./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2133015336 <...> Warning: Permanently added '10.128.1.52' (ECDSA) to the list of known hosts. execve("./syz-executor2133015336", ["./syz-executor2133015336"], 0x7ffc24fbd340 /* 10 vars */) = 0 brk(NULL) = 0x555555a33000 brk(0x555555a33c40) = 0x555555a33c40 arch_prctl(ARCH_SET_FS, 0x555555a33300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555555a335d0) = 4991 set_robust_list(0x555555a335e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f5bfd392490, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f5bfd392b60}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f5bfd392530, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f5bfd392b60}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2133015336", 4096) = 28 brk(0x555555a54c40) = 0x555555a54c40 brk(0x555555a55000) = 0x555555a55000 mprotect(0x7f5bfd454000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 4991 mkdir("./syzkaller.55ffUz", 0700) = 0 chmod("./syzkaller.55ffUz", 0777) = 0 chdir("./syzkaller.55ffUz") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 4993 ./strace-static-x86_64: Process 4993 attached [pid 4993] set_robust_list(0x555555a335e0, 24) = 0 [pid 4993] chdir("./0") = 0 [pid 4993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4993] setpgid(0, 0) = 0 [pid 4993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4993] write(3, "1000", 4) = 4 [pid 4993] close(3) = 0 [pid 4993] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4993] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 4993] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4993] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4994 attached [pid 4994] set_robust_list(0x7f5bfd3819e0, 24 [pid 4993] <... clone resumed>, parent_tid=[4994], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 4994 [pid 4994] <... set_robust_list resumed>) = 0 [pid 4994] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4993] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4994] <... futex resumed>) = 0 [pid 4993] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] memfd_create("syzkaller", 0) = 3 [pid 4994] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 4994] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 4994] munmap(0x7f5bf4f61000, 524288) = 0 [pid 4994] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4994] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4994] close(3) = 0 [pid 4994] mkdir("./bus", 0777) = 0 syzkaller login: [ 55.739400][ T4994] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4994 'syz-executor213' [ 55.760108][ T4994] loop0: detected capacity change from 0 to 1024 [ 55.770387][ T4994] ======================================================= [ 55.770387][ T4994] WARNING: The mand mount option has been deprecated and [pid 4994] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 4994] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4994] chdir("./bus") = 0 [pid 4994] ioctl(4, LOOP_CLR_FD) = 0 [pid 4994] close(4) = 0 [pid 4994] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4994] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4993] <... futex resumed>) = 0 [pid 4993] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... futex resumed>) = 0 [pid 4993] <... futex resumed>) = 1 [pid 4994] rename("./file1", "./bus") = 0 [pid 4993] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus" [pid 4993] <... mmap resumed>) = 0x7f5bf4fc0000 [pid 4994] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4993] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE [pid 4994] rename("./file1", "./bus" [pid 4993] <... mprotect resumed>) = 0 [pid 4994] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4993] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4993] <... clone resumed>, parent_tid=[4995], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 4995 [pid 4993] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] rename("./file1", "./bus" [pid 4993] <... futex resumed>) = 0 [pid 4994] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4993] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus"./strace-static-x86_64: Process 4995 attached ) = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [ 55.770387][ T4994] and is ignored by this kernel. Remove the mand [ 55.770387][ T4994] option from the mount to silence this warning. [ 55.770387][ T4994] ======================================================= [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4994] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4995] set_robust_list(0x7f5bf4fe09e0, 24) = 0 [pid 4995] creat("./file1", 000) = 4 [pid 4995] creat("./file1", 000) = 5 [pid 4995] creat("./file1", 000) = 6 [pid 4995] creat("./file1", 000) = 7 [pid 4995] creat("./file1", 000) = 8 [pid 4995] creat("./file1", 000) = 9 [pid 4995] creat("./file1", 000) = 10 [pid 4995] creat("./file1", 000) = 11 [pid 4995] creat("./file1", 000) = 12 [pid 4995] creat("./file1", 000) = 13 [pid 4995] creat("./file1", 000) = 14 [pid 4995] creat("./file1", 000) = 15 [pid 4995] creat("./file1", 000) = 16 [pid 4995] creat("./file1", 000) = 17 [pid 4995] creat("./file1", 000) = 18 [pid 4995] creat("./file1", 000) = 19 [pid 4995] creat("./file1", 000) = 20 [pid 4995] creat("./file1", 000) = 21 [pid 4995] creat("./file1", 000) = 22 [pid 4995] creat("./file1", 000) = 23 [pid 4995] creat("./file1", 000) = 24 [pid 4995] creat("./file1", 000) = 25 [pid 4995] creat("./file1", 000) = 26 [pid 4995] creat("./file1", 000) = 27 [pid 4995] creat("./file1", 000) = 28 [pid 4995] creat("./file1", 000) = 29 [pid 4995] creat("./file1", 000) = 30 [pid 4995] creat("./file1", 000) = 31 [pid 4995] creat("./file1", 000) = 32 [pid 4995] creat("./file1", 000) = 33 [pid 4995] creat("./file1", 000) = 34 [pid 4995] creat("./file1", 000) = 35 [pid 4995] creat("./file1", 000) = 36 [pid 4995] creat("./file1", 000) = 37 [pid 4995] creat("./file1", 000 [pid 4993] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4995] <... creat resumed>) = 38 [pid 4995] creat("./file1", 000) = 39 [pid 4995] creat("./file1", 000) = 40 [pid 4995] creat("./file1", 000) = 41 [pid 4995] creat("./file1", 000) = 42 [pid 4995] creat("./file1", 000) = 43 [pid 4995] creat("./file1", 000) = 44 [pid 4995] creat("./file1", 000) = 45 [pid 4995] creat("./file1", 000) = 46 [pid 4995] creat("./file1", 000) = 47 [pid 4995] creat("./file1", 000) = 48 [pid 4995] creat("./file1", 000) = 49 [pid 4995] creat("./file1", 000) = 50 [pid 4995] creat("./file1", 000) = 51 [pid 4995] creat("./file1", 000) = 52 [pid 4995] creat("./file1", 000) = 53 [pid 4995] creat("./file1", 000) = 54 [pid 4995] creat("./file1", 000) = 55 [pid 4995] creat("./file1", 000) = 56 [pid 4995] creat("./file1", 000) = 57 [pid 4995] creat("./file1", 000) = 58 [pid 4995] creat("./file1", 000) = 59 [pid 4995] creat("./file1", 000) = 60 [pid 4995] creat("./file1", 000) = 61 [pid 4995] creat("./file1", 000) = 62 [pid 4995] creat("./file1", 000) = 63 [pid 4995] creat("./file1", 000) = 64 [pid 4995] creat("./file1", 000) = 65 [pid 4995] creat("./file1", 000) = 66 [pid 4995] creat("./file1", 000) = 67 [pid 4995] creat("./file1", 000) = 68 [pid 4995] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] futex(0x7f5bfd45a798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4993] exit_group(0 [pid 4995] <... futex resumed>) = ? [pid 4994] <... futex resumed>) = ? [pid 4993] <... exit_group resumed>) = ? [pid 4995] +++ exited with 0 +++ [pid 4994] +++ exited with 0 +++ [pid 4993] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4993, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555a34620 /* 4 entries */, 32768) = 104 umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555a3c660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555a3c660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/bus") = 0 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x555555a34620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 4996 ./strace-static-x86_64: Process 4996 attached [pid 4996] set_robust_list(0x555555a335e0, 24) = 0 [pid 4996] chdir("./1") = 0 [pid 4996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4996] setpgid(0, 0) = 0 [pid 4996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4996] write(3, "1000", 4) = 4 [pid 4996] close(3) = 0 [pid 4996] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4996] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 4996] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4996] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4997], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 4997 [pid 4996] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4997 attached [pid 4997] set_robust_list(0x7f5bfd3819e0, 24) = 0 [pid 4997] memfd_create("syzkaller", 0) = 3 [pid 4997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 4997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [ 55.923688][ T2398] hfsplus: b-tree write err: -5, ino 8 [pid 4997] munmap(0x7f5bf4f61000, 524288) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4997] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4997] close(3) = 0 [pid 4997] mkdir("./bus", 0777) = 0 [pid 4997] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 4997] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4997] chdir("./bus") = 0 [pid 4997] ioctl(4, LOOP_CLR_FD) = 0 [pid 4997] close(4) = 0 [pid 4997] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4996] <... futex resumed>) = 0 [pid 4997] rename("./file1", "./bus" [pid 4996] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4996] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bf4fc0000 [pid 4996] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4996] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4998 attached , parent_tid=[4998], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 4998 [pid 4998] set_robust_list(0x7f5bf4fe09e0, 24 [pid 4996] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000 [pid 4998] <... set_robust_list resumed>) = 0 [pid 4996] <... futex resumed>) = 0 [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = 0 [pid 4996] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 4 [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 5 [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 6 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 7 [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 8 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 9 [pid 4998] creat("./file1", 000) = 10 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 11 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000) = 12 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 13 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 14 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 15 [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 16 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 17 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 18 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 19 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 20 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 21 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 22 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 23 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 24 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 25 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 55.986081][ T4997] loop0: detected capacity change from 0 to 1024 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 26 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 27 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 28 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 29 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 30 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 31 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 32 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 33 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 34 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 35 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 36 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 37 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 38 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 39 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 40 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 41 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 42 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 43 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 44 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 45 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 46 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4996] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 47 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 48 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 49 [pid 4998] creat("./file1", 000) = 50 [pid 4998] creat("./file1", 000) = 51 [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 52 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 53 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 54 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 55 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 56 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 57 [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 58 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 59 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 60 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 61 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] creat("./file1", 000 [pid 4997] rename("./file1", "./bus" [pid 4998] <... creat resumed>) = 62 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000) = 63 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4997] rename("./file1", "./bus" [pid 4998] creat("./file1", 000 [pid 4997] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4998] <... creat resumed>) = 64 [pid 4997] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4997] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4998] creat("./file1", 000) = 65 [pid 4998] creat("./file1", 000) = 66 [pid 4998] creat("./file1", 000) = 67 [pid 4998] creat("./file1", 000) = 68 [pid 4998] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4998] futex(0x7f5bfd45a798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4996] exit_group(0 [pid 4998] <... futex resumed>) = ? [pid 4997] <... futex resumed>) = ? [pid 4996] <... exit_group resumed>) = ? [pid 4998] +++ exited with 0 +++ [pid 4997] +++ exited with 0 +++ [pid 4996] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4996, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555a34620 /* 4 entries */, 32768) = 104 umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555a3c660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555a3c660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/bus") = 0 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x555555a34620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 4999 ./strace-static-x86_64: Process 4999 attached [pid 4999] set_robust_list(0x555555a335e0, 24) = 0 [pid 4999] chdir("./2") = 0 [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4999] setpgid(0, 0) = 0 [pid 4999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] write(3, "1000", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 4999] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5000 attached , parent_tid=[5000], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 5000 [pid 5000] set_robust_list(0x7f5bfd3819e0, 24 [pid 4999] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... set_robust_list resumed>) = 0 [pid 4999] <... futex resumed>) = 0 [ 56.100759][ T2398] hfsplus: b-tree write err: -5, ino 8 [pid 4999] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5000] memfd_create("syzkaller", 0) = 3 [pid 5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 5000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5000] munmap(0x7f5bf4f61000, 524288) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5000] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5000] close(3) = 0 [pid 5000] mkdir("./bus", 0777) = 0 [pid 5000] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] chdir("./bus") = 0 [pid 5000] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] close(4) = 0 [pid 5000] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5000] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = 1 [pid 5000] rename("./file1", "./bus") = 0 [pid 4999] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] rename("./file1", "./bus" [pid 4999] <... mmap resumed>) = 0x7f5bf4fc0000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4999] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE [pid 5000] rename("./file1", "./bus" [pid 4999] <... mprotect resumed>) = 0 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4999] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] rename("./file1", "./bus" [pid 4999] <... clone resumed>, parent_tid=[5001], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 5001 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4999] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] rename("./file1", "./bus" [pid 4999] <... futex resumed>) = 0 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 4999] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus"./strace-static-x86_64: Process 5001 attached ) = -1 ENOENT (No such file or directory) [pid 5001] set_robust_list(0x7f5bf4fe09e0, 24 [pid 5000] rename("./file1", "./bus" [pid 5001] <... set_robust_list resumed>) = 0 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] creat("./file1", 000 [pid 5000] rename("./file1", "./bus" [pid 5001] <... creat resumed>) = 4 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5001] creat("./file1", 000 [pid 5000] rename("./file1", "./bus" [pid 5001] <... creat resumed>) = 5 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 6 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 7 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 8 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 9 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 10 [pid 5000] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 11 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 12 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 13 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 14 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 56.172871][ T5000] loop0: detected capacity change from 0 to 1024 [pid 5001] <... creat resumed>) = 15 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 16 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 17 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 18 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 19 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 20 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 21 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 22 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 23 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 24 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 25 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 26 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 27 [pid 5000] rename("./file1", "./bus" [pid 5001] creat("./file1", 000 [pid 5000] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5001] <... creat resumed>) = 28 [pid 5000] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] creat("./file1", 000 [pid 5000] <... futex resumed>) = 0 [pid 5001] <... creat resumed>) = 29 [pid 5000] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] creat("./file1", 000) = 30 [pid 5001] creat("./file1", 000) = 31 [pid 5001] creat("./file1", 000) = 32 [pid 5001] creat("./file1", 000) = 33 [pid 5001] creat("./file1", 000) = 34 [pid 5001] creat("./file1", 000) = 35 [pid 5001] creat("./file1", 000) = 36 [pid 5001] creat("./file1", 000) = 37 [pid 5001] creat("./file1", 000) = 38 [pid 5001] creat("./file1", 000) = 39 [pid 5001] creat("./file1", 000) = 40 [pid 5001] creat("./file1", 000) = 41 [pid 5001] creat("./file1", 000) = 42 [pid 5001] creat("./file1", 000) = 43 [pid 5001] creat("./file1", 000) = 44 [pid 5001] creat("./file1", 000) = 45 [pid 5001] creat("./file1", 000) = 46 [pid 5001] creat("./file1", 000) = 47 [pid 5001] creat("./file1", 000) = 48 [pid 5001] creat("./file1", 000) = 49 [pid 5001] creat("./file1", 000) = 50 [pid 5001] creat("./file1", 000) = 51 [pid 5001] creat("./file1", 000) = 52 [pid 5001] creat("./file1", 000) = 53 [pid 5001] creat("./file1", 000) = 54 [pid 5001] creat("./file1", 000) = 55 [pid 4999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5001] creat("./file1", 000 [pid 4999] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5001] <... creat resumed>) = 56 [pid 5001] creat("./file1", 000) = 57 [pid 5001] creat("./file1", 000) = 58 [pid 5001] creat("./file1", 000) = 59 [pid 5001] creat("./file1", 000) = 60 [pid 5001] creat("./file1", 000) = 61 [pid 5001] creat("./file1", 000) = 62 [pid 5001] creat("./file1", 000) = 63 [pid 5001] creat("./file1", 000) = 64 [pid 5001] creat("./file1", 000) = 65 [pid 5001] creat("./file1", 000) = 66 [pid 5001] creat("./file1", 000) = 67 [pid 5001] creat("./file1", 000) = 68 [pid 5001] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5001] futex(0x7f5bfd45a798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] exit_group(0 [pid 5000] <... futex resumed>) = ? [pid 5001] <... futex resumed>) = ? [pid 4999] <... exit_group resumed>) = ? [pid 5000] +++ exited with 0 +++ [pid 5001] +++ exited with 0 +++ [pid 4999] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4999, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555a34620 /* 4 entries */, 32768) = 104 umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555a3c660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555a3c660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/bus") = 0 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x555555a34620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 5002 ./strace-static-x86_64: Process 5002 attached [pid 5002] set_robust_list(0x555555a335e0, 24) = 0 [pid 5002] chdir("./3") = 0 [pid 5002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] setpgid(0, 0) = 0 [pid 5002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "1000", 4) = 4 [pid 5002] close(3) = 0 [ 56.287324][ T2398] hfsplus: b-tree write err: -5, ino 8 [pid 5002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 5002] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5002] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5003 attached , parent_tid=[5003], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 5003 [pid 5003] set_robust_list(0x7f5bfd3819e0, 24) = 0 [pid 5003] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5003] <... futex resumed>) = 0 [pid 5002] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5003] memfd_create("syzkaller", 0) = 3 [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5003] munmap(0x7f5bf4f61000, 524288) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5003] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5003] close(3) = 0 [pid 5003] mkdir("./bus", 0777) = 0 [pid 5003] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5003] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] chdir("./bus") = 0 [pid 5003] ioctl(4, LOOP_CLR_FD) = 0 [pid 5003] close(4) = 0 [pid 5003] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... futex resumed>) = 0 [pid 5002] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5002] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bf4fc0000 [pid 5002] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5002] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5003] <... futex resumed>) = 1 [pid 5002] <... clone resumed>, parent_tid=[5004], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 5004 [pid 5003] rename("./file1", "./bus" [pid 5002] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5003] <... rename resumed>) = 0 [pid 5002] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus"./strace-static-x86_64: Process 5004 attached ) = -1 ENOENT (No such file or directory) [pid 5004] set_robust_list(0x7f5bf4fe09e0, 24 [pid 5003] rename("./file1", "./bus" [pid 5004] <... set_robust_list resumed>) = 0 [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 4 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 5 [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] <... creat resumed>) = 6 [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] <... creat resumed>) = 7 [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] <... creat resumed>) = 8 [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 9 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000) = 10 [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 11 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000) = 12 [pid 5004] creat("./file1", 000) = 13 [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 14 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 15 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 16 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 17 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 18 [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] <... creat resumed>) = 19 [pid 5003] rename("./file1", "./bus" [ 56.364829][ T5003] loop0: detected capacity change from 0 to 1024 [pid 5004] creat("./file1", 000) = 20 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 21 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 22 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 23 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 24 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 25 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 26 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 27 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 28 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 29 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 30 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 31 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 32 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 33 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 34 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 35 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 36 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 37 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 38 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 39 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 40 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 41 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 42 [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] <... creat resumed>) = 43 [pid 5003] rename("./file1", "./bus" [pid 5002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5004] creat("./file1", 000) = 44 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 45 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 46 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 47 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 48 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 49 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 50 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 51 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 52 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000) = 53 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 54 [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 55 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 56 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5004] creat("./file1", 000 [pid 5003] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] <... creat resumed>) = 57 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] rename("./file1", "./bus" [pid 5004] creat("./file1", 000 [pid 5003] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5003] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] <... creat resumed>) = 58 [pid 5003] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] creat("./file1", 000) = 59 [pid 5004] creat("./file1", 000) = 60 [pid 5004] creat("./file1", 000) = 61 [pid 5004] creat("./file1", 000) = 62 [pid 5004] creat("./file1", 000) = 63 [pid 5004] creat("./file1", 000) = 64 [pid 5004] creat("./file1", 000) = 65 [pid 5004] creat("./file1", 000) = 66 [pid 5004] creat("./file1", 000) = 67 [pid 5004] creat("./file1", 000) = 68 [pid 5004] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f5bfd45a798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5002] exit_group(0 [pid 5004] <... futex resumed>) = ? [pid 5003] <... futex resumed>) = ? [pid 5002] <... exit_group resumed>) = ? [pid 5004] +++ exited with 0 +++ [pid 5003] +++ exited with 0 +++ [pid 5002] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5002, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555a34620 /* 4 entries */, 32768) = 104 umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555a3c660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555a3c660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/bus") = 0 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x555555a34620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 5005 ./strace-static-x86_64: Process 5005 attached [pid 5005] set_robust_list(0x555555a335e0, 24) = 0 [pid 5005] chdir("./4") = 0 [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5005] setpgid(0, 0) = 0 [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] write(3, "1000", 4) = 4 [pid 5005] close(3) = 0 [pid 5005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5005] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 5005] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5005] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5006], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 5006 [pid 5005] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5006 attached [pid 5006] set_robust_list(0x7f5bfd3819e0, 24) = 0 [pid 5006] memfd_create("syzkaller", 0) = 3 [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5006] munmap(0x7f5bf4f61000, 524288) = 0 [pid 5006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 56.474170][ T2398] hfsplus: b-tree write err: -5, ino 8 [pid 5006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5006] close(3) = 0 [pid 5006] mkdir("./bus", 0777) = 0 [pid 5006] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5006] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5006] chdir("./bus") = 0 [pid 5006] ioctl(4, LOOP_CLR_FD) = 0 [pid 5006] close(4) = 0 [pid 5006] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... futex resumed>) = 0 [pid 5005] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bf4fc0000 [pid 5005] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5005] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5007], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 5007 [pid 5005] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] <... futex resumed>) = 1 [pid 5006] rename("./file1", "./bus") = 0 [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5007 attached [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] set_robust_list(0x7f5bf4fe09e0, 24 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] <... set_robust_list resumed>) = 0 [pid 5006] rename("./file1", "./bus" [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 4 [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 5 [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] <... creat resumed>) = 6 [pid 5006] rename("./file1", "./bus" [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 7 [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 8 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 9 [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 10 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 11 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 12 [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 13 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 14 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 15 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 56.515351][ T5006] loop0: detected capacity change from 0 to 1024 [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 16 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 17 [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] <... creat resumed>) = 18 [pid 5006] rename("./file1", "./bus" [pid 5007] creat("./file1", 000 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 19 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 20 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 21 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5006] rename("./file1", "./bus" [pid 5007] creat("./file1", 000) = 22 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] rename("./file1", "./bus" [pid 5007] <... creat resumed>) = 23 [pid 5006] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5007] creat("./file1", 000 [pid 5006] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5007] <... creat resumed>) = 24 [pid 5007] creat("./file1", 000 [pid 5006] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5007] <... creat resumed>) = 25 [pid 5007] creat("./file1", 000) = 26 [pid 5007] creat("./file1", 000) = 27 [pid 5007] creat("./file1", 000) = 28 [pid 5005] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5007] creat("./file1", 000) = 29 [pid 5007] creat("./file1", 000) = 30 [pid 5007] creat("./file1", 000) = 31 [pid 5007] creat("./file1", 000) = 32 [pid 5007] creat("./file1", 000) = 33 [pid 5007] creat("./file1", 000) = 34 [pid 5007] creat("./file1", 000) = 35 [pid 5007] creat("./file1", 000) = 36 [pid 5007] creat("./file1", 000) = 37 [pid 5007] creat("./file1", 000) = 38 [pid 5007] creat("./file1", 000) = 39 [pid 5007] creat("./file1", 000) = 40 [pid 5007] creat("./file1", 000) = 41 [pid 5007] creat("./file1", 000) = 42 [pid 5007] creat("./file1", 000) = 43 [pid 5007] creat("./file1", 000) = 44 [pid 5007] creat("./file1", 000) = 45 [pid 5007] creat("./file1", 000) = 46 [pid 5007] creat("./file1", 000) = 47 [pid 5007] creat("./file1", 000) = 48 [pid 5007] creat("./file1", 000) = 49 [pid 5007] creat("./file1", 000) = 50 [pid 5007] creat("./file1", 000) = 51 [pid 5007] creat("./file1", 000) = 52 [pid 5007] creat("./file1", 000) = 53 [pid 5007] creat("./file1", 000) = 54 [pid 5007] creat("./file1", 000) = 55 [pid 5007] creat("./file1", 000) = 56 [pid 5007] creat("./file1", 000) = 57 [pid 5007] creat("./file1", 000) = 58 [pid 5007] creat("./file1", 000) = 59 [pid 5007] creat("./file1", 000) = 60 [pid 5007] creat("./file1", 000) = 61 [pid 5007] creat("./file1", 000) = 62 [pid 5007] creat("./file1", 000) = 63 [pid 5007] creat("./file1", 000) = 64 [pid 5007] creat("./file1", 000) = 65 [pid 5007] creat("./file1", 000) = 66 [pid 5007] creat("./file1", 000) = 67 [pid 5007] creat("./file1", 000) = 68 [pid 5007] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] exit_group(0 [pid 5006] <... futex resumed>) = ? [pid 5005] <... exit_group resumed>) = ? [pid 5006] +++ exited with 0 +++ [pid 5007] +++ exited with 0 +++ [pid 5005] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555a34620 /* 4 entries */, 32768) = 104 umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555a3c660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555a3c660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/bus") = 0 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x555555a34620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 5008 ./strace-static-x86_64: Process 5008 attached [pid 5008] set_robust_list(0x555555a335e0, 24) = 0 [pid 5008] chdir("./5") = 0 [pid 5008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5008] setpgid(0, 0) = 0 [pid 5008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5008] write(3, "1000", 4) = 4 [pid 5008] close(3) = 0 [pid 5008] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5008] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 5008] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5008] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5009 attached , parent_tid=[5009], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 5009 [pid 5008] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5009] set_robust_list(0x7f5bfd3819e0, 24) = 0 [pid 5009] memfd_create("syzkaller", 0) = 3 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5009] munmap(0x7f5bf4f61000, 524288) = 0 [pid 5009] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 56.637973][ T12] hfsplus: b-tree write err: -5, ino 8 [pid 5009] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5009] close(3) = 0 [pid 5009] mkdir("./bus", 0777) = 0 [pid 5009] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5009] chdir("./bus") = 0 [pid 5009] ioctl(4, LOOP_CLR_FD) = 0 [pid 5009] close(4) = 0 [pid 5009] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... futex resumed>) = 0 [pid 5008] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bf4fc0000 [pid 5008] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5008] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5010], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 5010 [pid 5008] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... futex resumed>) = 1 [pid 5009] rename("./file1", "./bus") = 0 [pid 5009] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 5010 attached [pid 5009] rename("./file1", "./bus" [pid 5010] set_robust_list(0x7f5bf4fe09e0, 24) = 0 [pid 5010] creat("./file1", 000) = 4 [pid 5010] creat("./file1", 000) = 5 [pid 5010] creat("./file1", 000) = 6 [pid 5010] creat("./file1", 000) = 7 [pid 5010] creat("./file1", 000) = 8 [pid 5010] creat("./file1", 000) = 9 [pid 5010] creat("./file1", 000) = 10 [pid 5010] creat("./file1", 000) = 11 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000) = 12 [pid 5010] creat("./file1", 000) = 13 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 14 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 15 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 16 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 17 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 18 [pid 5009] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 19 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 20 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 21 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 22 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 23 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000) = 24 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 25 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 26 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 27 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000) = 28 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 29 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 56.699403][ T5009] loop0: detected capacity change from 0 to 1024 [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 30 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 31 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 32 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 33 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 34 [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 35 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 36 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5008] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] <... creat resumed>) = 37 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5008] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5008] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5010] <... creat resumed>) = 38 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 39 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 40 [pid 5010] creat("./file1", 000) = 41 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 42 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 43 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 44 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 45 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 46 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 47 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 48 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 49 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 50 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 51 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 52 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 53 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 54 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 55 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 56 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 57 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 58 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 59 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 60 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 61 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 62 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000) = 63 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 64 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 65 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] <... creat resumed>) = 66 [pid 5009] rename("./file1", "./bus" [pid 5010] creat("./file1", 000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 67 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5010] creat("./file1", 000 [pid 5009] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] <... creat resumed>) = 68 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] <... futex resumed>) = 0 [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus" [pid 5010] futex(0x7f5bfd45a798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5009] <... rename resumed>) = -1 ENOENT (No such file or directory) [pid 5009] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5009] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5008] exit_group(0 [pid 5009] ???( [pid 5010] <... futex resumed>) = ? [pid 5009] <... ??? resumed>) = ? [pid 5008] <... exit_group resumed>) = ? [pid 5010] +++ exited with 0 +++ [pid 5009] +++ exited with 0 +++ [pid 5008] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5008, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555a34620 /* 4 entries */, 32768) = 104 umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555a3c660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555a3c660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/bus") = 0 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x555555a34620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a335d0) = 5011 ./strace-static-x86_64: Process 5011 attached [pid 5011] set_robust_list(0x555555a335e0, 24) = 0 [pid 5011] chdir("./6") = 0 [pid 5011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5011] setpgid(0, 0) = 0 [pid 5011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] write(3, "1000", 4) = 4 [pid 5011] close(3) = 0 [pid 5011] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5011] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bfd361000 [pid 5011] mprotect(0x7f5bfd362000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5011] clone(child_stack=0x7f5bfd3813f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5012 attached [pid 5012] set_robust_list(0x7f5bfd3819e0, 24) = 0 [pid 5012] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5011] <... clone resumed>, parent_tid=[5012], tls=0x7f5bfd381700, child_tidptr=0x7f5bfd3819d0) = 5012 [pid 5011] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5012] <... futex resumed>) = 0 [pid 5011] futex(0x7f5bfd45a78c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5012] memfd_create("syzkaller", 0) = 3 [pid 5012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5bf4f61000 [pid 5012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 5012] munmap(0x7f5bf4f61000, 524288) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 56.823279][ T46] hfsplus: b-tree write err: -5, ino 8 [pid 5012] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5012] close(3) = 0 [pid 5012] mkdir("./bus", 0777) = 0 [pid 5012] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 [pid 5012] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5012] chdir("./bus") = 0 [pid 5012] ioctl(4, LOOP_CLR_FD) = 0 [pid 5012] close(4) = 0 [pid 5012] futex(0x7f5bfd45a78c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5012] futex(0x7f5bfd45a788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5011] <... futex resumed>) = 0 [pid 5011] futex(0x7f5bfd45a788, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5011] futex(0x7f5bfd45a79c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f5bf4fc0000 [pid 5011] mprotect(0x7f5bf4fc1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5011] clone(child_stack=0x7f5bf4fe03f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5013], tls=0x7f5bf4fe0700, child_tidptr=0x7f5bf4fe09d0) = 5013 ./strace-static-x86_64: Process 5013 attached [pid 5011] futex(0x7f5bfd45a798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] futex(0x7f5bfd45a79c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... futex resumed>) = 0 [pid 5012] rename("./file1", "./bus" [pid 5013] set_robust_list(0x7f5bf4fe09e0, 24) = 0 [pid 5013] creat("./file1", 000) = 4 [pid 5013] creat("./file1", 000 [pid 5012] <... rename resumed>) = 0 [pid 5012] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5012] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5012] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5012] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5012] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5012] rename("./file1", "./bus") = -1 ENOENT (No such file or directory) [pid 5012] rename("./file1", "./bus" [pid 5013] <... creat resumed>) = 5 [pid 5013] creat("./file1", 000 [pid 5012] <... rename resumed>) = -1 ENOENT (No such file or directory) [ 56.881227][ T5012] loop0: detected capacity change from 0 to 1024 [pid 5012] rename("./file1", "./bus" [pid 5011] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 56.926059][ T5012] ------------[ cut here ]------------ [ 56.931942][ T5012] WARNING: CPU: 1 PID: 5012 at fs/inode.c:331 drop_nlink+0xbf/0x100 [ 56.940233][ T5012] Modules linked in: [ 56.944170][ T5012] CPU: 1 PID: 5012 Comm: syz-executor213 Not tainted 6.4.0-rc7-syzkaller-00019-g99ec1ed7c2ed #0 [ 56.954821][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 56.965037][ T5012] RIP: 0010:drop_nlink+0xbf/0x100 [ 56.970158][ T5012] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 e7 2c e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 81 52 91 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 56.989829][ T5012] RSP: 0018:ffffc90003b2f950 EFLAGS: 00010293 [ 56.996036][ T5012] RAX: ffffffff81fa2d1f RBX: 1ffff1100f612987 RCX: ffff88801f479dc0 [ 57.004195][ T5012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.012195][ T5012] RBP: 0000000000000000 R08: ffffffff81fa2ca3 R09: fffff52000765e8d [ 57.020240][ T5012] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807b094c38 [ 57.028284][ T5012] R13: ffff8880781f01d0 R14: ffff88807b094bf0 R15: dffffc0000000000 [ 57.036316][ T5012] FS: 00007f5bfd381700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 57.045296][ T5012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.051898][ T5012] CR2: 00007f5bf4f72000 CR3: 0000000021b8d000 CR4: 00000000003506e0 [ 57.059948][ T5012] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.067978][ T5012] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [pid 5011] exit_group(0) = ? [ 57.075998][ T5012] Call Trace: [ 57.079298][ T5012] [ 57.082253][ T5012] ? __warn+0x162/0x4a0 [ 57.086492][ T5012] ? drop_nlink+0xbf/0x100 [ 57.090938][ T5012] ? report_bug+0x2b3/0x500 [ 57.095608][ T5012] ? drop_nlink+0xbf/0x100 [ 57.100137][ T5012] ? handle_bug+0x3d/0x70 [ 57.104511][ T5012] ? exc_invalid_op+0x1a/0x50 [ 57.109219][ T5012] ? asm_exc_invalid_op+0x1a/0x20 [ 57.114341][ T5012] ? drop_nlink+0x43/0x100 [ 57.118782][ T5012] ? drop_nlink+0xbf/0x100 [ 57.123216][ T5012] ? drop_nlink+0xbf/0x100 [ 57.127681][ T5012] hfsplus_unlink+0x3fe/0x7f0 [ 57.132372][ T5012] ? hfsplus_link+0x840/0x840 [ 57.137090][ T5012] ? __might_sleep+0xc0/0xc0 [ 57.141702][ T5012] ? clear_nonspinnable+0x60/0x60 [ 57.146785][ T5012] ? clear_nonspinnable+0x60/0x60 [ 57.151835][ T5012] hfsplus_rename+0xc8/0x1c0 [ 57.156483][ T5012] ? hfsplus_mknod+0x2a0/0x2a0 [ 57.161350][ T5012] vfs_rename+0xb1b/0xfa0 [ 57.165758][ T5012] ? __ia32_sys_link+0x90/0x90 [ 57.170709][ T5012] ? __down_write_common+0x161/0x200 [ 57.176067][ T5012] ? security_path_rename+0x183/0x210 [ 57.181468][ T5012] do_renameat2+0xd78/0x1660 [ 57.186152][ T5012] ? fsnotify_move+0x4f0/0x4f0 [ 57.191033][ T5012] ? __kasan_slab_alloc+0x66/0x70 [ 57.196132][ T5012] ? __check_object_size+0x4e1/0xa40 [ 57.201530][ T5012] ? getname_flags+0x1f0/0x4e0 [ 57.206365][ T5012] __x64_sys_rename+0x86/0x90 [ 57.211133][ T5012] do_syscall_64+0x41/0xc0 [ 57.215707][ T5012] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.221614][ T5012] RIP: 0033:0x7f5bfd3d5539 [ 57.226106][ T5012] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.245956][ T5012] RSP: 002b:00007f5bfd3812f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 57.254446][ T5012] RAX: ffffffffffffffda RBX: 0000000000000039 RCX: 00007f5bfd3d5539 [ 57.262474][ T5012] RDX: ffffffffffffffb8 RSI: 0000000020000100 RDI: 00000000200000c0 [ 57.270531][ T5012] RBP: 00007f5bfd45a788 R08: 0000000000000000 R09: 0000000000000000 [ 57.278596][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bfd45a780 [ 57.286622][ T5012] R13: 0000000020000cc0 R14: 0031656c69662f2e R15: 0073756c70736668 [ 57.295004][ T5012] [ 57.298018][ T5012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.305290][ T5012] CPU: 1 PID: 5012 Comm: syz-executor213 Not tainted 6.4.0-rc7-syzkaller-00019-g99ec1ed7c2ed #0 [ 57.315694][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 57.325740][ T5012] Call Trace: [ 57.329016][ T5012] [ 57.331942][ T5012] dump_stack_lvl+0x1e7/0x2d0 [ 57.336704][ T5012] ? nf_tcp_handle_invalid+0x650/0x650 [ 57.342156][ T5012] ? panic+0x770/0x770 [ 57.346232][ T5012] ? vscnprintf+0x5d/0x80 [ 57.350560][ T5012] panic+0x30f/0x770 [ 57.354543][ T5012] ? __warn+0x171/0x4a0 [ 57.358695][ T5012] ? __memcpy_flushcache+0x2b0/0x2b0 [ 57.363997][ T5012] __warn+0x314/0x4a0 [ 57.368065][ T5012] ? drop_nlink+0xbf/0x100 [ 57.372662][ T5012] report_bug+0x2b3/0x500 [ 57.377003][ T5012] ? drop_nlink+0xbf/0x100 [ 57.381419][ T5012] handle_bug+0x3d/0x70 [ 57.385569][ T5012] exc_invalid_op+0x1a/0x50 [ 57.390156][ T5012] asm_exc_invalid_op+0x1a/0x20 [ 57.395015][ T5012] RIP: 0010:drop_nlink+0xbf/0x100 [ 57.400036][ T5012] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 e7 2c e9 ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 81 52 91 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 57.419725][ T5012] RSP: 0018:ffffc90003b2f950 EFLAGS: 00010293 [ 57.425800][ T5012] RAX: ffffffff81fa2d1f RBX: 1ffff1100f612987 RCX: ffff88801f479dc0 [ 57.433857][ T5012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.441831][ T5012] RBP: 0000000000000000 R08: ffffffff81fa2ca3 R09: fffff52000765e8d [ 57.449969][ T5012] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807b094c38 [ 57.457942][ T5012] R13: ffff8880781f01d0 R14: ffff88807b094bf0 R15: dffffc0000000000 [ 57.465914][ T5012] ? drop_nlink+0x43/0x100 [ 57.470330][ T5012] ? drop_nlink+0xbf/0x100 [ 57.474750][ T5012] hfsplus_unlink+0x3fe/0x7f0 [ 57.479430][ T5012] ? hfsplus_link+0x840/0x840 [ 57.484107][ T5012] ? __might_sleep+0xc0/0xc0 [ 57.489137][ T5012] ? clear_nonspinnable+0x60/0x60 [ 57.494161][ T5012] ? clear_nonspinnable+0x60/0x60 [ 57.499276][ T5012] hfsplus_rename+0xc8/0x1c0 [ 57.503861][ T5012] ? hfsplus_mknod+0x2a0/0x2a0 [ 57.508618][ T5012] vfs_rename+0xb1b/0xfa0 [ 57.512950][ T5012] ? __ia32_sys_link+0x90/0x90 [ 57.517714][ T5012] ? __down_write_common+0x161/0x200 [ 57.523086][ T5012] ? security_path_rename+0x183/0x210 [ 57.528492][ T5012] do_renameat2+0xd78/0x1660 [ 57.533107][ T5012] ? fsnotify_move+0x4f0/0x4f0 [ 57.537868][ T5012] ? __kasan_slab_alloc+0x66/0x70 [ 57.542892][ T5012] ? __check_object_size+0x4e1/0xa40 [ 57.548271][ T5012] ? getname_flags+0x1f0/0x4e0 [ 57.553032][ T5012] __x64_sys_rename+0x86/0x90 [ 57.557710][ T5012] do_syscall_64+0x41/0xc0 [ 57.562126][ T5012] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.568192][ T5012] RIP: 0033:0x7f5bfd3d5539 [ 57.572605][ T5012] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.592205][ T5012] RSP: 002b:00007f5bfd3812f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 57.600617][ T5012] RAX: ffffffffffffffda RBX: 0000000000000039 RCX: 00007f5bfd3d5539 [ 57.608591][ T5012] RDX: ffffffffffffffb8 RSI: 0000000020000100 RDI: 00000000200000c0 [ 57.616555][ T5012] RBP: 00007f5bfd45a788 R08: 0000000000000000 R09: 0000000000000000 [ 57.624518][ T5012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bfd45a780 [ 57.632493][ T5012] R13: 0000000020000cc0 R14: 0031656c69662f2e R15: 0073756c70736668 [ 57.640471][ T5012] [ 57.643965][ T5012] Kernel Offset: disabled [ 57.648385][ T5012] Rebooting in 86400 seconds..