pid 5111] creat("./file1", 000 [pid 5110] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] <... creat resumed>) = 28 [pid 5111] creat("./file1", 000) = 29 [pid 5111] creat("./file1", 000) = 30 [pid 5111] creat("./file1", 000) = 31 [pid 5111] creat("./file1", 000) = 32 [pid 5111] creat("./file1", 000) = 33 [pid 5111] creat("./file1", 000) = 34 [pid 5111] creat("./file1", 000) = 35 [pid 5111] creat("./file1", 000) = 36 [pid 5111] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5109] <... futex resumed>) = 0 [pid 5111] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] exit_group(0 [pid 5111] <... futex resumed>) = ? [pid 5110] <... futex resumed>) = ? [pid 5109] <... exit_group resumed>) = ? [pid 5110] +++ exited with 0 +++ [pid 5111] +++ exited with 0 +++ [pid 5109] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./37/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./37/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./37/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./37/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./37/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./37/bus") = 0 umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./37/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./37") = 0 mkdir("./38", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5112 ./strace-static-x86_64: Process 5112 attached [pid 5112] set_robust_list(0x555555df95e0, 24) = 0 [pid 5112] chdir("./38") = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 [pid 5112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5112] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5112] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5113 attached , parent_tid=[5113], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5113 [pid 5113] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5113] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] <... futex resumed>) = 0 [pid 5112] <... futex resumed>) = 1 [pid 5113] memfd_create("syzkaller", 0 [pid 5112] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] <... memfd_create resumed>) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 71.663667][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5113] munmap(0x7f15abd22000, 524288) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5113] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5113] close(3) = 0 [pid 5113] mkdir("./bus", 0777) = 0 [pid 5113] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5113] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5113] chdir("./bus") = 0 [pid 5113] ioctl(4, LOOP_CLR_FD) = 0 [pid 5113] close(4) = 0 [pid 5113] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5112] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5113] rename("./file1", "./bus" [pid 5112] <... mmap resumed>) = 0x7f15abd81000 [pid 5112] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5112] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5114], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5114 [pid 5112] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... rename resumed>) = 0 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5114 attached [pid 5114] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5113] rename("./file1", "./bus" [pid 5114] creat("./file1", 000 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] <... creat resumed>) = 4 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000) = 5 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000) = 6 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000) = 7 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus" [pid 5114] creat("./file1", 000 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] <... creat resumed>) = 8 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000) = 9 [pid 5113] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000) = 10 [pid 5113] rename("./file1", "./bus" [pid 5114] creat("./file1", 000 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 11 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 12 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 13 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 14 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 15 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 16 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] rename("./file1", "./bus" [pid 5114] <... creat resumed>) = 17 [pid 5113] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5114] creat("./file1", 000 [pid 5113] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... creat resumed>) = 18 [pid 5113] <... futex resumed>) = 0 [pid 5114] creat("./file1", 000 [pid 5113] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5114] <... creat resumed>) = 19 [pid 5114] creat("./file1", 000) = 20 [pid 5114] creat("./file1", 000) = 21 [pid 5114] creat("./file1", 000) = 22 [pid 5114] creat("./file1", 000) = 23 [pid 5114] creat("./file1", 000) = 24 [pid 5114] creat("./file1", 000) = 25 [pid 5114] creat("./file1", 000) = 26 [pid 5114] creat("./file1", 000) = 27 [pid 5114] creat("./file1", 000) = 28 [pid 5114] creat("./file1", 000) = 29 [pid 5114] creat("./file1", 000) = 30 [pid 5114] creat("./file1", 000) = 31 [pid 5114] creat("./file1", 000) = 32 [pid 5114] creat("./file1", 000) = 33 [ 71.734029][ T5113] loop0: detected capacity change from 0 to 1024 [pid 5114] creat("./file1", 000) = 34 [pid 5114] creat("./file1", 000) = 35 [pid 5114] creat("./file1", 000) = 36 [pid 5114] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5112] <... futex resumed>) = 0 [pid 5114] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] exit_group(0 [pid 5113] <... futex resumed>) = ? [pid 5112] <... exit_group resumed>) = ? [pid 5113] +++ exited with 0 +++ [pid 5114] <... futex resumed>) = ? [pid 5114] +++ exited with 0 +++ [pid 5112] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./38/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./38/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./38/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./38/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./38/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./38/bus") = 0 umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./38/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./38") = 0 mkdir("./39", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5115 ./strace-static-x86_64: Process 5115 attached [pid 5115] set_robust_list(0x555555df95e0, 24) = 0 [pid 5115] chdir("./39") = 0 [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5115] setpgid(0, 0) = 0 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5115] write(3, "1000", 4) = 4 [pid 5115] close(3) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5115] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5115] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5115] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5116] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... clone resumed>, parent_tid=[5116], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5116 [pid 5115] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5115] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 71.803456][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5116] munmap(0x7f15abd22000, 524288) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5116] close(3) = 0 [pid 5116] mkdir("./bus", 0777) = 0 [pid 5116] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5116] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5116] chdir("./bus") = 0 [pid 5116] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] close(4) = 0 [pid 5116] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] <... futex resumed>) = 0 [pid 5115] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5116] <... futex resumed>) = 0 [pid 5116] rename("./file1", "./bus" [pid 5115] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5115] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5116] <... rename resumed>) = 0 [pid 5116] rename("./file1", "./bus" [pid 5115] <... mprotect resumed>) = 0 [pid 5115] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5115] <... clone resumed>, parent_tid=[5117], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5117 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus"./strace-static-x86_64: Process 5117 attached ) = -1 ENOENT (No such file or directory) [pid 5117] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5117] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5116] rename("./file1", "./bus" [pid 5115] <... futex resumed>) = 0 [pid 5117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5115] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000 [pid 5116] rename("./file1", "./bus" [pid 5117] <... creat resumed>) = 4 [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus" [pid 5117] creat("./file1", 000 [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5117] <... creat resumed>) = 5 [pid 5117] creat("./file1", 000 [pid 5116] rename("./file1", "./bus" [pid 5117] <... creat resumed>) = 6 [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5116] rename("./file1", "./bus" [pid 5117] creat("./file1", 000 [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5117] <... creat resumed>) = 7 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000) = 8 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000) = 9 [ 71.875035][ T5116] loop0: detected capacity change from 0 to 1024 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000) = 10 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000) = 11 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000) = 12 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000) = 13 [pid 5116] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000 [pid 5116] rename("./file1", "./bus" [pid 5117] <... creat resumed>) = 14 [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000 [pid 5116] rename("./file1", "./bus" [pid 5117] <... creat resumed>) = 15 [pid 5116] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5117] creat("./file1", 000 [pid 5116] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... creat resumed>) = 16 [pid 5116] <... futex resumed>) = 0 [pid 5117] creat("./file1", 000 [pid 5116] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] <... creat resumed>) = 17 [pid 5117] creat("./file1", 000) = 18 [pid 5117] creat("./file1", 000) = 19 [pid 5117] creat("./file1", 000) = 20 [pid 5117] creat("./file1", 000) = 21 [pid 5117] creat("./file1", 000) = 22 [pid 5117] creat("./file1", 000) = 23 [pid 5117] creat("./file1", 000) = 24 [pid 5117] creat("./file1", 000) = 25 [pid 5117] creat("./file1", 000) = 26 [pid 5117] creat("./file1", 000) = 27 [pid 5117] creat("./file1", 000) = 28 [pid 5117] creat("./file1", 000) = 29 [pid 5117] creat("./file1", 000) = 30 [pid 5117] creat("./file1", 000) = 31 [pid 5117] creat("./file1", 000) = 32 [pid 5117] creat("./file1", 000) = 33 [pid 5117] creat("./file1", 000) = 34 [pid 5117] creat("./file1", 000) = 35 [pid 5117] creat("./file1", 000) = 36 [pid 5117] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5115] <... futex resumed>) = 0 [pid 5117] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5115] exit_group(0 [pid 5116] <... futex resumed>) = ? [pid 5117] <... futex resumed>) = ? [pid 5115] <... exit_group resumed>) = ? [pid 5116] +++ exited with 0 +++ [pid 5117] +++ exited with 0 +++ [pid 5115] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./39/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./39/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./39/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./39/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./39/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./39/bus") = 0 umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./39/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./39") = 0 mkdir("./40", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5118 attached , child_tidptr=0x555555df95d0) = 5118 [pid 5118] set_robust_list(0x555555df95e0, 24) = 0 [pid 5118] chdir("./40") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5118] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5118] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5118] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5119], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5119 [ 71.970906][ T1240] hfsplus: b-tree write err: -5, ino 8 ./strace-static-x86_64: Process 5119 attached [pid 5119] set_robust_list(0x7f15b41429e0, 24 [pid 5118] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... set_robust_list resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5119] munmap(0x7f15abd22000, 524288) = 0 [pid 5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5119] close(3) = 0 [pid 5119] mkdir("./bus", 0777) = 0 [pid 5119] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5119] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5119] chdir("./bus") = 0 [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] close(4) = 0 [pid 5119] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5119] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... futex resumed>) = 0 [pid 5118] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... futex resumed>) = 0 [pid 5118] <... futex resumed>) = 1 [pid 5119] rename("./file1", "./bus" [pid 5118] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... rename resumed>) = 0 [pid 5118] <... futex resumed>) = 0 [pid 5119] rename("./file1", "./bus" [pid 5118] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus" [pid 5118] <... mmap resumed>) = 0x7f15abd81000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5118] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus" [pid 5118] <... mprotect resumed>) = 0 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5118] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5118] <... clone resumed>, parent_tid=[5120], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5120 [pid 5119] rename("./file1", "./bus" [pid 5118] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5118] <... futex resumed>) = 0 [pid 5119] rename("./file1", "./bus" [pid 5118] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus"./strace-static-x86_64: Process 5120 attached ) = -1 ENOENT (No such file or directory) [pid 5120] set_robust_list(0x7f15abda19e0, 24 [pid 5119] rename("./file1", "./bus" [pid 5120] <... set_robust_list resumed>) = 0 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] creat("./file1", 000 [pid 5119] rename("./file1", "./bus" [pid 5120] <... creat resumed>) = 4 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 5 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 6 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 7 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 8 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 9 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 72.045481][ T5119] loop0: detected capacity change from 0 to 1024 [pid 5120] <... creat resumed>) = 10 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 11 [pid 5119] rename("./file1", "./bus" [pid 5120] creat("./file1", 000 [pid 5119] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5120] <... creat resumed>) = 12 [pid 5119] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] creat("./file1", 000 [pid 5119] <... futex resumed>) = 0 [pid 5120] <... creat resumed>) = 13 [pid 5119] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] creat("./file1", 000) = 14 [pid 5120] creat("./file1", 000) = 15 [pid 5120] creat("./file1", 000) = 16 [pid 5120] creat("./file1", 000) = 17 [pid 5120] creat("./file1", 000) = 18 [pid 5120] creat("./file1", 000) = 19 [pid 5120] creat("./file1", 000) = 20 [pid 5120] creat("./file1", 000) = 21 [pid 5120] creat("./file1", 000) = 22 [pid 5120] creat("./file1", 000) = 23 [pid 5120] creat("./file1", 000) = 24 [pid 5120] creat("./file1", 000) = 25 [pid 5120] creat("./file1", 000) = 26 [pid 5120] creat("./file1", 000) = 27 [pid 5120] creat("./file1", 000) = 28 [pid 5120] creat("./file1", 000) = 29 [pid 5120] creat("./file1", 000) = 30 [pid 5120] creat("./file1", 000) = 31 [pid 5120] creat("./file1", 000) = 32 [pid 5120] creat("./file1", 000) = 33 [pid 5120] creat("./file1", 000) = 34 [pid 5120] creat("./file1", 000) = 35 [pid 5120] creat("./file1", 000) = 36 [pid 5120] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = 1 [pid 5120] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] exit_group(0 [pid 5120] <... futex resumed>) = ? [pid 5119] <... futex resumed>) = ? [pid 5118] <... exit_group resumed>) = ? [pid 5120] +++ exited with 0 +++ [pid 5119] +++ exited with 0 +++ [pid 5118] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./40/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./40/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./40/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./40/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./40/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./40/bus") = 0 umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./40/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./40") = 0 mkdir("./41", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5121 ./strace-static-x86_64: Process 5121 attached [pid 5121] set_robust_list(0x555555df95e0, 24) = 0 [pid 5121] chdir("./41") = 0 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5121] setpgid(0, 0) = 0 [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5121] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 72.122047][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5121] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5121] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5122 attached , parent_tid=[5122], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5122 [pid 5121] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5122] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5122] memfd_create("syzkaller", 0) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5122] munmap(0x7f15abd22000, 524288) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5122] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5122] close(3) = 0 [pid 5122] mkdir("./bus", 0777) = 0 [pid 5122] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5122] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5122] chdir("./bus") = 0 [pid 5122] ioctl(4, LOOP_CLR_FD) = 0 [pid 5122] close(4) = 0 [pid 5122] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5121] <... futex resumed>) = 0 [pid 5122] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] rename("./file1", "./bus" [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] <... rename resumed>) = 0 [pid 5121] <... mmap resumed>) = 0x7f15abd81000 [pid 5122] rename("./file1", "./bus" [pid 5121] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5121] <... mprotect resumed>) = 0 [pid 5122] rename("./file1", "./bus" [pid 5121] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5123 attached [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] set_robust_list(0x7f15abda19e0, 24 [pid 5122] rename("./file1", "./bus" [pid 5121] <... clone resumed>, parent_tid=[5123], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5123 [pid 5123] <... set_robust_list resumed>) = 0 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5121] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] creat("./file1", 000 [pid 5122] rename("./file1", "./bus" [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... creat resumed>) = 4 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000) = 5 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] creat("./file1", 000 [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] <... creat resumed>) = 6 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] creat("./file1", 000) = 7 [pid 5123] creat("./file1", 000) = 8 [pid 5123] creat("./file1", 000 [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5123] <... creat resumed>) = 9 [ 72.199461][ T5122] loop0: detected capacity change from 0 to 1024 [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000) = 10 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] <... creat resumed>) = 11 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] <... creat resumed>) = 12 [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5123] <... creat resumed>) = 13 [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] <... creat resumed>) = 14 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5123] creat("./file1", 000 [pid 5122] rename("./file1", "./bus" [pid 5123] <... creat resumed>) = 15 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] creat("./file1", 000 [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5123] <... creat resumed>) = 16 [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] <... creat resumed>) = 17 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] creat("./file1", 000 [pid 5122] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5123] <... creat resumed>) = 18 [pid 5122] rename("./file1", "./bus" [pid 5123] creat("./file1", 000 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5122] rename("./file1", "./bus" [pid 5123] <... creat resumed>) = 19 [pid 5122] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5123] creat("./file1", 000 [pid 5122] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5123] <... creat resumed>) = 20 [pid 5123] creat("./file1", 000) = 21 [pid 5123] creat("./file1", 000) = 22 [pid 5123] creat("./file1", 000) = 23 [pid 5123] creat("./file1", 000) = 24 [pid 5123] creat("./file1", 000) = 25 [pid 5123] creat("./file1", 000) = 26 [pid 5123] creat("./file1", 000) = 27 [pid 5123] creat("./file1", 000) = 28 [pid 5123] creat("./file1", 000) = 29 [pid 5123] creat("./file1", 000) = 30 [pid 5123] creat("./file1", 000) = 31 [pid 5123] creat("./file1", 000 [pid 5121] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5123] <... creat resumed>) = 32 [pid 5123] creat("./file1", 000) = 33 [pid 5123] creat("./file1", 000) = 34 [pid 5123] creat("./file1", 000) = 35 [pid 5123] creat("./file1", 000) = 36 [pid 5123] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] exit_group(0 [pid 5123] <... futex resumed>) = ? [pid 5122] <... futex resumed>) = ? [pid 5121] <... exit_group resumed>) = ? [pid 5123] +++ exited with 0 +++ [pid 5122] +++ exited with 0 +++ [pid 5121] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./41/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./41/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./41/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./41/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./41/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./41/bus") = 0 umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./41/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./41") = 0 mkdir("./42", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5124 ./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x555555df95e0, 24) = 0 [ 72.296425][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5124] chdir("./42") = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5124] write(3, "1000", 4) = 4 [pid 5124] close(3) = 0 [pid 5124] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5124] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5124] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5124] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5125 attached , parent_tid=[5125], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5125 [pid 5125] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5125] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5125] memfd_create("syzkaller", 0 [pid 5124] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5125] <... memfd_create resumed>) = 3 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5125] munmap(0x7f15abd22000, 524288) = 0 [pid 5125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5125] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5125] close(3) = 0 [pid 5125] mkdir("./bus", 0777) = 0 [pid 5125] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5125] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5125] chdir("./bus") = 0 [pid 5125] ioctl(4, LOOP_CLR_FD) = 0 [pid 5125] close(4) = 0 [pid 5125] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5124] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5125] rename("./file1", "./bus" [pid 5124] <... mmap resumed>) = 0x7f15abd81000 [pid 5124] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5124] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5126], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5126 ./strace-static-x86_64: Process 5126 attached [pid 5125] <... rename resumed>) = 0 [pid 5124] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] set_robust_list(0x7f15abda19e0, 24 [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] <... set_robust_list resumed>) = 0 [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 4 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] <... creat resumed>) = 5 [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 6 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 7 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 8 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] <... creat resumed>) = 9 [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 72.398641][ T5125] loop0: detected capacity change from 0 to 1024 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 10 [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 11 [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 12 [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 13 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 14 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000) = 15 [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000) = 16 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 17 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] <... creat resumed>) = 18 [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000) = 19 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000) = 20 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 21 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] <... creat resumed>) = 22 [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 23 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus" [pid 5126] <... creat resumed>) = 24 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5126] creat("./file1", 000 [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] <... creat resumed>) = 25 [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5126] <... creat resumed>) = 26 [pid 5125] rename("./file1", "./bus" [pid 5126] creat("./file1", 000 [pid 5125] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5125] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... creat resumed>) = 27 [pid 5125] <... futex resumed>) = 0 [pid 5126] creat("./file1", 000 [pid 5125] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] <... creat resumed>) = 28 [pid 5124] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5126] creat("./file1", 000) = 29 [pid 5126] creat("./file1", 000) = 30 [pid 5126] creat("./file1", 000) = 31 [pid 5126] creat("./file1", 000) = 32 [pid 5126] creat("./file1", 000) = 33 [pid 5126] creat("./file1", 000) = 34 [pid 5126] creat("./file1", 000) = 35 [pid 5126] creat("./file1", 000) = 36 [pid 5126] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] exit_group(0 [pid 5125] <... futex resumed>) = ? [pid 5124] <... exit_group resumed>) = ? [pid 5126] <... futex resumed>) = ? [pid 5125] +++ exited with 0 +++ [pid 5126] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./42/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./42/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./42/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./42/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./42/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./42/bus") = 0 umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./42/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./42") = 0 mkdir("./43", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5127 ./strace-static-x86_64: Process 5127 attached [pid 5127] set_robust_list(0x555555df95e0, 24) = 0 [pid 5127] chdir("./43") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5127] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5127] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5128], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5128 [pid 5127] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5128 attached [pid 5128] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5128] memfd_create("syzkaller", 0) = 3 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5128] munmap(0x7f15abd22000, 524288) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 72.505962][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5128] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5128] close(3) = 0 [pid 5128] mkdir("./bus", 0777) = 0 [pid 5128] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5128] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5128] chdir("./bus") = 0 [pid 5128] ioctl(4, LOOP_CLR_FD) = 0 [pid 5128] close(4) = 0 [pid 5128] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = 0 [pid 5128] <... futex resumed>) = 1 [pid 5127] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5127] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5127] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5127] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5128] rename("./file1", "./bus"./strace-static-x86_64: Process 5129 attached [pid 5129] set_robust_list(0x7f15abda19e0, 24 [pid 5127] <... clone resumed>, parent_tid=[5129], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5129 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5127] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] creat("./file1", 000 [pid 5127] <... futex resumed>) = 0 [pid 5127] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... rename resumed>) = 0 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 4 [pid 5129] creat("./file1", 000 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 5 [pid 5129] creat("./file1", 000) = 6 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000) = 7 [pid 5129] creat("./file1", 000) = 8 [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5129] <... creat resumed>) = 9 [pid 5128] rename("./file1", "./bus" [pid 5129] creat("./file1", 000) = 10 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 11 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 12 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 13 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5129] <... creat resumed>) = 14 [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 15 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5129] <... creat resumed>) = 16 [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5129] <... creat resumed>) = 17 [pid 5128] rename("./file1", "./bus" [pid 5129] creat("./file1", 000 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 18 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 19 [pid 5129] creat("./file1", 000 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 72.556602][ T5128] loop0: detected capacity change from 0 to 1024 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5129] <... creat resumed>) = 20 [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 21 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 22 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 23 [pid 5129] creat("./file1", 000 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 24 [pid 5129] creat("./file1", 000 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 25 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 26 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 27 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 28 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] creat("./file1", 000) = 29 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 30 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] creat("./file1", 000) = 31 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 32 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] rename("./file1", "./bus" [pid 5129] creat("./file1", 000) = 33 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5129] creat("./file1", 000 [pid 5128] rename("./file1", "./bus" [pid 5129] <... creat resumed>) = 34 [pid 5128] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5128] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5129] creat("./file1", 000 [pid 5128] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5129] <... creat resumed>) = 35 [pid 5129] creat("./file1", 000) = 36 [pid 5129] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5127] <... futex resumed>) = 0 [pid 5129] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5127] exit_group(0 [pid 5128] <... futex resumed>) = ? [pid 5127] <... exit_group resumed>) = ? [pid 5128] +++ exited with 0 +++ [pid 5129] <... futex resumed>) = ? [pid 5129] +++ exited with 0 +++ [pid 5127] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./43/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./43/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./43/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./43/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./43/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./43/bus") = 0 umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./43/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./43") = 0 mkdir("./44", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5130 ./strace-static-x86_64: Process 5130 attached [pid 5130] set_robust_list(0x555555df95e0, 24) = 0 [pid 5130] chdir("./44") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5130] setpgid(0, 0) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5130] write(3, "1000", 4) = 4 [pid 5130] close(3) = 0 [pid 5130] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5130] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5130] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5131], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5131 ./strace-static-x86_64: Process 5131 attached [pid 5131] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5131] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5130] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5131] <... futex resumed>) = 0 [pid 5131] memfd_create("syzkaller", 0) = 3 [ 72.643266][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5131] munmap(0x7f15abd22000, 524288) = 0 [pid 5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5131] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5131] close(3) = 0 [pid 5131] mkdir("./bus", 0777) = 0 [pid 5131] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5131] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5131] chdir("./bus") = 0 [pid 5131] ioctl(4, LOOP_CLR_FD) = 0 [pid 5131] close(4) = 0 [pid 5131] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5131] rename("./file1", "./bus" [pid 5130] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5131] <... rename resumed>) = 0 [pid 5130] <... futex resumed>) = 0 [pid 5130] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5130] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5132], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5132 [pid 5130] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5131] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5131] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5132 attached [pid 5132] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5132] creat("./file1", 000) = 4 [pid 5132] creat("./file1", 000) = 5 [pid 5132] creat("./file1", 000) = 6 [pid 5132] creat("./file1", 000) = 7 [pid 5132] creat("./file1", 000) = 8 [pid 5132] creat("./file1", 000) = 9 [pid 5132] creat("./file1", 000) = 10 [pid 5132] creat("./file1", 000) = 11 [pid 5132] creat("./file1", 000) = 12 [ 72.716317][ T5131] loop0: detected capacity change from 0 to 1024 [pid 5132] creat("./file1", 000) = 13 [pid 5132] creat("./file1", 000) = 14 [pid 5132] creat("./file1", 000) = 15 [pid 5132] creat("./file1", 000) = 16 [pid 5132] creat("./file1", 000) = 17 [pid 5132] creat("./file1", 000) = 18 [pid 5130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5132] creat("./file1", 000) = 19 [pid 5132] creat("./file1", 000) = 20 [pid 5132] creat("./file1", 000) = 21 [pid 5132] creat("./file1", 000) = 22 [pid 5132] creat("./file1", 000) = 23 [pid 5132] creat("./file1", 000) = 24 [pid 5132] creat("./file1", 000) = 25 [pid 5132] creat("./file1", 000) = 26 [pid 5132] creat("./file1", 000) = 27 [pid 5132] creat("./file1", 000) = 28 [pid 5132] creat("./file1", 000) = 29 [pid 5132] creat("./file1", 000) = 30 [pid 5132] creat("./file1", 000) = 31 [pid 5132] creat("./file1", 000) = 32 [pid 5132] creat("./file1", 000) = 33 [pid 5132] creat("./file1", 000) = 34 [pid 5132] creat("./file1", 000) = 35 [pid 5132] creat("./file1", 000) = 36 [pid 5132] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5130] exit_group(0 [pid 5131] <... futex resumed>) = ? [pid 5130] <... exit_group resumed>) = ? [pid 5131] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./44/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./44/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./44/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./44/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./44/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./44/bus") = 0 umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./44/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./44") = 0 mkdir("./45", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5133 ./strace-static-x86_64: Process 5133 attached [pid 5133] set_robust_list(0x555555df95e0, 24) = 0 [pid 5133] chdir("./45") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5133] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5133] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5133] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5134], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5134 [pid 5133] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5134 attached [pid 5134] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 72.821495][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5134] munmap(0x7f15abd22000, 524288) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./bus", 0777) = 0 [pid 5134] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5134] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5134] chdir("./bus") = 0 [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4) = 0 [pid 5134] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5134] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... futex resumed>) = 0 [pid 5133] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5133] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5134] <... futex resumed>) = 0 [pid 5134] rename("./file1", "./bus" [pid 5133] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5135 attached , parent_tid=[5135], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5135 [pid 5135] set_robust_list(0x7f15abda19e0, 24 [pid 5133] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5135] <... set_robust_list resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5135] creat("./file1", 000 [pid 5133] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5134] <... rename resumed>) = 0 [pid 5134] rename("./file1", "./bus" [pid 5135] <... creat resumed>) = 4 [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 5 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 6 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus" [pid 5135] <... creat resumed>) = 7 [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus" [pid 5135] <... creat resumed>) = 8 [pid 5135] creat("./file1", 000) = 9 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus" [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 10 [pid 5134] rename("./file1", "./bus" [pid 5135] creat("./file1", 000) = 11 [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 12 [pid 5134] rename("./file1", "./bus" [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 13 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus" [pid 5135] <... creat resumed>) = 14 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5135] creat("./file1", 000) = 15 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus" [pid 5135] <... creat resumed>) = 16 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus" [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 17 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 18 [pid 5135] creat("./file1", 000 [ 72.889974][ T5134] loop0: detected capacity change from 0 to 1024 [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 19 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 20 [pid 5135] creat("./file1", 000 [pid 5134] rename("./file1", "./bus" [pid 5135] <... creat resumed>) = 21 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus" [pid 5135] creat("./file1", 000 [pid 5134] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5135] <... creat resumed>) = 22 [pid 5135] creat("./file1", 000) = 23 [pid 5135] creat("./file1", 000) = 24 [pid 5135] creat("./file1", 000) = 25 [pid 5135] creat("./file1", 000) = 26 [pid 5135] creat("./file1", 000) = 27 [pid 5135] creat("./file1", 000) = 28 [pid 5135] creat("./file1", 000) = 29 [pid 5135] creat("./file1", 000) = 30 [pid 5135] creat("./file1", 000) = 31 [pid 5135] creat("./file1", 000) = 32 [pid 5135] creat("./file1", 000) = 33 [pid 5135] creat("./file1", 000) = 34 [pid 5135] creat("./file1", 000) = 35 [pid 5135] creat("./file1", 000) = 36 [pid 5135] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5135] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5134] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] exit_group(0 [pid 5135] <... futex resumed>) = ? [pid 5133] <... exit_group resumed>) = ? [pid 5135] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./45/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./45/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./45/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./45/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./45/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./45/bus") = 0 umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./45/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./45") = 0 mkdir("./46", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5136 ./strace-static-x86_64: Process 5136 attached [pid 5136] set_robust_list(0x555555df95e0, 24) = 0 [pid 5136] chdir("./46") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5136] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5136] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5137 attached , parent_tid=[5137], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5137 [pid 5136] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5137] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5137] memfd_create("syzkaller", 0) = 3 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 72.993284][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5137] munmap(0x7f15abd22000, 524288) = 0 [pid 5137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5137] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5137] close(3) = 0 [pid 5137] mkdir("./bus", 0777) = 0 [pid 5137] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5137] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5137] chdir("./bus") = 0 [pid 5137] ioctl(4, LOOP_CLR_FD) = 0 [pid 5137] close(4) = 0 [pid 5137] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 0 [pid 5136] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5136] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5136] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5138], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5138 [pid 5136] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = 1 [pid 5137] rename("./file1", "./bus") = 0 [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5137] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5138 attached [pid 5138] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5138] creat("./file1", 000) = 4 [pid 5138] creat("./file1", 000) = 5 [pid 5138] creat("./file1", 000) = 6 [pid 5138] creat("./file1", 000) = 7 [pid 5138] creat("./file1", 000) = 8 [pid 5138] creat("./file1", 000) = 9 [pid 5138] creat("./file1", 000) = 10 [pid 5138] creat("./file1", 000) = 11 [pid 5138] creat("./file1", 000) = 12 [ 73.062825][ T5137] loop0: detected capacity change from 0 to 1024 [pid 5138] creat("./file1", 000) = 13 [pid 5138] creat("./file1", 000) = 14 [pid 5138] creat("./file1", 000) = 15 [pid 5138] creat("./file1", 000) = 16 [pid 5138] creat("./file1", 000) = 17 [pid 5138] creat("./file1", 000) = 18 [pid 5138] creat("./file1", 000) = 19 [pid 5138] creat("./file1", 000) = 20 [pid 5138] creat("./file1", 000) = 21 [pid 5138] creat("./file1", 000) = 22 [pid 5138] creat("./file1", 000) = 23 [pid 5138] creat("./file1", 000) = 24 [pid 5138] creat("./file1", 000) = 25 [pid 5138] creat("./file1", 000) = 26 [pid 5138] creat("./file1", 000) = 27 [pid 5138] creat("./file1", 000) = 28 [pid 5138] creat("./file1", 000) = 29 [pid 5138] creat("./file1", 000) = 30 [pid 5138] creat("./file1", 000) = 31 [pid 5138] creat("./file1", 000) = 32 [pid 5138] creat("./file1", 000 [pid 5136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5138] <... creat resumed>) = 33 [pid 5138] creat("./file1", 000) = 34 [pid 5138] creat("./file1", 000) = 35 [pid 5138] creat("./file1", 000) = 36 [pid 5138] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] exit_group(0 [pid 5137] <... futex resumed>) = ? [pid 5136] <... exit_group resumed>) = ? [pid 5137] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 5136] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./46/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./46/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./46/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./46/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./46/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./46/bus") = 0 umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./46/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./46") = 0 mkdir("./47", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5139 ./strace-static-x86_64: Process 5139 attached [pid 5139] set_robust_list(0x555555df95e0, 24) = 0 [pid 5139] chdir("./47") = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5139] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5139] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5139] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5140 attached , parent_tid=[5140], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5140 [pid 5140] set_robust_list(0x7f15b41429e0, 24 [pid 5139] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5140] <... set_robust_list resumed>) = 0 [pid 5139] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 73.151366][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5140] memfd_create("syzkaller", 0) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5140] munmap(0x7f15abd22000, 524288) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5140] close(3) = 0 [pid 5140] mkdir("./bus", 0777) = 0 [pid 5140] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5140] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5140] chdir("./bus") = 0 [pid 5140] ioctl(4, LOOP_CLR_FD) = 0 [pid 5140] close(4) = 0 [pid 5140] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 0 [pid 5139] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 1 [pid 5139] <... futex resumed>) = 0 [pid 5139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5140] rename("./file1", "./bus" [pid 5139] <... mmap resumed>) = 0x7f15abd81000 [pid 5139] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5140] <... rename resumed>) = 0 [pid 5139] <... mprotect resumed>) = 0 [pid 5139] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5141 attached [pid 5140] rename("./file1", "./bus" [pid 5139] <... clone resumed>, parent_tid=[5141], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5141 [pid 5139] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] set_robust_list(0x7f15abda19e0, 24 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... set_robust_list resumed>) = 0 [pid 5141] creat("./file1", 000 [pid 5140] rename("./file1", "./bus" [pid 5141] <... creat resumed>) = 4 [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 5 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 6 [pid 5141] creat("./file1", 000) = 7 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 8 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 73.225263][ T5140] loop0: detected capacity change from 0 to 1024 [pid 5141] <... creat resumed>) = 9 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 10 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 11 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 12 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 13 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 14 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 15 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 16 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 17 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 18 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 19 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 20 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 21 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 22 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 23 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 24 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 25 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 26 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 27 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 28 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 29 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 30 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 31 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 32 [pid 5140] rename("./file1", "./bus" [pid 5139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 33 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 34 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 35 [pid 5140] rename("./file1", "./bus" [pid 5141] creat("./file1", 000 [pid 5140] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5141] <... creat resumed>) = 36 [pid 5140] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 0 [pid 5141] <... futex resumed>) = 0 [pid 5140] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5139] exit_group(0 [pid 5141] <... futex resumed>) = ? [pid 5140] <... futex resumed>) = ? [pid 5139] <... exit_group resumed>) = ? [pid 5141] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5139] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./47/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./47/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./47/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./47/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./47/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./47/bus") = 0 umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./47/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./47") = 0 mkdir("./48", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5142 ./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x555555df95e0, 24) = 0 [pid 5142] chdir("./48") = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5142] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5142] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5143 attached , parent_tid=[5143], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5143 [pid 5143] set_robust_list(0x7f15b41429e0, 24 [pid 5142] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5143] <... set_robust_list resumed>) = 0 [ 73.332328][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5143] memfd_create("syzkaller", 0) = 3 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5143] munmap(0x7f15abd22000, 524288) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./bus", 0777) = 0 [pid 5143] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5143] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./bus") = 0 [pid 5143] ioctl(4, LOOP_CLR_FD) = 0 [pid 5143] close(4) = 0 [pid 5143] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5142] <... futex resumed>) = 0 [pid 5143] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5142] <... futex resumed>) = 0 [pid 5143] rename("./file1", "./bus" [pid 5142] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... rename resumed>) = 0 [pid 5142] <... futex resumed>) = 0 [pid 5143] rename("./file1", "./bus" [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5142] <... mmap resumed>) = 0x7f15abd81000 [pid 5143] rename("./file1", "./bus" [pid 5142] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5142] <... mprotect resumed>) = 0 [pid 5143] rename("./file1", "./bus" [pid 5142] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5144 attached [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] set_robust_list(0x7f15abda19e0, 24 [pid 5143] rename("./file1", "./bus" [pid 5142] <... clone resumed>, parent_tid=[5144], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5144 [pid 5144] <... set_robust_list resumed>) = 0 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5142] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5142] <... futex resumed>) = 0 [pid 5144] <... creat resumed>) = 4 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5142] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] rename("./file1", "./bus" [pid 5144] creat("./file1", 000) = 5 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 6 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 7 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 8 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 9 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 10 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 11 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 12 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 13 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 14 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 73.407108][ T5143] loop0: detected capacity change from 0 to 1024 [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 15 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 16 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 17 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 18 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 19 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 20 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5144] <... creat resumed>) = 21 [pid 5143] rename("./file1", "./bus" [pid 5144] creat("./file1", 000 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] <... creat resumed>) = 22 [pid 5143] rename("./file1", "./bus" [pid 5144] creat("./file1", 000 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 23 [pid 5144] creat("./file1", 000 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 24 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 25 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 26 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 27 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 28 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 29 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] rename("./file1", "./bus" [pid 5144] <... creat resumed>) = 30 [pid 5143] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5144] creat("./file1", 000 [pid 5143] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... creat resumed>) = 31 [pid 5143] <... futex resumed>) = 0 [pid 5144] creat("./file1", 000 [pid 5143] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5144] <... creat resumed>) = 32 [pid 5144] creat("./file1", 000) = 33 [pid 5144] creat("./file1", 000) = 34 [pid 5144] creat("./file1", 000) = 35 [pid 5144] creat("./file1", 000) = 36 [pid 5144] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5142] <... futex resumed>) = 0 [pid 5144] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] exit_group(0) = ? [pid 5144] <... futex resumed>) = ? [pid 5143] <... futex resumed>) = ? [pid 5143] +++ exited with 0 +++ [pid 5144] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./48/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./48/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./48/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./48/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./48/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./48/bus") = 0 umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./48/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./48") = 0 mkdir("./49", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5145 ./strace-static-x86_64: Process 5145 attached [pid 5145] set_robust_list(0x555555df95e0, 24) = 0 [pid 5145] chdir("./49") = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5145] setpgid(0, 0) = 0 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5145] write(3, "1000", 4) = 4 [pid 5145] close(3) = 0 [pid 5145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5145] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5145] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5145] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5146 attached , parent_tid=[5146], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5146 [pid 5145] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5146] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5146] memfd_create("syzkaller", 0) = 3 [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 73.503368][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5146] munmap(0x7f15abd22000, 524288) = 0 [pid 5146] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5146] close(3) = 0 [pid 5146] mkdir("./bus", 0777) = 0 [pid 5146] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5146] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5146] chdir("./bus") = 0 [pid 5146] ioctl(4, LOOP_CLR_FD) = 0 [pid 5146] close(4) = 0 [pid 5146] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5145] <... futex resumed>) = 0 [pid 5146] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5145] <... futex resumed>) = 0 [pid 5146] rename("./file1", "./bus" [pid 5145] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... rename resumed>) = 0 [pid 5145] <... futex resumed>) = 0 [pid 5146] rename("./file1", "./bus" [pid 5145] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5145] <... mmap resumed>) = 0x7f15abd81000 [pid 5146] rename("./file1", "./bus" [pid 5145] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5145] <... mprotect resumed>) = 0 [pid 5146] rename("./file1", "./bus" [pid 5145] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5147 attached [pid 5146] rename("./file1", "./bus" [pid 5145] <... clone resumed>, parent_tid=[5147], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5147 [pid 5147] set_robust_list(0x7f15abda19e0, 24 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5145] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... set_robust_list resumed>) = 0 [pid 5146] rename("./file1", "./bus" [pid 5145] <... futex resumed>) = 0 [pid 5147] creat("./file1", 000 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5145] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 4 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 5 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 6 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 7 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 8 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 9 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 10 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 11 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 12 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 13 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 73.572939][ T5146] loop0: detected capacity change from 0 to 1024 [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 14 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 15 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 16 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 17 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 18 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 19 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 20 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 21 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 22 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 23 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 24 [pid 5147] creat("./file1", 000 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 25 [pid 5147] creat("./file1", 000 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] <... creat resumed>) = 26 [pid 5146] rename("./file1", "./bus" [pid 5147] creat("./file1", 000 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 27 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 28 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 29 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5147] creat("./file1", 000 [pid 5146] rename("./file1", "./bus" [pid 5147] <... creat resumed>) = 30 [pid 5146] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5146] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5146] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5147] creat("./file1", 000) = 31 [pid 5147] creat("./file1", 000) = 32 [pid 5147] creat("./file1", 000) = 33 [pid 5147] creat("./file1", 000) = 34 [pid 5147] creat("./file1", 000) = 35 [pid 5145] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5147] creat("./file1", 000) = 36 [pid 5147] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5145] exit_group(0 [pid 5146] <... futex resumed>) = ? [pid 5145] <... exit_group resumed>) = ? [pid 5146] +++ exited with 0 +++ [pid 5147] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./49/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./49/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./49/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./49/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./49/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./49/bus") = 0 umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./49/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./49") = 0 mkdir("./50", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5148 ./strace-static-x86_64: Process 5148 attached [pid 5148] set_robust_list(0x555555df95e0, 24) = 0 [pid 5148] chdir("./50") = 0 [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5148] setpgid(0, 0) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5148] write(3, "1000", 4) = 4 [pid 5148] close(3) = 0 [pid 5148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5148] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5148] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5148] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5149], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5149 ./strace-static-x86_64: Process 5149 attached [pid 5148] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5149] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 73.690188][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5149] munmap(0x7f15abd22000, 524288) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./bus", 0777) = 0 [pid 5149] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5149] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5149] chdir("./bus") = 0 [pid 5149] ioctl(4, LOOP_CLR_FD) = 0 [pid 5149] close(4) = 0 [pid 5149] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5148] <... futex resumed>) = 0 [pid 5149] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5148] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5148] <... futex resumed>) = 0 [pid 5149] rename("./file1", "./bus" [pid 5148] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5148] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5149] <... rename resumed>) = 0 [pid 5148] <... mmap resumed>) = 0x7f15abd81000 [pid 5149] rename("./file1", "./bus" [pid 5148] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5148] <... mprotect resumed>) = 0 [pid 5149] rename("./file1", "./bus" [pid 5148] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5150 attached [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] set_robust_list(0x7f15abda19e0, 24 [pid 5149] rename("./file1", "./bus" [pid 5148] <... clone resumed>, parent_tid=[5150], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5150 [pid 5150] <... set_robust_list resumed>) = 0 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5148] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5148] <... futex resumed>) = 0 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5148] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 4 [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 5 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 6 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 7 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 8 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 9 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 10 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 11 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000) = 12 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 13 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 73.759116][ T5149] loop0: detected capacity change from 0 to 1024 [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 14 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000) = 15 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 16 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000) = 17 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 18 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 19 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 20 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 21 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 22 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 23 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 24 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 25 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 26 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 27 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 28 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] creat("./file1", 000 [pid 5149] rename("./file1", "./bus" [pid 5150] <... creat resumed>) = 29 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000) = 30 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 31 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5149] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 32 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 33 [pid 5149] rename("./file1", "./bus" [pid 5150] creat("./file1", 000 [pid 5149] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5150] <... creat resumed>) = 34 [pid 5149] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5150] creat("./file1", 000 [pid 5149] <... futex resumed>) = 0 [pid 5149] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5150] <... creat resumed>) = 35 [pid 5150] creat("./file1", 000) = 36 [pid 5150] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] <... futex resumed>) = 0 [pid 5148] exit_group(0 [pid 5150] <... futex resumed>) = ? [pid 5149] <... futex resumed>) = ? [pid 5148] <... exit_group resumed>) = ? [pid 5150] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ [pid 5148] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./50/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./50/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./50/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./50/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./50/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./50/bus") = 0 umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./50/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./50") = 0 mkdir("./51", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5151 ./strace-static-x86_64: Process 5151 attached [pid 5151] set_robust_list(0x555555df95e0, 24) = 0 [pid 5151] chdir("./51") = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [ 73.855627][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5151] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5151] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5152 attached , parent_tid=[5152], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5152 [pid 5151] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5151] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5152] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5152] memfd_create("syzkaller", 0) = 3 [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5152] munmap(0x7f15abd22000, 524288) = 0 [pid 5152] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5152] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5152] close(3) = 0 [pid 5152] mkdir("./bus", 0777) = 0 [pid 5152] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5152] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5152] chdir("./bus") = 0 [pid 5152] ioctl(4, LOOP_CLR_FD) = 0 [pid 5152] close(4) = 0 [pid 5152] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5152] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5151] <... futex resumed>) = 0 [pid 5152] rename("./file1", "./bus" [pid 5151] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... rename resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5152] rename("./file1", "./bus" [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5151] <... mmap resumed>) = 0x7f15abd81000 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5151] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5152] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5151] <... mprotect resumed>) = 0 [pid 5152] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5151] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5152] rename("./file1", "./bus"./strace-static-x86_64: Process 5153 attached [pid 5153] set_robust_list(0x7f15abda19e0, 24 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5151] <... clone resumed>, parent_tid=[5153], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5153 [pid 5153] <... set_robust_list resumed>) = 0 [pid 5152] rename("./file1", "./bus" [pid 5151] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] creat("./file1", 000 [pid 5151] <... futex resumed>) = 0 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5151] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 4 [pid 5153] creat("./file1", 000 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] <... creat resumed>) = 5 [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 6 [pid 5153] creat("./file1", 000 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] <... creat resumed>) = 7 [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 8 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 9 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000) = 10 [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 11 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000) = 12 [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 13 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 14 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 15 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 16 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 17 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 73.936358][ T5152] loop0: detected capacity change from 0 to 1024 [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 18 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 19 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 20 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 21 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 22 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 23 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 24 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 25 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 26 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 27 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 28 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 29 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 30 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 31 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] rename("./file1", "./bus" [pid 5153] <... creat resumed>) = 32 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5152] rename("./file1", "./bus" [pid 5153] creat("./file1", 000) = 33 [pid 5152] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5153] creat("./file1", 000 [pid 5152] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... creat resumed>) = 34 [pid 5152] <... futex resumed>) = 0 [pid 5152] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] creat("./file1", 000) = 35 [pid 5153] creat("./file1", 000) = 36 [pid 5153] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5153] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] exit_group(0 [pid 5153] <... futex resumed>) = ? [pid 5152] <... futex resumed>) = ? [pid 5151] <... exit_group resumed>) = ? [pid 5153] +++ exited with 0 +++ [pid 5152] +++ exited with 0 +++ [pid 5151] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./51/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./51/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./51/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./51/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./51/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./51/bus") = 0 umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./51/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./51") = 0 mkdir("./52", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5154 attached , child_tidptr=0x555555df95d0) = 5154 [pid 5154] set_robust_list(0x555555df95e0, 24) = 0 [pid 5154] chdir("./52") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5154] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5155 attached , parent_tid=[5155], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5155 [pid 5155] set_robust_list(0x7f15b41429e0, 24 [pid 5154] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5155] <... set_robust_list resumed>) = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 74.022858][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5155] munmap(0x7f15abd22000, 524288) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./bus", 0777) = 0 [pid 5155] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5155] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./bus") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [pid 5155] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5155] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 5155] rename("./file1", "./bus" [pid 5154] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... rename resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5155] rename("./file1", "./bus" [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5154] <... mmap resumed>) = 0x7f15abd81000 [pid 5155] rename("./file1", "./bus" [pid 5154] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5154] <... mprotect resumed>) = 0 [pid 5155] rename("./file1", "./bus" [pid 5154] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5156 attached [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5155] rename("./file1", "./bus" [pid 5154] <... clone resumed>, parent_tid=[5156], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5156 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5154] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] set_robust_list(0x7f15abda19e0, 24 [pid 5155] rename("./file1", "./bus" [pid 5154] <... futex resumed>) = 0 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5154] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] rename("./file1", "./bus" [pid 5156] <... set_robust_list resumed>) = 0 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5155] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5156] creat("./file1", 000 [pid 5155] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5155] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5155] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5155] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 4 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 5 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 6 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 7 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 8 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 9 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 10 [ 74.090324][ T5155] loop0: detected capacity change from 0 to 1024 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 11 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 12 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 13 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 14 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 15 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 16 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 17 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 18 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 19 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 20 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 21 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 22 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 23 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 24 [pid 5155] rename("./file1", "./bus" [pid 5156] creat("./file1", 000 [pid 5155] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5156] <... creat resumed>) = 25 [pid 5155] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] creat("./file1", 000 [pid 5155] <... futex resumed>) = 0 [pid 5156] <... creat resumed>) = 26 [pid 5155] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] creat("./file1", 000) = 27 [pid 5156] creat("./file1", 000) = 28 [pid 5156] creat("./file1", 000) = 29 [pid 5156] creat("./file1", 000) = 30 [pid 5156] creat("./file1", 000) = 31 [pid 5156] creat("./file1", 000) = 32 [pid 5156] creat("./file1", 000) = 33 [pid 5156] creat("./file1", 000) = 34 [pid 5156] creat("./file1", 000) = 35 [pid 5156] creat("./file1", 000) = 36 [pid 5156] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5156] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] exit_group(0 [pid 5156] <... futex resumed>) = ? [pid 5155] <... futex resumed>) = ? [pid 5154] <... exit_group resumed>) = ? [pid 5156] +++ exited with 0 +++ [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./52/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./52/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./52/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./52/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./52/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./52/bus") = 0 umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./52/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./52") = 0 mkdir("./53", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5157 ./strace-static-x86_64: Process 5157 attached [pid 5157] set_robust_list(0x555555df95e0, 24) = 0 [pid 5157] chdir("./53") = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5157] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5157] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5158 attached , parent_tid=[5158], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5158 [pid 5158] set_robust_list(0x7f15b41429e0, 24 [pid 5157] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5158] <... set_robust_list resumed>) = 0 [pid 5158] memfd_create("syzkaller", 0) = 3 [ 74.188345][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5158] munmap(0x7f15abd22000, 524288) = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5158] close(3) = 0 [pid 5158] mkdir("./bus", 0777) = 0 [pid 5158] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5158] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5158] chdir("./bus") = 0 [pid 5158] ioctl(4, LOOP_CLR_FD) = 0 [pid 5158] close(4) = 0 [pid 5158] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5158] rename("./file1", "./bus" [pid 5157] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5158] <... rename resumed>) = 0 [pid 5157] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5159], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5159 [pid 5157] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus"./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x7f15abda19e0, 24 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] <... set_robust_list resumed>) = 0 [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 4 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 5 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] creat("./file1", 000 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5159] <... creat resumed>) = 6 [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 7 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] creat("./file1", 000 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 8 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 9 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 10 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 11 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] creat("./file1", 000 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 12 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 13 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 14 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 15 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 16 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 74.259586][ T5158] loop0: detected capacity change from 0 to 1024 [pid 5158] rename("./file1", "./bus" [pid 5159] creat("./file1", 000 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5159] <... creat resumed>) = 17 [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 18 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5159] creat("./file1", 000 [pid 5158] rename("./file1", "./bus" [pid 5159] <... creat resumed>) = 19 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] rename("./file1", "./bus" [pid 5159] creat("./file1", 000 [pid 5158] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5158] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5158] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5159] <... creat resumed>) = 20 [pid 5159] creat("./file1", 000) = 21 [pid 5159] creat("./file1", 000) = 22 [pid 5159] creat("./file1", 000) = 23 [pid 5159] creat("./file1", 000) = 24 [pid 5159] creat("./file1", 000) = 25 [pid 5159] creat("./file1", 000) = 26 [pid 5159] creat("./file1", 000) = 27 [pid 5159] creat("./file1", 000) = 28 [pid 5159] creat("./file1", 000) = 29 [pid 5159] creat("./file1", 000) = 30 [pid 5159] creat("./file1", 000) = 31 [pid 5159] creat("./file1", 000) = 32 [pid 5159] creat("./file1", 000) = 33 [pid 5159] creat("./file1", 000) = 34 [pid 5159] creat("./file1", 000) = 35 [pid 5159] creat("./file1", 000) = 36 [pid 5159] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... futex resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5157] exit_group(0 [pid 5158] <... futex resumed>) = ? [pid 5157] <... exit_group resumed>) = ? [pid 5158] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./53/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./53/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./53/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./53/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./53/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./53/bus") = 0 umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./53/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./53") = 0 mkdir("./54", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5160 ./strace-static-x86_64: Process 5160 attached [pid 5160] set_robust_list(0x555555df95e0, 24) = 0 [pid 5160] chdir("./54") = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5160] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5160] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5161 attached [pid 5161] set_robust_list(0x7f15b41429e0, 24 [pid 5160] <... clone resumed>, parent_tid=[5161], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5161 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5160] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.346774][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5160] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5161] memfd_create("syzkaller", 0) = 3 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5161] munmap(0x7f15abd22000, 524288) = 0 [pid 5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5161] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5161] close(3) = 0 [pid 5161] mkdir("./bus", 0777) = 0 [pid 5161] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5161] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5161] chdir("./bus") = 0 [pid 5161] ioctl(4, LOOP_CLR_FD) = 0 [pid 5161] close(4) = 0 [pid 5161] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5161] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 1 [pid 5161] rename("./file1", "./bus") = 0 [pid 5160] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5161] rename("./file1", "./bus" [pid 5160] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus" [pid 5160] <... mmap resumed>) = 0x7f15abd81000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus" [pid 5160] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus" [pid 5160] <... mprotect resumed>) = 0 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5160] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5160] <... clone resumed>, parent_tid=[5162], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5162 [pid 5161] rename("./file1", "./bus" [pid 5160] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5160] <... futex resumed>) = 0 [pid 5161] rename("./file1", "./bus" [pid 5160] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus"./strace-static-x86_64: Process 5162 attached ) = -1 ENOENT (No such file or directory) [pid 5162] set_robust_list(0x7f15abda19e0, 24 [pid 5161] rename("./file1", "./bus" [pid 5162] <... set_robust_list resumed>) = 0 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] creat("./file1", 000 [pid 5161] rename("./file1", "./bus" [pid 5162] <... creat resumed>) = 4 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 5 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 6 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 7 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 8 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 9 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 10 [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5162] creat("./file1", 000 [pid 5161] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 11 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 12 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 13 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus" [pid 5162] <... creat resumed>) = 14 [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5161] rename("./file1", "./bus" [pid 5162] <... creat resumed>) = 15 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 74.421299][ T5161] loop0: detected capacity change from 0 to 1024 [pid 5162] creat("./file1", 000 [pid 5161] rename("./file1", "./bus" [pid 5162] <... creat resumed>) = 16 [pid 5162] creat("./file1", 000 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] <... creat resumed>) = 17 [pid 5161] rename("./file1", "./bus" [pid 5162] creat("./file1", 000) = 18 [pid 5161] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5162] creat("./file1", 000) = 19 [pid 5161] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5162] creat("./file1", 000 [pid 5161] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5162] <... creat resumed>) = 20 [pid 5162] creat("./file1", 000) = 21 [pid 5162] creat("./file1", 000) = 22 [pid 5162] creat("./file1", 000) = 23 [pid 5162] creat("./file1", 000) = 24 [pid 5162] creat("./file1", 000) = 25 [pid 5162] creat("./file1", 000) = 26 [pid 5162] creat("./file1", 000) = 27 [pid 5162] creat("./file1", 000) = 28 [pid 5162] creat("./file1", 000) = 29 [pid 5162] creat("./file1", 000) = 30 [pid 5162] creat("./file1", 000) = 31 [pid 5162] creat("./file1", 000) = 32 [pid 5162] creat("./file1", 000) = 33 [pid 5162] creat("./file1", 000) = 34 [pid 5162] creat("./file1", 000) = 35 [pid 5162] creat("./file1", 000) = 36 [pid 5162] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5160] <... futex resumed>) = 0 [pid 5162] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] exit_group(0 [pid 5162] <... futex resumed>) = ? [pid 5161] <... futex resumed>) = ? [pid 5160] <... exit_group resumed>) = ? [pid 5161] +++ exited with 0 +++ [pid 5162] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./54/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./54/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./54/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./54/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./54/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./54/bus") = 0 umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./54/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./54") = 0 mkdir("./55", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5163 ./strace-static-x86_64: Process 5163 attached [pid 5163] set_robust_list(0x555555df95e0, 24) = 0 [pid 5163] chdir("./55") = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5163] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5163] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5164], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5164 [pid 5163] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 74.507619][ T1240] hfsplus: b-tree write err: -5, ino 8 [pid 5163] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5164] munmap(0x7f15abd22000, 524288) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5164] close(3) = 0 [pid 5164] mkdir("./bus", 0777) = 0 [pid 5164] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5164] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5164] chdir("./bus") = 0 [pid 5164] ioctl(4, LOOP_CLR_FD) = 0 [pid 5164] close(4) = 0 [pid 5164] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5163] <... futex resumed>) = 0 [pid 5163] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5163] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5163] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5165], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5165 [pid 5163] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... futex resumed>) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5164] rename("./file1", "./bus" [pid 5163] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] <... rename resumed>) = 0 [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus"./strace-static-x86_64: Process 5165 attached ) = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5164] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5165] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5165] creat("./file1", 000) = 4 [pid 5165] creat("./file1", 000) = 5 [pid 5165] creat("./file1", 000) = 6 [pid 5165] creat("./file1", 000) = 7 [pid 5165] creat("./file1", 000) = 8 [pid 5165] creat("./file1", 000) = 9 [pid 5165] creat("./file1", 000) = 10 [pid 5165] creat("./file1", 000) = 11 [pid 5165] creat("./file1", 000) = 12 [pid 5165] creat("./file1", 000) = 13 [pid 5165] creat("./file1", 000) = 14 [pid 5165] creat("./file1", 000) = 15 [ 74.578476][ T5164] loop0: detected capacity change from 0 to 1024 [pid 5165] creat("./file1", 000) = 16 [pid 5165] creat("./file1", 000) = 17 [pid 5165] creat("./file1", 000) = 18 [pid 5165] creat("./file1", 000) = 19 [pid 5165] creat("./file1", 000) = 20 [pid 5165] creat("./file1", 000) = 21 [pid 5165] creat("./file1", 000) = 22 [pid 5165] creat("./file1", 000) = 23 [pid 5165] creat("./file1", 000) = 24 [pid 5165] creat("./file1", 000) = 25 [pid 5165] creat("./file1", 000) = 26 [pid 5165] creat("./file1", 000) = 27 [pid 5165] creat("./file1", 000) = 28 [pid 5165] creat("./file1", 000) = 29 [pid 5165] creat("./file1", 000) = 30 [pid 5165] creat("./file1", 000) = 31 [pid 5165] creat("./file1", 000) = 32 [pid 5165] creat("./file1", 000) = 33 [pid 5165] creat("./file1", 000) = 34 [pid 5165] creat("./file1", 000) = 35 [pid 5165] creat("./file1", 000) = 36 [pid 5165] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5163] <... futex resumed>) = 0 [pid 5163] exit_group(0 [pid 5164] <... futex resumed>) = ? [pid 5163] <... exit_group resumed>) = ? [pid 5164] +++ exited with 0 +++ [pid 5165] +++ exited with 0 +++ [pid 5163] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./55/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./55/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./55/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./55/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./55/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./55/bus") = 0 umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./55/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./55") = 0 mkdir("./56", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5166 ./strace-static-x86_64: Process 5166 attached [pid 5166] set_robust_list(0x555555df95e0, 24) = 0 [pid 5166] chdir("./56") = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5166] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5166] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5166] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5167 attached , parent_tid=[5167], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5167 [pid 5166] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] set_robust_list(0x7f15b41429e0, 24 [pid 5166] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5167] <... set_robust_list resumed>) = 0 [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 74.665840][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5167] munmap(0x7f15abd22000, 524288) = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./bus", 0777) = 0 [pid 5167] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5167] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./bus") = 0 [pid 5167] ioctl(4, LOOP_CLR_FD) = 0 [pid 5167] close(4) = 0 [pid 5167] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 1 [pid 5166] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5167] rename("./file1", "./bus" [pid 5166] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5166] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5166] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5168], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5168 [pid 5166] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] <... rename resumed>) = 0 [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5168 attached [pid 5168] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 4 [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 5 [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 6 [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 7 [pid 5168] creat("./file1", 000) = 8 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000) = 9 [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 10 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 11 [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 12 [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 13 [pid 5167] rename("./file1", "./bus" [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 14 [pid 5167] rename("./file1", "./bus" [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 15 [pid 5167] rename("./file1", "./bus" [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [ 74.729805][ T5167] loop0: detected capacity change from 0 to 1024 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 16 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 17 [pid 5167] rename("./file1", "./bus" [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 18 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 19 [pid 5167] rename("./file1", "./bus" [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 20 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 21 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 22 [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 23 [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 24 [pid 5167] rename("./file1", "./bus" [pid 5168] creat("./file1", 000 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] <... creat resumed>) = 25 [pid 5167] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] rename("./file1", "./bus" [pid 5168] <... creat resumed>) = 26 [pid 5167] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5168] creat("./file1", 000 [pid 5167] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] <... creat resumed>) = 27 [pid 5167] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5168] creat("./file1", 000) = 28 [pid 5168] creat("./file1", 000) = 29 [pid 5168] creat("./file1", 000) = 30 [pid 5168] creat("./file1", 000) = 31 [pid 5168] creat("./file1", 000) = 32 [pid 5168] creat("./file1", 000) = 33 [pid 5168] creat("./file1", 000) = 34 [pid 5168] creat("./file1", 000) = 35 [pid 5168] creat("./file1", 000) = 36 [pid 5168] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5168] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] exit_group(0 [pid 5168] <... futex resumed>) = ? [pid 5167] <... futex resumed>) = ? [pid 5166] <... exit_group resumed>) = ? [pid 5168] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 5166] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./56/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./56/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./56/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./56/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./56/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./56/bus") = 0 umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./56/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./56") = 0 mkdir("./57", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] set_robust_list(0x555555df95e0, 24) = 0 [pid 5169] chdir("./57") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5169] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5169] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5170 attached , parent_tid=[5170], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5170 [pid 5170] set_robust_list(0x7f15b41429e0, 24 [pid 5169] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5170] <... set_robust_list resumed>) = 0 [pid 5170] memfd_create("syzkaller", 0) = 3 [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 74.842214][ T75] hfsplus: b-tree write err: -5, ino 8 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5170] munmap(0x7f15abd22000, 524288) = 0 [pid 5170] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5170] close(3) = 0 [pid 5170] mkdir("./bus", 0777) = 0 [pid 5170] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5170] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5170] chdir("./bus") = 0 [pid 5170] ioctl(4, LOOP_CLR_FD) = 0 [pid 5170] close(4) = 0 [pid 5170] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5170] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5169] <... futex resumed>) = 0 [pid 5170] rename("./file1", "./bus" [pid 5169] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] <... rename resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5170] rename("./file1", "./bus" [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5169] <... mmap resumed>) = 0x7f15abd81000 [pid 5169] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5171 attached , parent_tid=[5171], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5171 [pid 5171] set_robust_list(0x7f15abda19e0, 24) = 0 [pid 5171] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] creat("./file1", 000) = 4 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] <... creat resumed>) = 5 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] <... creat resumed>) = 6 [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 7 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000) = 8 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] <... creat resumed>) = 9 [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 10 [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 11 [pid 5171] creat("./file1", 000) = 12 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 13 [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] <... creat resumed>) = 14 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 74.910506][ T5170] loop0: detected capacity change from 0 to 1024 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 15 [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] <... creat resumed>) = 16 [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 17 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000) = 18 [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 19 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 20 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000) = 21 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 22 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 23 [pid 5171] creat("./file1", 000) = 24 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000) = 25 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 26 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 27 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... creat resumed>) = 28 [pid 5171] creat("./file1", 000 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] <... creat resumed>) = 29 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 30 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 31 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000) = 32 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 33 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 34 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] creat("./file1", 000) = 35 [pid 5170] rename("./file1", "./bus" [pid 5171] creat("./file1", 000) = 36 [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5171] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] rename("./file1", "./bus" [pid 5171] <... futex resumed>) = 1 [pid 5171] futex(0x7f15b421b798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5169] <... futex resumed>) = 0 [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5170] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] exit_group(0 [pid 5171] <... futex resumed>) = ? [pid 5170] <... futex resumed>) = ? [pid 5169] <... exit_group resumed>) = ? [pid 5171] +++ exited with 0 +++ [pid 5170] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555dfa620 /* 4 entries */, 32768) = 104 umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./57/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./57/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./57/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555e02660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555e02660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./57/bus") = 0 umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./57/binderfs") = 0 getdents64(3, 0x555555dfa620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./57") = 0 mkdir("./58", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555df95d0) = 5172 ./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x555555df95e0, 24) = 0 [pid 5172] chdir("./58") = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5172] setpgid(0, 0) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] write(3, "1000", 4) = 4 [pid 5172] close(3) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5172] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15b4122000 [pid 5172] mprotect(0x7f15b4123000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5172] clone(child_stack=0x7f15b41423f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5173 attached , parent_tid=[5173], tls=0x7f15b4142700, child_tidptr=0x7f15b41429d0) = 5173 [pid 5173] set_robust_list(0x7f15b41429e0, 24) = 0 [pid 5173] futex(0x7f15b421b788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5173] <... futex resumed>) = 0 [pid 5172] futex(0x7f15b421b78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15abd22000 [ 75.015751][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5173] munmap(0x7f15abd22000, 524288) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./bus", 0777) = 0 [pid 5173] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5173] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5173] chdir("./bus") = 0 [pid 5173] ioctl(4, LOOP_CLR_FD) = 0 [pid 5173] close(4) = 0 [pid 5173] futex(0x7f15b421b78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 0 [pid 5172] futex(0x7f15b421b788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7f15b421b79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f15abd81000 [pid 5172] mprotect(0x7f15abd82000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5172] clone(child_stack=0x7f15abda13f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5174 attached , parent_tid=[5174], tls=0x7f15abda1700, child_tidptr=0x7f15abda19d0) = 5174 [pid 5174] set_robust_list(0x7f15abda19e0, 24 [pid 5172] futex(0x7f15b421b798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5172] <... futex resumed>) = 0 [pid 5174] creat("./file1", 000 [pid 5173] <... futex resumed>) = 1 [pid 5172] futex(0x7f15b421b79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] rename("./file1", "./bus") = 0 [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5174] <... creat resumed>) = 4 [pid 5173] rename("./file1", "./bus" [pid 5174] creat("./file1", 000 [pid 5173] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5173] rename("./file1", "./bus" [pid 5174] <... creat resumed>) = 5 [ 75.087812][ T5173] loop0: detected capacity change from 0 to 1024 [ 75.142619][ T5173] ------------[ cut here ]------------ [ 75.148483][ T5173] WARNING: CPU: 0 PID: 5173 at fs/inode.c:331 drop_nlink+0xbf/0x100 [ 75.156582][ T5173] Modules linked in: [ 75.160526][ T5173] CPU: 0 PID: 5173 Comm: syz-executor391 Not tainted 6.4.0-rc1-syzkaller-00109-gcc3c44c9fda2 #0 [ 75.171170][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 75.181315][ T5173] RIP: 0010:drop_nlink+0xbf/0x100 [pid 5173] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5174] creat("./file1", 000 [ 75.186447][ T5173] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 77 38 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 a1 68 91 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 75.206221][ T5173] RSP: 0018:ffffc90003eef950 EFLAGS: 00010293 [ 75.212366][ T5173] RAX: ffffffff81f9fe9f RBX: 1ffff1100ebbf39f RCX: ffff8880207f0000 [ 75.220685][ T5173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.228984][ T5173] RBP: 0000000000000000 R08: ffffffff81f9fe23 R09: fffff520007dde8d [pid 5173] rename("./file1", "./bus" [pid 5172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 75.237124][ T5173] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888075df9cf8 [ 75.245173][ T5173] R13: ffff88807f0547b0 R14: ffff888075df9cb0 R15: dffffc0000000000 [ 75.253655][ T5173] FS: 00007f15b4142700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 75.262698][ T5173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.269372][ T5173] CR2: 00000000200028c4 CR3: 0000000015f9f000 CR4: 00000000003506f0 [ 75.277572][ T5173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.286019][ T5173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.294284][ T5173] Call Trace: [ 75.297939][ T5173] [ 75.300954][ T5173] hfsplus_unlink+0x3fe/0x7f0 [ 75.305814][ T5173] ? hfsplus_link+0x840/0x840 [ 75.310865][ T5173] ? __might_sleep+0xc0/0xc0 [ 75.315771][ T5173] ? clear_nonspinnable+0x60/0x60 [ 75.321206][ T5173] ? clear_nonspinnable+0x60/0x60 [ 75.326381][ T5173] hfsplus_rename+0xc8/0x1c0 [ 75.331297][ T5173] ? hfsplus_mknod+0x2a0/0x2a0 [ 75.336195][ T5173] vfs_rename+0xb1b/0xfa0 [ 75.340698][ T5173] ? __ia32_sys_link+0x90/0x90 [ 75.345809][ T5173] ? __down_write_common+0x161/0x200 [ 75.351216][ T5173] ? security_path_rename+0x183/0x210 [ 75.356833][ T5173] do_renameat2+0xd78/0x1660 [ 75.361674][ T5173] ? fsnotify_move+0x4f0/0x4f0 [ 75.366636][ T5173] ? __kasan_slab_alloc+0x66/0x70 [ 75.371837][ T5173] ? __check_object_size+0x4e1/0xa40 [ 75.377327][ T5173] ? getname_flags+0x1f0/0x4e0 [ 75.382295][ T5173] __x64_sys_rename+0x86/0x90 [ 75.387230][ T5173] do_syscall_64+0x41/0xc0 [ 75.391804][ T5173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.397835][ T5173] RIP: 0033:0x7f15b4196539 [ 75.402296][ T5173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.422284][ T5173] RSP: 002b:00007f15b41422f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 75.431485][ T5173] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f15b4196539 [ 75.439913][ T5173] RDX: ffffffffffffffb8 RSI: 00000000200028c0 RDI: 00000000200000c0 [ 75.448024][ T5173] RBP: 00007f15b421b788 R08: 0000000000000000 R09: 0000000000000000 [ 75.456109][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15b421b780 [ 75.464671][ T5173] R13: 0000000020000cc0 R14: 0031656c69662f2e R15: 0073756c70736668 [ 75.472925][ T5173] [ 75.476193][ T5173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.483502][ T5173] CPU: 0 PID: 5173 Comm: syz-executor391 Not tainted 6.4.0-rc1-syzkaller-00109-gcc3c44c9fda2 #0 [ 75.494242][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 75.504705][ T5173] Call Trace: [ 75.508222][ T5173] [ 75.511268][ T5173] dump_stack_lvl+0x1e7/0x2d0 [ 75.515989][ T5173] ? nf_tcp_handle_invalid+0x650/0x650 [ 75.521595][ T5173] ? panic+0x770/0x770 [ 75.525890][ T5173] ? vscnprintf+0x5d/0x80 [ 75.530396][ T5173] panic+0x30f/0x770 [ 75.534348][ T5173] ? __warn+0x171/0x4a0 [ 75.538641][ T5173] ? __memcpy_flushcache+0x2b0/0x2b0 [ 75.543992][ T5173] __warn+0x314/0x4a0 [ 75.548033][ T5173] ? drop_nlink+0xbf/0x100 [ 75.552797][ T5173] report_bug+0x2b3/0x500 [ 75.557293][ T5173] ? drop_nlink+0xbf/0x100 [ 75.561826][ T5173] handle_bug+0x3d/0x70 [ 75.566048][ T5173] exc_invalid_op+0x1a/0x50 [ 75.570622][ T5173] asm_exc_invalid_op+0x1a/0x20 [ 75.575539][ T5173] RIP: 0010:drop_nlink+0xbf/0x100 [ 75.580717][ T5173] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 77 38 e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 a1 68 91 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 75.600608][ T5173] RSP: 0018:ffffc90003eef950 EFLAGS: 00010293 [ 75.606872][ T5173] RAX: ffffffff81f9fe9f RBX: 1ffff1100ebbf39f RCX: ffff8880207f0000 [ 75.614930][ T5173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.623241][ T5173] RBP: 0000000000000000 R08: ffffffff81f9fe23 R09: fffff520007dde8d [ 75.631511][ T5173] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888075df9cf8 [ 75.639502][ T5173] R13: ffff88807f0547b0 R14: ffff888075df9cb0 R15: dffffc0000000000 [ 75.647586][ T5173] ? drop_nlink+0x43/0x100 [ 75.652024][ T5173] ? drop_nlink+0xbf/0x100 [ 75.656488][ T5173] hfsplus_unlink+0x3fe/0x7f0 [ 75.661195][ T5173] ? hfsplus_link+0x840/0x840 [ 75.665888][ T5173] ? __might_sleep+0xc0/0xc0 [ 75.670512][ T5173] ? clear_nonspinnable+0x60/0x60 [ 75.675639][ T5173] ? clear_nonspinnable+0x60/0x60 [ 75.680822][ T5173] hfsplus_rename+0xc8/0x1c0 [ 75.685720][ T5173] ? hfsplus_mknod+0x2a0/0x2a0 [ 75.690552][ T5173] vfs_rename+0xb1b/0xfa0 [ 75.694964][ T5173] ? __ia32_sys_link+0x90/0x90 [ 75.699777][ T5173] ? __down_write_common+0x161/0x200 [ 75.705562][ T5173] ? security_path_rename+0x183/0x210 [ 75.711318][ T5173] do_renameat2+0xd78/0x1660 [ 75.716198][ T5173] ? fsnotify_move+0x4f0/0x4f0 [ 75.721041][ T5173] ? __kasan_slab_alloc+0x66/0x70 [ 75.726237][ T5173] ? __check_object_size+0x4e1/0xa40 [ 75.731569][ T5173] ? getname_flags+0x1f0/0x4e0 [ 75.736449][ T5173] __x64_sys_rename+0x86/0x90 [ 75.741156][ T5173] do_syscall_64+0x41/0xc0 [ 75.745595][ T5173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.751522][ T5173] RIP: 0033:0x7f15b4196539 [ 75.755980][ T5173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.775601][ T5173] RSP: 002b:00007f15b41422f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 75.784032][ T5173] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f15b4196539 [ 75.792013][ T5173] RDX: ffffffffffffffb8 RSI: 00000000200028c0 RDI: 00000000200000c0 [ 75.800024][ T5173] RBP: 00007f15b421b788 R08: 0000000000000000 R09: 0000000000000000 [ 75.808102][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15b421b780 [ 75.816517][ T5173] R13: 0000000020000cc0 R14: 0031656c69662f2e R15: 0073756c70736668 [ 75.824514][ T5173] [ 75.827736][ T5173] Kernel Offset: disabled [ 75.832165][ T5173] Rebooting in 86400 seconds..