./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1118831327

<...>
Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts.
execve("./syz-executor1118831327", ["./syz-executor1118831327"], 0x7fffab94ae10 /* 10 vars */) = 0
brk(NULL)                               = 0x555556e40000
brk(0x555556e40d40)                     = 0x555556e40d40
arch_prctl(ARCH_SET_FS, 0x555556e403c0) = 0
set_tid_address(0x555556e40690)         = 5033
set_robust_list(0x555556e406a0, 24)     = 0
rseq(0x555556e40ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1118831327", 4096) = 28
getrandom("\xb3\xcc\x56\xbe\x27\xc7\x95\x81", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555556e40d40
brk(0x555556e61d40)                     = 0x555556e61d40
brk(0x555556e62000)                     = 0x555556e62000
mprotect(0x7f517d630000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.NrzFsz", 0700)       = 0
chmod("./syzkaller.NrzFsz", 0777)       = 0
chdir("./syzkaller.NrzFsz")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e40690) = 5034
./strace-static-x86_64: Process 5034 attached
[pid  5034] set_robust_list(0x555556e406a0, 24) = 0
[pid  5034] chdir("./0")                = 0
[pid  5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5034] setpgid(0, 0)               = 0
[pid  5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5034] write(3, "1000", 4)         = 4
[pid  5034] close(3)                    = 0
[pid  5034] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5034] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5034] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5034] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5034] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5034] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0}./strace-static-x86_64: Process 5035 attached
 => {parent_tid=[5035]}, 88) = 5035
[pid  5034] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5034] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5034] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5035] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053) = 0
[pid  5035] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5035] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5035] memfd_create("syzkaller", 0) = 3
[pid  5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5035] munmap(0x7f517514a000, 524288) = 0
[pid  5035] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5035] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5035] close(3)                    = 0
[pid  5035] mkdir("./bus", 0777)        = 0
[   61.756305][ T5035] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5035 'syz-executor111'
[   61.773114][ T5035] loop0: detected capacity change from 0 to 1024
[   61.781582][ T5035] =======================================================
[   61.781582][ T5035] WARNING: The mand mount option has been deprecated and
[   61.781582][ T5035]          and is ignored by this kernel. Remove the mand
[pid  5035] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5035] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5035] chdir("./bus")              = 0
[pid  5035] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5035] close(4)                    = 0
[pid  5035] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5034] <... futex resumed>)        = 0
[pid  5035] <... futex resumed>)        = 1
[pid  5034] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] <... futex resumed>)        = 0
[pid  5035] <... rename resumed>)       = 0
[pid  5034] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5034] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5034] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0} <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
./strace-static-x86_64: Process 5037 attached
[pid  5037] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053) = 0
[pid  5037] set_robust_list(0x7f51751c99a0, 24) = 0
[pid  5037] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5037] futex(0x7f517d6366b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] <... clone3 resumed> => {parent_tid=[5037]}, 88) = 5037
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5034] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5034] <... futex resumed>)        = 1
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5034] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5037] <... futex resumed>)        = 0
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 4
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 5
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] <... creat resumed>)        = 6
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000)       = 7
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000)       = 8
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] <... creat resumed>)        = 9
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000)       = 10
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 11
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 12
[pid  5037] creat("./file1", 000)       = 13
[pid  5037] creat("./file1", 000)       = 14
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 15
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000)       = 16
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5037] <... creat resumed>)        = 17
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000)       = 18
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 19
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000)       = 20
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] creat("./file1", 000)       = 21
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 22
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 23
[pid  5037] creat("./file1", 000)       = 24
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 25
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 26
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] <... creat resumed>)        = 27
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 28
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5037] <... creat resumed>)        = 29
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] rename("./file1", "./bus" <unfinished ...>
[pid  5037] <... creat resumed>)        = 30
[pid  5035] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5035] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5037] creat("./file1", 000 <unfinished ...>
[pid  5035] <... futex resumed>)        = 0
[pid  5035] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5037] <... creat resumed>)        = 31
[pid  5037] creat("./file1", 000)       = 32
[pid  5037] creat("./file1", 000)       = 33
[pid  5037] creat("./file1", 000)       = 34
[pid  5037] creat("./file1", 000)       = 35
[pid  5037] creat("./file1", 000)       = 36
[pid  5037] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5034] <... futex resumed>)        = 0
[pid  5037] <... futex resumed>)        = 1
[pid  5034] exit_group(0)               = ?
[pid  5035] <... futex resumed>)        = ?
[pid  5035] +++ exited with 0 +++
[pid  5037] +++ exited with 0 +++
[pid  5034] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/bus")                        = 0
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5038 attached
, child_tidptr=0x555556e40690) = 5038
[pid  5038] set_robust_list(0x555556e406a0, 24) = 0
[pid  5038] chdir("./1")                = 0
[pid  5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5038] setpgid(0, 0)               = 0
[pid  5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5038] write(3, "1000", 4)         = 4
[pid  5038] close(3)                    = 0
[pid  5038] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5038] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5038] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5038] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5038] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5038] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0}./strace-static-x86_64: Process 5039 attached
 <unfinished ...>
[pid  5039] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053) = 0
[pid  5039] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5039] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5039] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5038] <... clone3 resumed> => {parent_tid=[5039]}, 88) = 5039
[pid  5038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5038] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5039] <... futex resumed>)        = 0
[pid  5038] <... futex resumed>)        = 1
[pid  5038] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5039] memfd_create("syzkaller", 0) = 3
[pid  5039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5039] munmap(0x7f517514a000, 524288) = 0
[pid  5039] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5039] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5039] close(3)                    = 0
[pid  5039] mkdir("./bus", 0777)        = 0
[pid  5039] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5039] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5039] chdir("./bus")              = 0
[pid  5039] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5039] close(4)                    = 0
[pid  5039] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5038] <... futex resumed>)        = 0
[pid  5038] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5038] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5038] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5038] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5038] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5039] <... futex resumed>)        = 1
[pid  5038] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5039] rename("./file1", "./bus")  = 0
[pid  5038] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0}./strace-static-x86_64: Process 5040 attached
 => {parent_tid=[5040]}, 88) = 5040
[pid  5038] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5038] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5038] <... futex resumed>)        = 0
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5038] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5040] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053) = 0
[pid  5040] set_robust_list(0x7f51751c99a0, 24 <unfinished ...>
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... set_robust_list resumed>) = 0
[pid  5040] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 4
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 5
[pid  5040] creat("./file1", 000)       = 6
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000)       = 7
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] <... creat resumed>)        = 8
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 9
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 10
[pid  5040] creat("./file1", 000)       = 11
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 12
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000)       = 13
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] creat("./file1", 000)       = 14
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 15
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 16
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000)       = 17
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] creat("./file1", 000)       = 18
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 19
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 20
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 21
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 22
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 23
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus" <unfinished ...>
[pid  5040] <... creat resumed>)        = 24
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5039] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5040] <... creat resumed>)        = 25
[pid  5040] creat("./file1", 000 <unfinished ...>
[pid  5039] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5039] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5040] <... creat resumed>)        = 26
[pid  5040] creat("./file1", 000)       = 27
[pid  5040] creat("./file1", 000)       = 28
[pid  5040] creat("./file1", 000)       = 29
[pid  5040] creat("./file1", 000)       = 30
[pid  5040] creat("./file1", 000)       = 31
[pid  5040] creat("./file1", 000)       = 32
[pid  5040] creat("./file1", 000)       = 33
[pid  5040] creat("./file1", 000)       = 34
[pid  5040] creat("./file1", 000)       = 35
[pid  5040] creat("./file1", 000)       = 36
[pid  5040] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5038] <... futex resumed>)        = 0
[pid  5038] exit_group(0 <unfinished ...>
[pid  5040] futex(0x7f517d6366b8, FUTEX_WAIT_PRIVATE, 0, NULL) = ?
[pid  5039] <... futex resumed>)        = ?
[pid  5038] <... exit_group resumed>)   = ?
[pid  5040] +++ exited with 0 +++
[pid  5039] +++ exited with 0 +++
[pid  5038] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5038, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/bus")                        = 0
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./1/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5041 attached
 <unfinished ...>
[pid  5041] set_robust_list(0x555556e406a0, 24 <unfinished ...>
[pid  5033] <... clone resumed>, child_tidptr=0x555556e40690) = 5041
[pid  5041] <... set_robust_list resumed>) = 0
[pid  5041] chdir("./2")                = 0
[pid  5041] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5041] setpgid(0, 0)               = 0
[pid  5041] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5041] write(3, "1000", 4)         = 4
[pid  5041] close(3)                    = 0
[pid  5041] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5041] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5041] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5041] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5041] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5041] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5041] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0} => {parent_tid=[5042]}, 88) = 5042
[pid  5041] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5041] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5041] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5042 attached
 <unfinished ...>
[pid  5042] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053) = 0
[pid  5042] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5042] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5042] memfd_create("syzkaller", 0) = 3
[pid  5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5042] munmap(0x7f517514a000, 524288) = 0
[pid  5042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5042] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5042] close(3)                    = 0
[pid  5042] mkdir("./bus", 0777)        = 0
[pid  5042] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5042] chdir("./bus")              = 0
[pid  5042] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5042] close(4)                    = 0
[pid  5042] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5042] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5041] <... futex resumed>)        = 0
[pid  5041] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5042] <... futex resumed>)        = 0
[pid  5042] rename("./file1", "./bus")  = 0
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5041] <... futex resumed>)        = 1
[pid  5041] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5041] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5041] <... mmap resumed>)         = 0x7f51751a9000
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5041] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5041] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5041] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5041] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0} => {parent_tid=[5043]}, 88) = 5043
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5041] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5041] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5041] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5041] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
./strace-static-x86_64: Process 5043 attached
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5043] <... rseq resumed>)         = 0
[pid  5043] set_robust_list(0x7f51751c99a0, 24) = 0
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5043] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] creat("./file1", 000 <unfinished ...>
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5043] <... creat resumed>)        = 4
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] creat("./file1", 000)       = 5
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5043] creat("./file1", 000)       = 6
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] creat("./file1", 000 <unfinished ...>
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5043] <... creat resumed>)        = 7
[pid  5043] creat("./file1", 000)       = 8
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] creat("./file1", 000 <unfinished ...>
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5043] <... creat resumed>)        = 9
[pid  5042] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5043] creat("./file1", 000 <unfinished ...>
[pid  5042] rename("./file1", "./bus" <unfinished ...>
[pid  5043] <... creat resumed>)        = 10
[pid  5042] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5043] creat("./file1", 000 <unfinished ...>
[pid  5042] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5043] <... creat resumed>)        = 11
[pid  5042] <... futex resumed>)        = 0
[pid  5042] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5043] creat("./file1", 000)       = 12
[pid  5043] creat("./file1", 000)       = 13
[pid  5043] creat("./file1", 000)       = 14
[pid  5043] creat("./file1", 000)       = 15
[pid  5043] creat("./file1", 000)       = 16
[pid  5043] creat("./file1", 000)       = 17
[pid  5043] creat("./file1", 000)       = 18
[pid  5043] creat("./file1", 000)       = 19
[pid  5043] creat("./file1", 000)       = 20
[pid  5043] creat("./file1", 000)       = 21
[pid  5043] creat("./file1", 000)       = 22
[pid  5043] creat("./file1", 000)       = 23
[pid  5043] creat("./file1", 000)       = 24
[pid  5043] creat("./file1", 000)       = 25
[pid  5043] creat("./file1", 000)       = 26
[pid  5043] creat("./file1", 000)       = 27
[pid  5043] creat("./file1", 000)       = 28
[pid  5043] creat("./file1", 000)       = 29
[pid  5043] creat("./file1", 000)       = 30
[pid  5043] creat("./file1", 000)       = 31
[pid  5043] creat("./file1", 000)       = 32
[pid  5043] creat("./file1", 000)       = 33
[pid  5043] creat("./file1", 000)       = 34
[pid  5043] creat("./file1", 000)       = 35
[pid  5043] creat("./file1", 000)       = 36
[pid  5043] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5041] <... futex resumed>)        = 0
[pid  5041] exit_group(0 <unfinished ...>
[pid  5042] <... futex resumed>)        = ?
[pid  5041] <... exit_group resumed>)   = ?
[pid  5042] +++ exited with 0 +++
[pid  5043] <... futex resumed>)        = ?
[pid  5043] +++ exited with 0 +++
[pid  5041] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5041, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/bus")                        = 0
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./2/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5044 attached
, child_tidptr=0x555556e40690) = 5044
[pid  5044] set_robust_list(0x555556e406a0, 24) = 0
[pid  5044] chdir("./3")                = 0
[pid  5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5044] setpgid(0, 0)               = 0
[pid  5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5044] write(3, "1000", 4)         = 4
[pid  5044] close(3)                    = 0
[pid  5044] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5044] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5044] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5044] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5044] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5044] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5044] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0}./strace-static-x86_64: Process 5045 attached
 <unfinished ...>
[pid  5045] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5044] <... clone3 resumed> => {parent_tid=[5045]}, 88) = 5045
[pid  5045] <... rseq resumed>)         = 0
[pid  5045] set_robust_list(0x7f517d56a9a0, 24 <unfinished ...>
[pid  5044] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5045] <... set_robust_list resumed>) = 0
[pid  5044] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5045] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5044] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5045] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5044] <... futex resumed>)        = 0
[pid  5044] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5045] memfd_create("syzkaller", 0) = 3
[pid  5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5045] munmap(0x7f517514a000, 524288) = 0
[pid  5045] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5045] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5045] close(3)                    = 0
[pid  5045] mkdir("./bus", 0777)        = 0
[pid  5045] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5045] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5045] chdir("./bus")              = 0
[pid  5045] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5045] close(4)                    = 0
[pid  5045] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5045] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5044] <... futex resumed>)        = 0
[pid  5044] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5044] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5045] <... futex resumed>)        = 0
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5044] <... futex resumed>)        = 0
[pid  5045] <... rename resumed>)       = 0
[pid  5044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5044] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5044] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5044] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5044] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0}./strace-static-x86_64: Process 5046 attached
 <unfinished ...>
[pid  5046] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... rseq resumed>)         = 0
[pid  5046] set_robust_list(0x7f51751c99a0, 24 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5044] <... clone3 resumed> => {parent_tid=[5046]}, 88) = 5046
[pid  5046] <... set_robust_list resumed>) = 0
[pid  5046] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5044] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5046] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5044] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5044] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5046] <... creat resumed>)        = 4
[pid  5044] <... futex resumed>)        = 0
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5044] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] <... creat resumed>)        = 5
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 6
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 7
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] <... creat resumed>)        = 8
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 9
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 10
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 11
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5046] <... creat resumed>)        = 12
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 13
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 14
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] <... creat resumed>)        = 15
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 16
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 17
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] creat("./file1", 000)       = 18
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 19
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 20
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 21
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5046] creat("./file1", 000 <unfinished ...>
[pid  5045] rename("./file1", "./bus" <unfinished ...>
[pid  5046] <... creat resumed>)        = 22
[pid  5045] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5045] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5045] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5046] creat("./file1", 000)       = 23
[pid  5046] creat("./file1", 000)       = 24
[pid  5046] creat("./file1", 000)       = 25
[pid  5046] creat("./file1", 000)       = 26
[pid  5046] creat("./file1", 000)       = 27
[pid  5046] creat("./file1", 000)       = 28
[pid  5046] creat("./file1", 000)       = 29
[pid  5046] creat("./file1", 000)       = 30
[pid  5046] creat("./file1", 000)       = 31
[pid  5046] creat("./file1", 000)       = 32
[pid  5046] creat("./file1", 000)       = 33
[pid  5046] creat("./file1", 000)       = 34
[pid  5046] creat("./file1", 000)       = 35
[pid  5046] creat("./file1", 000)       = 36
[pid  5046] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5044] <... futex resumed>)        = 0
[pid  5046] futex(0x7f517d6366b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5044] exit_group(0 <unfinished ...>
[pid  5046] <... futex resumed>)        = ?
[pid  5045] <... futex resumed>)        = ?
[pid  5044] <... exit_group resumed>)   = ?
[pid  5046] +++ exited with 0 +++
[pid  5045] +++ exited with 0 +++
[pid  5044] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/bus")                        = 0
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./3/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5047 attached
, child_tidptr=0x555556e40690) = 5047
[pid  5047] set_robust_list(0x555556e406a0, 24) = 0
[pid  5047] chdir("./4")                = 0
[pid  5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5047] setpgid(0, 0)               = 0
[pid  5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5047] write(3, "1000", 4)         = 4
[pid  5047] close(3)                    = 0
[pid  5047] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5047] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5047] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5047] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5047] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5047] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0} => {parent_tid=[5048]}, 88) = 5048
[pid  5047] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5047] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5047] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5048 attached
 <unfinished ...>
[pid  5048] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053) = 0
[pid  5048] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5048] memfd_create("syzkaller", 0) = 3
[pid  5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5048] munmap(0x7f517514a000, 524288) = 0
[pid  5048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5048] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5048] close(3)                    = 0
[pid  5048] mkdir("./bus", 0777)        = 0
[pid  5048] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5048] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5048] chdir("./bus")              = 0
[pid  5048] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5048] close(4)                    = 0
[pid  5048] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5048] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5047] <... futex resumed>)        = 0
[pid  5047] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5048] <... futex resumed>)        = 0
[pid  5047] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5047] <... futex resumed>)        = 0
[pid  5048] <... rename resumed>)       = 0
[pid  5047] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5047] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5047] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5047] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0} <unfinished ...>
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5047] <... clone3 resumed> => {parent_tid=[5049]}, 88) = 5049
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5047] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5047] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5047] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5047] <... futex resumed>)        = 0
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5047] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
./strace-static-x86_64: Process 5049 attached
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5049] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053) = 0
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5049] set_robust_list(0x7f51751c99a0, 24 <unfinished ...>
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5049] <... set_robust_list resumed>) = 0
[pid  5049] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5049] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5049] creat("./file1", 000 <unfinished ...>
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5049] <... creat resumed>)        = 4
[pid  5049] creat("./file1", 000 <unfinished ...>
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5048] rename("./file1", "./bus" <unfinished ...>
[pid  5049] <... creat resumed>)        = 5
[pid  5048] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5049] creat("./file1", 000 <unfinished ...>
[pid  5048] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5048] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5049] <... creat resumed>)        = 6
[pid  5049] creat("./file1", 000)       = 7
[pid  5049] creat("./file1", 000)       = 8
[pid  5049] creat("./file1", 000)       = 9
[pid  5049] creat("./file1", 000)       = 10
[pid  5049] creat("./file1", 000)       = 11
[pid  5049] creat("./file1", 000)       = 12
[pid  5049] creat("./file1", 000)       = 13
[pid  5049] creat("./file1", 000)       = 14
[pid  5049] creat("./file1", 000)       = 15
[pid  5049] creat("./file1", 000)       = 16
[pid  5049] creat("./file1", 000)       = 17
[pid  5049] creat("./file1", 000)       = 18
[pid  5049] creat("./file1", 000)       = 19
[pid  5049] creat("./file1", 000)       = 20
[pid  5049] creat("./file1", 000)       = 21
[pid  5049] creat("./file1", 000)       = 22
[pid  5049] creat("./file1", 000)       = 23
[pid  5049] creat("./file1", 000)       = 24
[pid  5049] creat("./file1", 000)       = 25
[pid  5049] creat("./file1", 000)       = 26
[pid  5049] creat("./file1", 000)       = 27
[pid  5049] creat("./file1", 000)       = 28
[pid  5049] creat("./file1", 000)       = 29
[pid  5049] creat("./file1", 000)       = 30
[pid  5049] creat("./file1", 000)       = 31
[pid  5049] creat("./file1", 000)       = 32
[pid  5049] creat("./file1", 000)       = 33
[pid  5049] creat("./file1", 000)       = 34
[pid  5049] creat("./file1", 000)       = 35
[pid  5049] creat("./file1", 000)       = 36
[pid  5049] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5047] <... futex resumed>)        = 0
[pid  5047] exit_group(0 <unfinished ...>
[pid  5049] futex(0x7f517d6366b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5048] <... futex resumed>)        = ?
[pid  5048] +++ exited with 0 +++
[pid  5047] <... exit_group resumed>)   = ?
[pid  5049] <... futex resumed>)        = ?
[pid  5049] +++ exited with 0 +++
[pid  5047] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./4/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/bus")                        = 0
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./4/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5050 attached
 <unfinished ...>
[pid  5050] set_robust_list(0x555556e406a0, 24) = 0
[pid  5050] chdir("./5" <unfinished ...>
[pid  5033] <... clone resumed>, child_tidptr=0x555556e40690) = 5050
[pid  5050] <... chdir resumed>)        = 0
[pid  5050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5050] setpgid(0, 0)               = 0
[pid  5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5050] write(3, "1000", 4)         = 4
[pid  5050] close(3)                    = 0
[pid  5050] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5050] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5050] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5050] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5050] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0}./strace-static-x86_64: Process 5051 attached
 <unfinished ...>
[pid  5051] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5050] <... clone3 resumed> => {parent_tid=[5051]}, 88) = 5051
[pid  5050] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5050] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5050] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5051] <... rseq resumed>)         = 0
[pid  5051] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5051] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5051] memfd_create("syzkaller", 0) = 3
[pid  5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5051] munmap(0x7f517514a000, 524288) = 0
[pid  5051] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5051] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5051] close(3)                    = 0
[pid  5051] mkdir("./bus", 0777)        = 0
[pid  5051] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5051] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5051] chdir("./bus")              = 0
[pid  5051] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5051] close(4)                    = 0
[pid  5051] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5050] <... futex resumed>)        = 0
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5050] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5051] <... rename resumed>)       = 0
[pid  5050] <... futex resumed>)        = 0
[pid  5050] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5050] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5050] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5050] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0}./strace-static-x86_64: Process 5052 attached
 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5050] <... clone3 resumed> => {parent_tid=[5052]}, 88) = 5052
[pid  5052] <... rseq resumed>)         = 0
[pid  5050] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5052] set_robust_list(0x7f51751c99a0, 24 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5050] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5052] <... set_robust_list resumed>) = 0
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5050] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5052] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5050] <... futex resumed>)        = 0
[pid  5052] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5050] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 4
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] <... creat resumed>)        = 5
[pid  5052] creat("./file1", 000)       = 6
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 7
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000)       = 8
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 9
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] <... creat resumed>)        = 10
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 11
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 12
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 13
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 14
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 15
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 16
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 17
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 18
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 19
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000)       = 20
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] <... creat resumed>)        = 21
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000)       = 22
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] <... creat resumed>)        = 23
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 24
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 25
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 26
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 27
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 28
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000)       = 29
[pid  5051] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] <... creat resumed>)        = 30
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] <... creat resumed>)        = 31
[pid  5051] rename("./file1", "./bus" <unfinished ...>
[pid  5052] creat("./file1", 000)       = 32
[pid  5051] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5052] creat("./file1", 000 <unfinished ...>
[pid  5051] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5052] <... creat resumed>)        = 33
[pid  5051] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5052] creat("./file1", 000)       = 34
[pid  5052] creat("./file1", 000)       = 35
[pid  5052] creat("./file1", 000)       = 36
[pid  5052] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5050] <... futex resumed>)        = 0
[pid  5050] exit_group(0)               = ?
[pid  5051] <... futex resumed>)        = ?
[pid  5051] +++ exited with 0 +++
[pid  5052] <... futex resumed>)        = ?
[pid  5052] +++ exited with 0 +++
[pid  5050] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} ---
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./5/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/bus")                        = 0
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./5/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e40690) = 5053
./strace-static-x86_64: Process 5053 attached
[pid  5053] set_robust_list(0x555556e406a0, 24) = 0
[pid  5053] chdir("./6")                = 0
[pid  5053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5053] setpgid(0, 0)               = 0
[pid  5053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5053] write(3, "1000", 4)         = 4
[pid  5053] close(3)                    = 0
[pid  5053] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5053] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5053] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5053] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5053] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0}./strace-static-x86_64: Process 5054 attached
 => {parent_tid=[5054]}, 88) = 5054
[pid  5054] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053) = 0
[pid  5053] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5054] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5053] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5054] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5053] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5054] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5053] <... futex resumed>)        = 0
[pid  5054] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5053] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5054] <... memfd_create resumed>) = 3
[pid  5054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5054] munmap(0x7f517514a000, 524288) = 0
[pid  5054] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5054] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5054] close(3)                    = 0
[pid  5054] mkdir("./bus", 0777)        = 0
[pid  5054] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5054] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5054] chdir("./bus")              = 0
[pid  5054] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5054] close(4)                    = 0
[pid  5054] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5053] <... futex resumed>)        = 0
[pid  5054] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5053] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5053] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5053] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5053] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5053] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0}./strace-static-x86_64: Process 5055 attached
 => {parent_tid=[5055]}, 88) = 5055
[pid  5053] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5053] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5053] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5054] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5054] <... rename resumed>)       = 0
[pid  5055] <... rseq resumed>)         = 0
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] set_robust_list(0x7f51751c99a0, 24 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] <... set_robust_list resumed>) = 0
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 4
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 5
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 6
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 7
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 8
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 9
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5055] <... creat resumed>)        = 10
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5055] <... creat resumed>)        = 11
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 12
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 13
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 14
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 15
[pid  5055] creat("./file1", 000)       = 16
[pid  5055] creat("./file1", 000)       = 17
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 18
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] <... creat resumed>)        = 19
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] rename("./file1", "./bus" <unfinished ...>
[pid  5055] <... creat resumed>)        = 20
[pid  5054] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5055] <... creat resumed>)        = 21
[pid  5054] <... futex resumed>)        = 0
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5054] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5055] <... creat resumed>)        = 22
[pid  5055] creat("./file1", 000)       = 23
[pid  5055] creat("./file1", 000)       = 24
[pid  5055] creat("./file1", 000)       = 25
[pid  5055] creat("./file1", 000)       = 26
[pid  5055] creat("./file1", 000)       = 27
[pid  5055] creat("./file1", 000)       = 28
[pid  5055] creat("./file1", 000)       = 29
[pid  5055] creat("./file1", 000)       = 30
[pid  5055] creat("./file1", 000)       = 31
[pid  5055] creat("./file1", 000)       = 32
[pid  5055] creat("./file1", 000)       = 33
[pid  5055] creat("./file1", 000)       = 34
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5053] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5053] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out)
[pid  5053] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} <unfinished ...>
[pid  5055] <... creat resumed>)        = 35
[pid  5055] creat("./file1", 000 <unfinished ...>
[pid  5053] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5055] <... creat resumed>)        = 36
[pid  5055] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5055] futex(0x7f517d6366b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5053] exit_group(0 <unfinished ...>
[pid  5055] <... futex resumed>)        = ?
[pid  5054] <... futex resumed>)        = ?
[pid  5053] <... exit_group resumed>)   = ?
[pid  5055] +++ exited with 0 +++
[pid  5054] +++ exited with 0 +++
[pid  5053] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5053, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./6/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/bus")                        = 0
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./6/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e40690) = 5056
./strace-static-x86_64: Process 5056 attached
[pid  5056] set_robust_list(0x555556e406a0, 24) = 0
[pid  5056] chdir("./7")                = 0
[pid  5056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5056] setpgid(0, 0)               = 0
[pid  5056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5056] write(3, "1000", 4)         = 4
[pid  5056] close(3)                    = 0
[pid  5056] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5056] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5056] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5056] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5056] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5056] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0} => {parent_tid=[5057]}, 88) = 5057
[pid  5056] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
./strace-static-x86_64: Process 5057 attached
[pid  5056] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5057] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5056] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5057] <... rseq resumed>)         = 0
[pid  5057] set_robust_list(0x7f517d56a9a0, 24) = 0
[pid  5057] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5057] memfd_create("syzkaller", 0) = 3
[pid  5057] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5057] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5057] munmap(0x7f517514a000, 524288) = 0
[pid  5057] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5057] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5057] close(3)                    = 0
[pid  5057] mkdir("./bus", 0777)        = 0
[pid  5057] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5057] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5057] chdir("./bus")              = 0
[pid  5057] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5057] close(4)                    = 0
[pid  5057] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5056] <... futex resumed>)        = 0
[pid  5057] <... futex resumed>)        = 1
[pid  5056] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5056] <... futex resumed>)        = 0
[pid  5057] <... rename resumed>)       = 0
[pid  5056] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5056] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5056] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5056] <... rt_sigprocmask resumed>[], 8) = 0
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5056] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0}./strace-static-x86_64: Process 5058 attached
 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5058] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5056] <... clone3 resumed> => {parent_tid=[5058]}, 88) = 5058
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5056] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5056] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5056] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5056] <... futex resumed>)        = 0
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5056] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5058] <... rseq resumed>)         = 0
[pid  5058] set_robust_list(0x7f51751c99a0, 24) = 0
[pid  5058] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 4
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 5
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 6
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 7
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 8
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus")  = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 9
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] rename("./file1", "./bus" <unfinished ...>
[pid  5058] <... creat resumed>)        = 10
[pid  5058] creat("./file1", 000 <unfinished ...>
[pid  5057] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5057] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5057] futex(0x7f517d6366a8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5058] <... creat resumed>)        = 11
[pid  5058] creat("./file1", 000)       = 12
[pid  5058] creat("./file1", 000)       = 13
[pid  5058] creat("./file1", 000)       = 14
[pid  5058] creat("./file1", 000)       = 15
[pid  5058] creat("./file1", 000)       = 16
[pid  5058] creat("./file1", 000)       = 17
[pid  5058] creat("./file1", 000)       = 18
[pid  5058] creat("./file1", 000)       = 19
[pid  5058] creat("./file1", 000)       = 20
[pid  5058] creat("./file1", 000)       = 21
[pid  5058] creat("./file1", 000)       = 22
[pid  5058] creat("./file1", 000)       = 23
[pid  5058] creat("./file1", 000)       = 24
[pid  5058] creat("./file1", 000)       = 25
[pid  5058] creat("./file1", 000)       = 26
[pid  5058] creat("./file1", 000)       = 27
[pid  5058] creat("./file1", 000)       = 28
[pid  5058] creat("./file1", 000)       = 29
[pid  5058] creat("./file1", 000)       = 30
[pid  5058] creat("./file1", 000)       = 31
[pid  5058] creat("./file1", 000)       = 32
[pid  5058] creat("./file1", 000)       = 33
[pid  5058] creat("./file1", 000)       = 34
[pid  5058] creat("./file1", 000)       = 35
[pid  5058] creat("./file1", 000)       = 36
[pid  5058] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5056] <... futex resumed>)        = 0
[pid  5056] exit_group(0)               = ?
[pid  5057] <... futex resumed>)        = ?
[pid  5057] +++ exited with 0 +++
[pid  5058] <... futex resumed>)        = ?
[pid  5058] +++ exited with 0 +++
[pid  5056] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5056, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555556e41730 /* 4 entries */, 32768) = 104
umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./7/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555556e49770 /* 2 entries */, 32768) = 48
getdents64(4, 0x555556e49770 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/bus")                        = 0
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./7/binderfs")                  = 0
getdents64(3, 0x555556e41730 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5059 attached
, child_tidptr=0x555556e40690) = 5059
[pid  5059] set_robust_list(0x555556e406a0, 24) = 0
[pid  5059] chdir("./8")                = 0
[pid  5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5059] setpgid(0, 0)               = 0
[pid  5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5059] write(3, "1000", 4)         = 4
[pid  5059] close(3)                    = 0
[pid  5059] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5059] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5059] rt_sigaction(SIGRT_1, {sa_handler=0x7f517d5d3eb0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f517d5c5060}, NULL, 8) = 0
[pid  5059] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f517d54a000
[pid  5059] mprotect(0x7f517d54b000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5059] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5059] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f517d56a990, parent_tid=0x7f517d56a990, exit_signal=0, stack=0x7f517d54a000, stack_size=0x20300, tls=0x7f517d56a6c0}./strace-static-x86_64: Process 5060 attached
 => {parent_tid=[5060]}, 88) = 5060
[pid  5060] rseq(0x7f517d56afe0, 0x20, 0, 0x53053053) = 0
[pid  5059] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5060] set_robust_list(0x7f517d56a9a0, 24 <unfinished ...>
[pid  5059] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5060] <... set_robust_list resumed>) = 0
[pid  5059] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5060] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5059] <... futex resumed>)        = 0
[pid  5060] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5059] futex(0x7f517d6366ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid  5060] memfd_create("syzkaller", 0) = 3
[pid  5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f517514a000
[pid  5060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid  5060] munmap(0x7f517514a000, 524288) = 0
[pid  5060] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5060] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5060] close(3)                    = 0
[pid  5060] mkdir("./bus", 0777)        = 0
[pid  5060] mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0
[pid  5060] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5060] chdir("./bus")              = 0
[pid  5060] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5060] close(4)                    = 0
[pid  5060] futex(0x7f517d6366ac, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5059] <... futex resumed>)        = 0
[pid  5059] futex(0x7f517d6366a8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5060] <... futex resumed>)        = 1
[pid  5059] <... futex resumed>)        = 0
[pid  5059] futex(0x7f517d6366bc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f51751a9000
[pid  5059] mprotect(0x7f51751aa000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5059] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5059] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f51751c9990, parent_tid=0x7f51751c9990, exit_signal=0, stack=0x7f51751a9000, stack_size=0x20300, tls=0x7f51751c96c0}./strace-static-x86_64: Process 5061 attached
 <unfinished ...>
[pid  5061] rseq(0x7f51751c9fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5059] <... clone3 resumed> => {parent_tid=[5061]}, 88) = 5061
[pid  5061] <... rseq resumed>)         = 0
[pid  5059] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5061] set_robust_list(0x7f51751c99a0, 24 <unfinished ...>
[pid  5059] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5061] <... set_robust_list resumed>) = 0
[pid  5059] futex(0x7f517d6366b8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5061] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5059] <... futex resumed>)        = 0
[pid  5061] creat("./file1", 000 <unfinished ...>
[pid  5059] futex(0x7f517d6366bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5061] <... creat resumed>)        = 4
[pid  5061] creat("./file1", 000)       = 5
[pid  5061] creat("./file1", 000)       = 6
[pid  5061] creat("./file1", 000)       = 7
[pid  5061] creat("./file1", 000)       = 8
[pid  5061] creat("./file1", 000)       = 9
[pid  5061] creat("./file1", 000)       = 10
[pid  5061] creat("./file1", 000)       = 11
[pid  5060] rename("./file1", "./bus" <unfinished ...>
[pid  5061] creat("./file1", 000)       = 12
[pid  5060] <... rename resumed>)       = 0
[pid  5061] creat("./file1", 000 <unfinished ...>
[pid  5060] rename("./file1", "./bus" <unfinished ...>
[pid  5061] <... creat resumed>)        = 13
[pid  5061] creat("./file1", 000 <unfinished ...>
[pid  5060] <... rename resumed>)       = -1 ENOENT (No such file or directory)
[pid  5060] rename("./file1", "./bus" <unfinished ...>
[pid  5061] <... creat resumed>)        = 14
[pid  5061] creat("./file1", 000)       = 15
[pid  5061] creat("./file1", 000)       = 16
[pid  5061] creat("./file1", 000 <unfinished ...>
[pid  5059] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid  5059] exit_group(0)               = ?
[   61.781582][ T5035]          option from the mount to silence this warning.
[   61.781582][ T5035] =======================================================
[   61.882352][   T11] hfsplus: b-tree write err: -5, ino 8
[   61.933111][ T5039] loop0: detected capacity change from 0 to 1024
[   61.995632][  T139] hfsplus: b-tree write err: -5, ino 8
[   62.033956][ T5042] loop0: detected capacity change from 0 to 1024
[   62.113240][  T139] hfsplus: b-tree write err: -5, ino 8
[   62.153201][ T5045] loop0: detected capacity change from 0 to 1024
[   62.225261][   T11] hfsplus: b-tree write err: -5, ino 8
[   62.270759][ T5048] loop0: detected capacity change from 0 to 1024
[   62.338945][   T11] hfsplus: b-tree write err: -5, ino 8
[   62.392957][ T5051] loop0: detected capacity change from 0 to 1024
[   62.448790][   T11] hfsplus: b-tree write err: -5, ino 8
[   62.507603][ T5054] loop0: detected capacity change from 0 to 1024
[   62.594644][  T139] hfsplus: b-tree write err: -5, ino 8
[   62.654396][ T5057] loop0: detected capacity change from 0 to 1024
[   62.707420][   T11] hfsplus: b-tree write err: -5, ino 8
[   62.740277][ T5060] loop0: detected capacity change from 0 to 1024
[   62.768778][ T5060] ------------[ cut here ]------------
[   62.774356][ T5060] WARNING: CPU: 1 PID: 5060 at fs/inode.c:331 drop_nlink+0xab/0xd0
[   62.782331][ T5060] Modules linked in:
[   62.786310][ T5060] CPU: 1 PID: 5060 Comm: syz-executor111 Not tainted 6.5.0-rc4-next-20230731-syzkaller #0
[   62.796279][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[   62.806466][ T5060] RIP: 0010:drop_nlink+0xab/0xd0
[   62.811438][ T5060] Code: 43 48 8b 5d 28 be 08 00 00 00 48 8d bb 70 07 00 00 e8 89 7c e9 ff f0 48 ff 83 70 07 00 00 5b 5d e9 8a 6f 94 ff e8 85 6f 94 ff <0f> 0b c7 45 48 ff ff ff ff 5b 5d e9 75 6f 94 ff e8 a0 75 e9 ff e9
[   62.831356][ T5060] RSP: 0018:ffffc90003a07a68 EFLAGS: 00010293
[   62.837548][ T5060] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   62.845576][ T5060] RDX: ffff88802743d940 RSI: ffffffff81f220cb RDI: 0000000000000005
[   62.853571][ T5060] RBP: ffff8880750d7470 R08: 0000000000000005 R09: 0000000000000000
[   62.861666][ T5060] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000014
[   62.869859][ T5060] R13: ffff8880750d6db0 R14: ffffc90003a07af0 R15: ffff888073eee800
[   62.877916][ T5060] FS:  00007f517d56a6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   62.886950][ T5060] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   62.893584][ T5060] CR2: 00000000200028c4 CR3: 0000000028e2f000 CR4: 00000000003506e0
[   62.901652][ T5060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   62.909693][ T5060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   62.917759][ T5060] Call Trace:
[   62.921080][ T5060]  <TASK>
[   62.924065][ T5060]  ? __warn+0xe6/0x380
[   62.928195][ T5060]  ? drop_nlink+0xab/0xd0
[   62.932571][ T5060]  ? report_bug+0x3bc/0x580
[   62.937177][ T5060]  ? handle_bug+0x3c/0x70
[   62.941555][ T5060]  ? exc_invalid_op+0x17/0x40
[   62.946296][ T5060]  ? asm_exc_invalid_op+0x1a/0x20
[   62.951377][ T5060]  ? drop_nlink+0xab/0xd0
[   62.955773][ T5060]  ? drop_nlink+0xab/0xd0
[   62.960144][ T5060]  ? drop_nlink+0xab/0xd0
[   62.964547][ T5060]  hfsplus_unlink+0x4e0/0x7f0
[   62.969367][ T5060]  ? hfsplus_symlink+0x2b0/0x2b0
[   62.974390][ T5060]  ? up_read+0x20/0x20
[   62.978500][ T5060]  ? do_raw_spin_lock+0x12e/0x2b0
[   62.983717][ T5060]  ? spin_bug+0x1d0/0x1d0
[   62.988172][ T5060]  hfsplus_rename+0xbc/0x200
[   62.992813][ T5060]  ? lock_two_inodes+0x10f/0x1e0
[   62.997831][ T5060]  vfs_rename+0xe23/0x1c30
[   63.002300][ T5060]  ? vfs_mkobj+0x5e0/0x5e0
[   63.006785][ T5060]  ? bpf_lsm_path_rename+0x9/0x10
[   63.011935][ T5060]  ? security_path_rename+0x15e/0x230
[   63.017401][ T5060]  do_renameat2+0xc3c/0xdc0
[   63.021966][ T5060]  ? __ia32_sys_link+0xa0/0xa0
[   63.026819][ T5060]  ? reacquire_held_locks+0x4b0/0x4b0
[   63.032257][ T5060]  ? preempt_count_sub+0x150/0x150
[   63.037480][ T5060]  ? __check_object_size+0x323/0x740
[   63.042810][ T5060]  ? strncpy_from_user+0x214/0x300
[   63.048006][ T5060]  ? getname_flags.part.0+0x1d5/0x4d0
[   63.053422][ T5060]  ? trace_irq_enable.constprop.0+0xd0/0x100
[   63.059490][ T5060]  __x64_sys_rename+0x81/0xa0
[   63.064246][ T5060]  do_syscall_64+0x38/0xb0
[   63.068689][ T5060]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   63.074645][ T5060] RIP: 0033:0x7f517d5ada99
[   63.079094][ T5060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   63.098778][ T5060] RSP: 002b:00007f517d56a218 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   63.107249][ T5060] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 00007f517d5ada99
[   63.115282][ T5060] RDX: ffffffffffffffb0 RSI: 00000000200028c0 RDI: 00000000200000c0
[   63.123281][ T5060] RBP: 00007f517d6366a8 R08: 0000000000000000 R09: 0000000000000000
[   63.131308][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517d6366a0
[   63.139335][ T5060] R13: 0000000020000cc0 R14: 0031656c69662f2e R15: 0073756c70736668
[   63.147376][ T5060]  </TASK>
[   63.150431][ T5060] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   63.157735][ T5060] CPU: 1 PID: 5060 Comm: syz-executor111 Not tainted 6.5.0-rc4-next-20230731-syzkaller #0
[   63.167646][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[   63.177716][ T5060] Call Trace:
[   63.181007][ T5060]  <TASK>
[   63.183948][ T5060]  dump_stack_lvl+0xd9/0x1b0
[   63.188568][ T5060]  panic+0x6a4/0x750
[   63.192487][ T5060]  ? panic_smp_self_stop+0xa0/0xa0
[   63.197626][ T5060]  ? show_trace_log_lvl+0x29d/0x3c0
[   63.202861][ T5060]  ? drop_nlink+0xab/0xd0
[   63.207219][ T5060]  check_panic_on_warn+0xab/0xb0
[   63.212188][ T5060]  __warn+0xf2/0x380
[   63.216113][ T5060]  ? drop_nlink+0xab/0xd0
[   63.220478][ T5060]  report_bug+0x3bc/0x580
[   63.224840][ T5060]  handle_bug+0x3c/0x70
[   63.229022][ T5060]  exc_invalid_op+0x17/0x40
[   63.233552][ T5060]  asm_exc_invalid_op+0x1a/0x20
[   63.238435][ T5060] RIP: 0010:drop_nlink+0xab/0xd0
[   63.243405][ T5060] Code: 43 48 8b 5d 28 be 08 00 00 00 48 8d bb 70 07 00 00 e8 89 7c e9 ff f0 48 ff 83 70 07 00 00 5b 5d e9 8a 6f 94 ff e8 85 6f 94 ff <0f> 0b c7 45 48 ff ff ff ff 5b 5d e9 75 6f 94 ff e8 a0 75 e9 ff e9
[   63.263036][ T5060] RSP: 0018:ffffc90003a07a68 EFLAGS: 00010293
[   63.269126][ T5060] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   63.277118][ T5060] RDX: ffff88802743d940 RSI: ffffffff81f220cb RDI: 0000000000000005
[   63.285114][ T5060] RBP: ffff8880750d7470 R08: 0000000000000005 R09: 0000000000000000
[   63.293103][ T5060] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000014
[   63.301115][ T5060] R13: ffff8880750d6db0 R14: ffffc90003a07af0 R15: ffff888073eee800
[   63.309121][ T5060]  ? drop_nlink+0xab/0xd0
[   63.313494][ T5060]  ? drop_nlink+0xab/0xd0
[   63.317849][ T5060]  hfsplus_unlink+0x4e0/0x7f0
[   63.322559][ T5060]  ? hfsplus_symlink+0x2b0/0x2b0
[   63.327545][ T5060]  ? up_read+0x20/0x20
[   63.331644][ T5060]  ? do_raw_spin_lock+0x12e/0x2b0
[   63.336705][ T5060]  ? spin_bug+0x1d0/0x1d0
[   63.341067][ T5060]  hfsplus_rename+0xbc/0x200
[   63.345695][ T5060]  ? lock_two_inodes+0x10f/0x1e0
[   63.350672][ T5060]  vfs_rename+0xe23/0x1c30
[   63.355122][ T5060]  ? vfs_mkobj+0x5e0/0x5e0
[   63.359574][ T5060]  ? bpf_lsm_path_rename+0x9/0x10
[   63.364633][ T5060]  ? security_path_rename+0x15e/0x230
[   63.370047][ T5060]  do_renameat2+0xc3c/0xdc0
[   63.374590][ T5060]  ? __ia32_sys_link+0xa0/0xa0
[   63.379387][ T5060]  ? reacquire_held_locks+0x4b0/0x4b0
[   63.384800][ T5060]  ? preempt_count_sub+0x150/0x150
[   63.389953][ T5060]  ? __check_object_size+0x323/0x740
[   63.395274][ T5060]  ? strncpy_from_user+0x214/0x300
[   63.400421][ T5060]  ? getname_flags.part.0+0x1d5/0x4d0
[   63.405824][ T5060]  ? trace_irq_enable.constprop.0+0xd0/0x100
[   63.411842][ T5060]  __x64_sys_rename+0x81/0xa0
[   63.416550][ T5060]  do_syscall_64+0x38/0xb0
[   63.420992][ T5060]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   63.426920][ T5060] RIP: 0033:0x7f517d5ada99
[   63.431353][ T5060] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   63.450984][ T5060] RSP: 002b:00007f517d56a218 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[   63.459425][ T5060] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 00007f517d5ada99
[   63.467418][ T5060] RDX: ffffffffffffffb0 RSI: 00000000200028c0 RDI: 00000000200000c0
[   63.475407][ T5060] RBP: 00007f517d6366a8 R08: 0000000000000000 R09: 0000000000000000
[   63.483397][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517d6366a0
[   63.491385][ T5060] R13: 0000000020000cc0 R14: 0031656c69662f2e R15: 0073756c70736668
[   63.499389][ T5060]  </TASK>
[   63.502718][ T5060] Kernel Offset: disabled
[   63.507048][ T5060] Rebooting in 86400 seconds..