./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3311277796 <...> forked to background, child pid 4742 [ 47.342383][ T4743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.360494][ T4743] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 47.810281][ T4823] sshd (4823) used greatest stack depth: 19032 bytes left OK syzkaller Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. execve("./syz-executor3311277796", ["./syz-executor3311277796"], 0x7ffd7e2bdf50 /* 10 vars */) = 0 brk(NULL) = 0x5555939db000 brk(0x5555939dbd40) = 0x5555939dbd40 arch_prctl(ARCH_SET_FS, 0x5555939db3c0) = 0 set_tid_address(0x5555939db690) = 5080 set_robust_list(0x5555939db6a0, 24) = 0 rseq(0x5555939dbce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3311277796", 4096) = 28 getrandom("\x68\x69\x06\x38\xf2\x6b\x4b\x57", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555939dbd40 brk(0x5555939fcd40) = 0x5555939fcd40 brk(0x5555939fd000) = 0x5555939fd000 mprotect(0x7f96082a4000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached , child_tidptr=0x5555939db690) = 5081 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] set_robust_list(0x5555939db6a0, 24) = 0 ./strace-static-x86_64: Process 5082 attached [pid 5080] <... clone resumed>, child_tidptr=0x5555939db690) = 5082 [pid 5082] set_robust_list(0x5555939db6a0, 24 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] mkdir("./syzkaller.ebne2J", 0700 [pid 5082] <... set_robust_list resumed>) = 0 [pid 5082] mkdir("./syzkaller.hLVIpm", 0700./strace-static-x86_64: Process 5083 attached ) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5083] set_robust_list(0x5555939db6a0, 24 [pid 5081] chmod("./syzkaller.ebne2J", 0777 [pid 5080] <... clone resumed>, child_tidptr=0x5555939db690) = 5083 [pid 5083] <... set_robust_list resumed>) = 0 [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] mkdir("./syzkaller.cqViXX", 0700 [pid 5082] chmod("./syzkaller.hLVIpm", 0777 [pid 5081] <... chmod resumed>) = 0 [pid 5082] <... chmod resumed>) = 0 [pid 5081] chdir("./syzkaller.ebne2J") = 0 [pid 5081] mkdir("./0", 0777./strace-static-x86_64: Process 5084 attached [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5082] chdir("./syzkaller.hLVIpm") = 0 [pid 5082] mkdir("./0", 0777 [pid 5080] <... clone resumed>, child_tidptr=0x5555939db690) = 5084 [pid 5084] set_robust_list(0x5555939db6a0, 24 [pid 5083] chmod("./syzkaller.cqViXX", 0777 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... set_robust_list resumed>) = 0 [pid 5084] mkdir("./syzkaller.VJjmH9", 0700 [pid 5083] <... chmod resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] chdir("./syzkaller.cqViXX" [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5085 attached [pid 5084] chmod("./syzkaller.VJjmH9", 0777 [pid 5083] <... chdir resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5080] <... clone resumed>, child_tidptr=0x5555939db690) = 5085 [pid 5084] <... chmod resumed>) = 0 [pid 5083] mkdir("./0", 0777 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5085] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5081] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] mkdir("./syzkaller.EW5zKO", 0700 [pid 5084] chdir("./syzkaller.VJjmH9" [pid 5083] <... mkdir resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] <... chdir resumed>) = 0 [pid 5081] close(3 [pid 5084] mkdir("./0", 0777 [pid 5081] <... close resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5082] close(3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 ./strace-static-x86_64: Process 5087 attached ./strace-static-x86_64: Process 5086 attached [pid 5085] chmod("./syzkaller.EW5zKO", 0777 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5087] set_robust_list(0x5555939db6a0, 24 [pid 5086] set_robust_list(0x5555939db6a0, 24 [pid 5085] <... chmod resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5086 [pid 5087] <... set_robust_list resumed>) = 0 [pid 5086] <... set_robust_list resumed>) = 0 [pid 5085] chdir("./syzkaller.EW5zKO" [pid 5084] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5083] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5087 [pid 5087] chdir("./0" [pid 5086] chdir("./0" [pid 5085] <... chdir resumed>) = 0 [pid 5083] close(3 [pid 5087] <... chdir resumed>) = 0 [pid 5085] mkdir("./0", 0777 [pid 5084] close(3 [pid 5083] <... close resumed>) = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... chdir resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5087] <... prctl resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5086] <... prctl resumed>) = 0 [pid 5087] setpgid(0, 0 [pid 5086] setpgid(0, 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5086] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5089 attached [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] set_robust_list(0x5555939db6a0, 24 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5089 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5087] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5089] chdir("./0" [pid 5086] write(3, "1000", 4 [pid 5085] <... openat resumed>) = 3 [pid 5089] <... chdir resumed>) = 0 [pid 5087] write(3, "1000", 4 [pid 5086] <... write resumed>) = 4 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5090 ./strace-static-x86_64: Process 5090 attached [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] <... write resumed>) = 4 [pid 5086] close(3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5090] set_robust_list(0x5555939db6a0, 24 [pid 5089] <... prctl resumed>) = 0 [pid 5087] close(3 [pid 5086] <... close resumed>) = 0 [pid 5085] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5090] <... set_robust_list resumed>) = 0 [pid 5089] setpgid(0, 0 [pid 5087] <... close resumed>) = 0 [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5089] <... setpgid resumed>) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5086] <... symlink resumed>) = 0 [pid 5085] close(3 [pid 5090] chdir("./0" [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] <... symlink resumed>) = 0 [pid 5090] <... chdir resumed>) = 0 [pid 5090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] <... openat resumed>) = 3 [pid 5085] <... close resumed>) = 0 [pid 5090] <... prctl resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] setpgid(0, 0) = 0 [pid 5089] write(3, "1000", 4 [pid 5087] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... write resumed>) = 4 [pid 5090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] close(3 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... close resumed>) = 0 [pid 5087] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5086] <... futex resumed>) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5086] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5089] <... symlink resumed>) = 0 [pid 5087] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5086] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5091 [pid 5090] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5091 attached [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5086] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5091] set_robust_list(0x5555939db6a0, 24 [pid 5090] write(3, "1000", 4 [pid 5089] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... set_robust_list resumed>) = 0 [pid 5090] <... write resumed>) = 4 [pid 5089] <... futex resumed>) = 0 [pid 5087] <... mmap resumed>) = 0x7f96081b8000 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5091] chdir("./0" [pid 5090] close(3 [pid 5089] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5087] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5086] <... mmap resumed>) = 0x7f96081b8000 [pid 5091] <... chdir resumed>) = 0 [pid 5090] <... close resumed>) = 0 [pid 5089] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5087] <... mprotect resumed>) = 0 [pid 5086] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5090] symlink("/dev/binderfs", "./binderfs" [pid 5089] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5086] <... mprotect resumed>) = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5090] <... symlink resumed>) = 0 [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5086] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5091] <... prctl resumed>) = 0 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5087] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5086] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5091] setpgid(0, 0 [pid 5089] <... mmap resumed>) = 0x7f96081b8000 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5092 attached [pid 5091] <... setpgid resumed>) = 0 [pid 5090] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5092] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] <... mprotect resumed>) = 0 [pid 5092] <... rseq resumed>) = 0 [pid 5090] <... futex resumed>) = 0 [pid 5087] <... clone3 resumed> => {parent_tid=[5092]}, 88) = 5092 ./strace-static-x86_64: Process 5093 attached [pid 5092] set_robust_list(0x7f96081d89a0, 24 [pid 5089] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5087] rt_sigprocmask(SIG_SETMASK, [], [pid 5086] <... clone3 resumed> => {parent_tid=[5093]}, 88) = 5093 [pid 5093] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5092] <... set_robust_list resumed>) = 0 [pid 5091] <... openat resumed>) = 3 [pid 5090] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5089] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5087] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], [pid 5093] <... rseq resumed>) = 0 [pid 5091] write(3, "1000", 4 [pid 5090] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5093] set_robust_list(0x7f96081d89a0, 24 [pid 5091] <... write resumed>) = 4 [pid 5090] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 5094 attached [pid 5093] <... set_robust_list resumed>) = 0 [pid 5092] rt_sigprocmask(SIG_SETMASK, [], [pid 5091] close(3 [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5093] rt_sigprocmask(SIG_SETMASK, [], [pid 5092] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5091] <... close resumed>) = 0 [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5089] <... clone3 resumed> => {parent_tid=[5094]}, 88) = 5094 [pid 5087] <... futex resumed>) = 0 [pid 5086] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... rseq resumed>) = 0 [pid 5093] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5092] memfd_create("syzkaller", 0 [pid 5091] symlink("/dev/binderfs", "./binderfs" [pid 5090] <... mmap resumed>) = 0x7f96081b8000 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], [pid 5087] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5086] <... futex resumed>) = 0 [pid 5094] set_robust_list(0x7f96081d89a0, 24 [pid 5093] memfd_create("syzkaller", 0 [pid 5092] <... memfd_create resumed>) = 3 [pid 5091] <... symlink resumed>) = 0 [pid 5090] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5086] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5094] <... set_robust_list resumed>) = 0 [pid 5093] <... memfd_create resumed>) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5091] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... mprotect resumed>) = 0 [pid 5089] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] rt_sigprocmask(SIG_SETMASK, [], [pid 5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5092] <... mmap resumed>) = 0x7f95ffc00000 [pid 5091] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5094] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5093] <... mmap resumed>) = 0x7f95ffc00000 [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5091] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5089] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5094] memfd_create("syzkaller", 0 [pid 5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5094] <... memfd_create resumed>) = 3 [pid 5091] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5090] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5092] <... write resumed>) = 524288 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5091] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5094] <... mmap resumed>) = 0x7f95ffc00000 ./strace-static-x86_64: Process 5095 attached [pid 5093] <... write resumed>) = 524288 [pid 5092] munmap(0x7f95ffc00000, 138412032 [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5095] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5093] munmap(0x7f95ffc00000, 138412032 [pid 5092] <... munmap resumed>) = 0 [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5090] <... clone3 resumed> => {parent_tid=[5095]}, 88) = 5095 [pid 5095] <... rseq resumed>) = 0 [pid 5091] <... mmap resumed>) = 0x7f96081b8000 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5093] <... munmap resumed>) = 0 [pid 5095] set_robust_list(0x7f96081d89a0, 24 [pid 5091] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5095] <... set_robust_list resumed>) = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5090] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] rt_sigprocmask(SIG_SETMASK, [], [pid 5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5091] <... mprotect resumed>) = 0 [pid 5090] <... futex resumed>) = 0 [pid 5095] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5092] <... openat resumed>) = 4 [pid 5091] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5090] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5095] memfd_create("syzkaller", 0 [pid 5093] <... openat resumed>) = 4 [pid 5092] ioctl(4, LOOP_SET_FD, 3 [pid 5091] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5095] <... memfd_create resumed>) = 3 [pid 5093] ioctl(4, LOOP_SET_FD, 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5094] <... write resumed>) = 524288 [pid 5091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5095] <... mmap resumed>) = 0x7f95ffc00000 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5096 attached ) = 524288 [pid 5093] <... ioctl resumed>) = 0 [pid 5091] <... clone3 resumed> => {parent_tid=[5096]}, 88) = 5096 [pid 5096] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5092] <... ioctl resumed>) = 0 [pid 5091] rt_sigprocmask(SIG_SETMASK, [], [pid 5094] munmap(0x7f95ffc00000, 138412032 [pid 5096] <... rseq resumed>) = 0 [pid 5091] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5094] <... munmap resumed>) = 0 [pid 5096] set_robust_list(0x7f96081d89a0, 24 [pid 5091] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... set_robust_list resumed>) = 0 [pid 5092] close(3 [pid 5091] <... futex resumed>) = 0 [pid 5092] <... close resumed>) = 0 [pid 5092] close(4) = 0 [pid 5092] mkdir("./file1", 0777 [pid 5096] rt_sigprocmask(SIG_SETMASK, [], [pid 5094] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5091] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5096] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5096] memfd_create("syzkaller", 0 [pid 5094] <... openat resumed>) = 4 [pid 5092] <... mkdir resumed>) = 0 [pid 5096] <... memfd_create resumed>) = 3 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5093] close(3 [pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 syzkaller login: [ 77.000414][ T5092] loop1: detected capacity change from 0 to 1024 [ 77.014326][ T5093] loop0: detected capacity change from 0 to 1024 [ 77.036826][ T5094] loop2: detected capacity change from 0 to 1024 [ 77.039105][ T5092] ======================================================= [pid 5092] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5094] <... ioctl resumed>) = 0 [pid 5093] <... close resumed>) = 0 [pid 5094] close(3 [pid 5093] close(4) = 0 [pid 5095] munmap(0x7f95ffc00000, 138412032 [pid 5093] mkdir("./file1", 0777 [pid 5095] <... munmap resumed>) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5094] <... close resumed>) = 0 [pid 5093] <... mkdir resumed>) = 0 [pid 5095] <... openat resumed>) = 4 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 5094] close(4) = 0 [pid 5094] mkdir("./file1", 0777 [pid 5093] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5094] <... mkdir resumed>) = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5095] close(3) = 0 [pid 5095] close(4) = 0 [pid 5095] mkdir("./file1", 0777) = 0 [pid 5095] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5096] <... write resumed>) = 524288 [pid 5094] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5096] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5096] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 77.039105][ T5092] WARNING: The mand mount option has been deprecated and [ 77.039105][ T5092] and is ignored by this kernel. Remove the mand [ 77.039105][ T5092] option from the mount to silence this warning. [ 77.039105][ T5092] ======================================================= [ 77.088124][ T5095] loop3: detected capacity change from 0 to 1024 [pid 5096] ioctl(4, LOOP_SET_FD, 3 [pid 5093] <... mount resumed>) = 0 [pid 5093] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5095] <... mount resumed>) = 0 [pid 5095] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5096] <... ioctl resumed>) = 0 [pid 5095] <... openat resumed>) = 3 [pid 5094] <... mount resumed>) = 0 [pid 5093] chdir("./file1" [pid 5096] close(3 [pid 5094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5093] <... chdir resumed>) = 0 [pid 5096] <... close resumed>) = 0 [pid 5095] chdir("./file1" [pid 5094] <... openat resumed>) = 3 [pid 5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5096] close(4 [pid 5095] <... chdir resumed>) = 0 [pid 5094] chdir("./file1" [pid 5093] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5096] <... close resumed>) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5096] mkdir("./file1", 0777 [pid 5095] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5094] <... chdir resumed>) = 0 [pid 5093] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5093] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5096] <... mkdir resumed>) = 0 [pid 5094] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5086] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] <... futex resumed>) = 0 [pid 5086] <... futex resumed>) = 1 [pid 5094] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5093] creat("./file0", 000 [pid 5095] <... futex resumed>) = 1 [pid 5086] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5093] <... creat resumed>) = 4 [ 77.133801][ T5096] loop4: detected capacity change from 0 to 1024 [pid 5096] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5094] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5090] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5094] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5090] <... futex resumed>) = 1 [pid 5089] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] creat("./file0", 000) = 4 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = 0 [pid 5095] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] creat("./file0", 000 [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 0 [pid 5095] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] <... creat resumed>) = 4 [pid 5090] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 0 [pid 5096] <... mount resumed>) = 0 [pid 5095] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5094] <... futex resumed>) = 1 [pid 5093] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... futex resumed>) = 0 [pid 5096] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5094] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5093] <... futex resumed>) = 1 [pid 5089] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = 0 [pid 5096] <... openat resumed>) = 3 [pid 5093] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] <... mount resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5086] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5086] <... futex resumed>) = 0 [pid 5092] <... openat resumed>) = 3 [pid 5086] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] chdir("./file1") = 0 [pid 5092] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5092] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5092] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] chdir("./file1" [pid 5093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5096] <... chdir resumed>) = 0 [pid 5093] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5096] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5087] <... futex resumed>) = 0 [pid 5096] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5087] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] <... futex resumed>) = 0 [pid 5087] <... futex resumed>) = 1 [pid 5092] creat("./file0", 000 [pid 5087] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5092] <... creat resumed>) = 4 [pid 5092] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5087] <... futex resumed>) = 0 [pid 5092] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5087] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.221562][ T5095] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.232657][ T5094] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.254940][ T5093] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.262317][ T5093] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5087] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5096] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5096] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5090] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5096] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5091] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5091] <... futex resumed>) = 0 [pid 5090] <... futex resumed>) = 0 [pid 5086] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] creat("./file0", 000 [pid 5091] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5086] <... futex resumed>) = 0 [pid 5086] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5096] <... creat resumed>) = 4 [pid 5090] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5086] <... mmap resumed>) = 0x7f9608197000 [pid 5086] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5086] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5086] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5090] <... mprotect resumed>) = 0 [pid 5089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5089] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... clone3 resumed> => {parent_tid=[5099]}, 88) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5096] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5099] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5096] <... futex resumed>) = 1 [pid 5091] <... futex resumed>) = 0 [pid 5090] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5086] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] <... rseq resumed>) = 0 [pid 5096] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5091] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5086] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5100 attached [pid 5099] set_robust_list(0x7f96081b79a0, 24 [pid 5091] <... futex resumed>) = 0 [pid 5089] <... mmap resumed>) = 0x7f9608197000 [pid 5086] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5100] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5099] <... set_robust_list resumed>) = 0 [pid 5091] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... clone3 resumed> => {parent_tid=[5100]}, 88) = 5100 [pid 5089] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5086] <... futex resumed>) = 0 [pid 5100] <... rseq resumed>) = 0 [pid 5099] rt_sigprocmask(SIG_SETMASK, [], [pid 5086] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5100] set_robust_list(0x7f96081b79a0, 24 [pid 5099] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] rt_sigprocmask(SIG_SETMASK, [], [pid 5089] <... mprotect resumed>) = 0 [pid 5100] <... set_robust_list resumed>) = 0 [pid 5099] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5089] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5100] rt_sigprocmask(SIG_SETMASK, [], [pid 5090] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5087] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.263246][ T5095] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.279129][ T5094] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.297661][ T5092] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5100] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5090] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5087] <... mmap resumed>) = 0x7f9608197000 [pid 5100] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5087] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5087] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5087] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5101]}, 88) = 5101 [pid 5087] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5087] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5087] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5090] <... futex resumed>) = 0 [pid 5089] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5086] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5101 attached [pid 5101] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [ 77.316220][ T5096] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.320461][ T5094] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.331911][ T29] audit: type=1800 audit(1715660549.982:2): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 77.337635][ T5095] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.359996][ T5092] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.360061][ T5093] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.377549][ T5094] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.379328][ T5096] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.385877][ T5092] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.392260][ T5093] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5101] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5101] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5101] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5091] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5091] <... futex resumed>) = 0 [pid 5089] <... clone3 resumed> => {parent_tid=[5102]}, 88) = 5102 ./strace-static-x86_64: Process 5102 attached [pid 5099] <... open resumed>) = 5 [pid 5091] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5089] rt_sigprocmask(SIG_SETMASK, [], [pid 5099] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5091] <... mmap resumed>) = 0x7f9608197000 [pid 5090] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5089] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5087] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5091] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5091] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 77.401951][ T29] audit: type=1800 audit(1715660550.022:3): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 77.412984][ T5095] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.427948][ T29] audit: type=1800 audit(1715660550.052:4): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 77.439233][ T5094] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.454624][ T5093] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5091] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5103 attached [pid 5102] <... rseq resumed>) = 0 [pid 5091] <... clone3 resumed> => {parent_tid=[5103]}, 88) = 5103 [pid 5089] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5103] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5091] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... rseq resumed>) = 0 [pid 5091] <... futex resumed>) = 0 [pid 5103] set_robust_list(0x7f96081b79a0, 24 [pid 5091] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... set_robust_list resumed>) = 0 [pid 5103] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5102] set_robust_list(0x7f96081b79a0, 24 [pid 5101] <... open resumed>) = 5 [pid 5100] <... open resumed>) = 5 [pid 5093] <... write resumed>) = 53248 [pid 5089] <... futex resumed>) = 0 [pid 5103] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5101] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 77.462331][ T5096] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.476771][ T5093] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.479596][ T5092] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.488372][ T5094] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.500099][ T5092] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5101] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] <... set_robust_list resumed>) = 0 [pid 5100] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5093] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5091] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5089] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5094] <... write resumed>) = 53248 [pid 5092] <... write resumed>) = 53248 [pid 5094] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5092] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = 0 [pid 5092] <... futex resumed>) = 0 [pid 5094] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5092] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5095] <... write resumed>) = 53248 [pid 5103] <... open resumed>) = 5 [pid 5102] rt_sigprocmask(SIG_SETMASK, [], [pid 5100] <... futex resumed>) = 0 [pid 5093] <... futex resumed>) = 0 [pid 5086] exit_group(0 [pid 5103] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5100] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5099] <... futex resumed>) = ? [pid 5095] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] exit_group(0 [pid 5087] exit_group(0 [pid 5086] <... exit_group resumed>) = ? [pid 5103] <... futex resumed>) = 0 [pid 5102] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5101] <... futex resumed>) = ? [ 77.504023][ T29] audit: type=1800 audit(1715660550.162:5): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 77.509326][ T5095] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.528538][ T5092] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.534780][ T5095] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.535457][ T5096] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.559125][ T5096] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5099] +++ exited with 0 +++ [pid 5095] <... futex resumed>) = -1 (errno 18446744073709551614) [pid 5093] +++ exited with 0 +++ [pid 5092] <... futex resumed>) = ? [pid 5087] <... exit_group resumed>) = ? [pid 5103] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] <... open resumed>) = 5 [pid 5101] +++ exited with 0 +++ [pid 5100] <... futex resumed>) = ? [pid 5096] <... write resumed>) = 53248 [pid 5095] +++ exited with 0 +++ [pid 5092] +++ exited with 0 +++ [pid 5090] <... exit_group resumed>) = ? [pid 5086] +++ exited with 0 +++ [pid 5102] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5096] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 1 [pid 5096] <... futex resumed>) = 0 [pid 5096] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... futex resumed>) = 0 [pid 5087] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5100] +++ exited with 0 +++ [pid 5090] +++ exited with 0 +++ [pid 5089] exit_group(0 [pid 5091] exit_group(0 [pid 5102] <... futex resumed>) = ? [pid 5089] <... exit_group resumed>) = ? [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5090, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5094] <... futex resumed>) = ? [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5103] <... futex resumed>) = ? [pid 5096] <... futex resumed>) = ? [pid 5091] <... exit_group resumed>) = ? [pid 5094] +++ exited with 0 +++ [pid 5096] +++ exited with 0 +++ [pid 5103] +++ exited with 0 +++ [pid 5102] +++ exited with 0 +++ [pid 5091] +++ exited with 0 +++ [pid 5089] +++ exited with 0 +++ [pid 5084] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5084] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... restart_syscall resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5084] newfstatat(3, "", [pid 5082] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 3 [pid 5082] newfstatat(3, "", [pid 5081] newfstatat(3, "", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5081] getdents64(3, [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 77.566674][ T5096] hfsplus: request for non-existent node 16777216 in B*Tree [ 77.574882][ T29] audit: type=1800 audit(1715660550.242:6): pid=5102 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5085] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5081] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] unlink("./0/binderfs" [pid 5085] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5083] newfstatat(3, "", [pid 5081] unlink("./0/binderfs" [pid 5085] <... openat resumed>) = 3 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5084] unlink("./0/binderfs" [pid 5085] newfstatat(3, "", [pid 5083] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(3, [pid 5083] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5084] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] unlink("./0/binderfs" [pid 5085] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... unlink resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./0/binderfs") = 0 [pid 5085] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5084] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./0/file1", [pid 5081] newfstatat(AT_FDCWD, "./0/file1", [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] newfstatat(AT_FDCWD, "./0/file1", [pid 5084] <... openat resumed>) = 4 [pid 5082] newfstatat(AT_FDCWD, "./0/file1", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] newfstatat(4, "", [pid 5083] newfstatat(AT_FDCWD, "./0/file1", [pid 5081] <... openat resumed>) = 4 [pid 5085] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(4, [pid 5083] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... openat resumed>) = 4 [pid 5081] newfstatat(4, "", [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, [pid 5083] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... openat resumed>) = 4 [pid 5081] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] close(4 [pid 5083] newfstatat(4, "", [pid 5081] getdents64(4, [pid 5084] <... close resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] getdents64(4, [pid 5084] rmdir("./0/file1" [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] close(4 [pid 5085] newfstatat(4, "", [pid 5084] <... rmdir resumed>) = 0 [pid 5082] newfstatat(4, "", [pid 5083] getdents64(4, [pid 5081] <... close resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] rmdir("./0/file1" [pid 5083] close(4 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, [pid 5083] <... close resumed>) = 0 [pid 5082] getdents64(4, [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(3, [pid 5083] rmdir("./0/file1" [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] close(3 [pid 5085] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] getdents64(4, [pid 5081] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] rmdir("./0" [pid 5085] close(4 [pid 5082] close(4 [pid 5081] <... rmdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] getdents64(3, [pid 5082] <... close resumed>) = 0 [pid 5085] rmdir("./0/file1" [pid 5084] rmdir("./0" [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] rmdir("./0/file1" [pid 5081] mkdir("./1", 0777 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] close(3 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5085] getdents64(3, [pid 5083] <... close resumed>) = 0 [pid 5082] getdents64(3, [pid 5084] mkdir("./1", 0777 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] rmdir("./0" [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] close(3 [pid 5085] <... close resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] rmdir("./0" [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] rmdir("./0" [pid 5081] <... openat resumed>) = 3 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] mkdir("./1", 0777 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5085] mkdir("./1", 0777 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... mkdir resumed>) = 0 [pid 5082] mkdir("./1", 0777 [pid 5085] <... mkdir resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... openat resumed>) = 3 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5085] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... openat resumed>) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5081] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5083] close(3 [pid 5084] close(3 [pid 5083] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached ./strace-static-x86_64: Process 5104 attached [pid 5081] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5105 [pid 5105] set_robust_list(0x5555939db6a0, 24 [pid 5104] set_robust_list(0x5555939db6a0, 24 [pid 5085] <... ioctl resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5104 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5105] <... set_robust_list resumed>) = 0 [pid 5104] <... set_robust_list resumed>) = 0 [pid 5105] chdir("./1" [pid 5104] chdir("./1" [pid 5105] <... chdir resumed>) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5106 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5105] <... prctl resumed>) = 0 [pid 5104] <... prctl resumed>) = 0 [pid 5105] setpgid(0, 0 [pid 5104] setpgid(0, 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5105] <... setpgid resumed>) = 0 [pid 5104] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5106 attached [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5106] set_robust_list(0x5555939db6a0, 24 [pid 5104] <... openat resumed>) = 3 [pid 5105] <... openat resumed>) = 3 [pid 5104] write(3, "1000", 4 [pid 5105] write(3, "1000", 4 [pid 5104] <... write resumed>) = 4 [pid 5106] <... set_robust_list resumed>) = 0 [pid 5082] close(3 [pid 5106] chdir("./1") = 0 [pid 5082] <... close resumed>) = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5106] <... prctl resumed>) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5085] close(3 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... close resumed>) = 0 ./strace-static-x86_64: Process 5107 attached [pid 5106] <... openat resumed>) = 3 [pid 5105] <... write resumed>) = 4 [pid 5104] close(3 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5107 [pid 5107] set_robust_list(0x5555939db6a0, 24 [pid 5105] close(3 [pid 5104] <... close resumed>) = 0 [pid 5107] <... set_robust_list resumed>) = 0 [pid 5106] write(3, "1000", 4 [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 5105] <... close resumed>) = 0 ./strace-static-x86_64: Process 5108 attached [pid 5107] chdir("./1" [pid 5106] <... write resumed>) = 4 [pid 5108] set_robust_list(0x5555939db6a0, 24 [pid 5107] <... chdir resumed>) = 0 [pid 5106] close(3 [pid 5105] symlink("/dev/binderfs", "./binderfs" [pid 5104] <... symlink resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5108 [pid 5108] <... set_robust_list resumed>) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5106] <... close resumed>) = 0 [pid 5108] chdir("./1" [pid 5107] <... prctl resumed>) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs" [pid 5107] setpgid(0, 0 [pid 5106] <... symlink resumed>) = 0 [pid 5107] <... setpgid resumed>) = 0 [pid 5108] <... chdir resumed>) = 0 [pid 5106] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5106] <... futex resumed>) = 0 [pid 5105] <... symlink resumed>) = 0 [pid 5108] <... prctl resumed>) = 0 [pid 5106] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5108] setpgid(0, 0 [pid 5107] <... openat resumed>) = 3 [pid 5106] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5105] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... setpgid resumed>) = 0 [pid 5106] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5105] <... futex resumed>) = 0 [pid 5104] <... futex resumed>) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5107] write(3, "1000", 4 [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5104] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5108] <... openat resumed>) = 3 [pid 5107] <... write resumed>) = 4 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5105] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5104] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5108] write(3, "1000", 4 [pid 5107] close(3 [pid 5106] <... mmap resumed>) = 0x7f96081b8000 [pid 5105] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5104] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5108] <... write resumed>) = 4 [pid 5107] <... close resumed>) = 0 [pid 5106] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] close(3 [pid 5107] symlink("/dev/binderfs", "./binderfs" [pid 5106] <... mprotect resumed>) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] <... close resumed>) = 0 [pid 5107] <... symlink resumed>) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5105] <... mmap resumed>) = 0x7f96081b8000 [pid 5104] <... mmap resumed>) = 0x7f96081b8000 [pid 5108] symlink("/dev/binderfs", "./binderfs" [pid 5105] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5104] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5108] <... symlink resumed>) = 0 [pid 5107] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5105] <... mprotect resumed>) = 0 [pid 5104] <... mprotect resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5105] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5104] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5110 attached [pid 5108] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5104] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5110] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5106] <... clone3 resumed> => {parent_tid=[5110]}, 88) = 5110 [pid 5105] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5104] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5110] <... rseq resumed>) = 0 [pid 5108] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5107] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5106] rt_sigprocmask(SIG_SETMASK, [], [pid 5105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5112 attached ./strace-static-x86_64: Process 5111 attached [pid 5110] set_robust_list(0x7f96081d89a0, 24 [pid 5108] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5107] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5112] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5110] <... set_robust_list resumed>) = 0 [pid 5108] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] rt_sigprocmask(SIG_SETMASK, [], [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5107] <... mmap resumed>) = 0x7f96081b8000 [pid 5106] <... futex resumed>) = 0 [pid 5112] <... rseq resumed>) = 0 [pid 5111] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5110] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5107] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5106] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5105] <... clone3 resumed> => {parent_tid=[5112]}, 88) = 5112 [pid 5104] <... clone3 resumed> => {parent_tid=[5111]}, 88) = 5111 [pid 5112] set_robust_list(0x7f96081d89a0, 24 [pid 5111] <... rseq resumed>) = 0 [pid 5110] memfd_create("syzkaller", 0 [pid 5108] <... mmap resumed>) = 0x7f96081b8000 [pid 5107] <... mprotect resumed>) = 0 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] <... set_robust_list resumed>) = 0 [pid 5111] set_robust_list(0x7f96081d89a0, 24 [pid 5110] <... memfd_create resumed>) = 3 [pid 5108] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5107] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], [pid 5112] rt_sigprocmask(SIG_SETMASK, [], [pid 5111] <... set_robust_list resumed>) = 0 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5108] <... mprotect resumed>) = 0 [pid 5107] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5105] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5112] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5111] rt_sigprocmask(SIG_SETMASK, [], [pid 5110] <... mmap resumed>) = 0x7f95ffc00000 [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5107] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5113 attached [pid 5112] memfd_create("syzkaller", 0 [pid 5111] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5105] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 0 [pid 5104] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5112] <... memfd_create resumed>) = 3 [pid 5111] memfd_create("syzkaller", 0 [pid 5108] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5107] <... clone3 resumed> => {parent_tid=[5113]}, 88) = 5113 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5111] <... memfd_create resumed>) = 3 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5107] rt_sigprocmask(SIG_SETMASK, [], [pid 5113] <... rseq resumed>) = 0 [pid 5112] <... mmap resumed>) = 0x7f95ffc00000 [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5107] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5114 attached [pid 5113] set_robust_list(0x7f96081d89a0, 24 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5111] <... mmap resumed>) = 0x7f95ffc00000 [pid 5108] <... clone3 resumed> => {parent_tid=[5114]}, 88) = 5114 [pid 5107] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5113] <... set_robust_list resumed>) = 0 [pid 5114] <... rseq resumed>) = 0 [pid 5113] rt_sigprocmask(SIG_SETMASK, [], [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5108] rt_sigprocmask(SIG_SETMASK, [], [pid 5107] <... futex resumed>) = 0 [pid 5114] set_robust_list(0x7f96081d89a0, 24 [pid 5107] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5113] memfd_create("syzkaller", 0 [pid 5108] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5113] <... memfd_create resumed>) = 3 [pid 5108] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5114] <... set_robust_list resumed>) = 0 [pid 5112] <... write resumed>) = 524288 [pid 5114] rt_sigprocmask(SIG_SETMASK, [], [pid 5110] <... write resumed>) = 524288 [pid 5114] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5114] memfd_create("syzkaller", 0 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5114] <... memfd_create resumed>) = 3 [pid 5110] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5111] <... write resumed>) = 524288 [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5114] <... mmap resumed>) = 0x7f95ffc00000 [pid 5113] <... write resumed>) = 524288 [pid 5112] munmap(0x7f95ffc00000, 138412032 [pid 5110] <... openat resumed>) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5112] <... munmap resumed>) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5111] munmap(0x7f95ffc00000, 138412032 [pid 5112] <... openat resumed>) = 4 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5111] <... munmap resumed>) = 0 [pid 5113] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5114] <... write resumed>) = 524288 [pid 5111] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5110] <... ioctl resumed>) = 0 [pid 5114] munmap(0x7f95ffc00000, 138412032 [pid 5113] <... ioctl resumed>) = 0 [pid 5112] <... ioctl resumed>) = 0 [pid 5111] <... openat resumed>) = 4 [pid 5110] close(3 [pid 5114] <... munmap resumed>) = 0 [pid 5113] close(3 [pid 5112] close(3 [pid 5111] ioctl(4, LOOP_SET_FD, 3 [pid 5110] <... close resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5110] close(4) = 0 [pid 5112] close(4 [pid 5110] mkdir("./file1", 0777 [pid 5114] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5113] <... close resumed>) = 0 [pid 5112] <... close resumed>) = 0 [pid 5113] close(4 [pid 5112] mkdir("./file1", 0777 [pid 5114] <... openat resumed>) = 4 [pid 5114] ioctl(4, LOOP_SET_FD, 3 [pid 5113] <... close resumed>) = 0 [pid 5112] <... mkdir resumed>) = 0 [pid 5110] <... mkdir resumed>) = 0 [ 77.972101][ T5110] loop0: detected capacity change from 0 to 1024 [ 77.985081][ T5112] loop3: detected capacity change from 0 to 1024 [ 77.997549][ T5113] loop1: detected capacity change from 0 to 1024 [ 78.012611][ T5111] loop2: detected capacity change from 0 to 1024 [pid 5113] mkdir("./file1", 0777 [pid 5110] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5113] <... mkdir resumed>) = 0 [pid 5112] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5113] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5114] <... ioctl resumed>) = 0 [pid 5111] <... ioctl resumed>) = 0 [pid 5114] close(3) = 0 [pid 5114] close(4 [pid 5111] close(3 [pid 5114] <... close resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5114] mkdir("./file1", 0777 [pid 5111] close(4 [pid 5114] <... mkdir resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5111] mkdir("./file1", 0777) = 0 [pid 5114] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5112] <... mount resumed>) = 0 [pid 5112] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5111] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5110] <... mount resumed>) = 0 [pid 5112] <... openat resumed>) = 3 [pid 5110] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5112] chdir("./file1" [pid 5110] <... openat resumed>) = 3 [pid 5112] <... chdir resumed>) = 0 [pid 5110] chdir("./file1" [pid 5112] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5110] <... chdir resumed>) = 0 [pid 5112] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5110] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5112] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5110] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [ 78.024849][ T5114] loop4: detected capacity change from 0 to 1024 [pid 5105] <... futex resumed>) = 0 [pid 5112] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5110] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] creat("./file0", 000 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5112] creat("./file0", 000 [pid 5105] <... futex resumed>) = 0 [pid 5113] <... mount resumed>) = 0 [pid 5112] <... creat resumed>) = 4 [pid 5111] <... mount resumed>) = 0 [pid 5110] <... creat resumed>) = 4 [pid 5105] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5112] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5113] <... openat resumed>) = 3 [pid 5112] <... futex resumed>) = 1 [pid 5111] <... openat resumed>) = 3 [pid 5110] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = 0 [pid 5113] chdir("./file1" [pid 5112] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5111] chdir("./file1" [pid 5106] <... futex resumed>) = 0 [pid 5105] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5110] <... futex resumed>) = 1 [pid 5113] <... chdir resumed>) = 0 [pid 5112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5111] <... chdir resumed>) = 0 [pid 5110] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5106] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5112] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5111] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5106] <... futex resumed>) = 0 [pid 5105] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... mount resumed>) = 0 [pid 5106] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5111] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5114] <... openat resumed>) = 3 [pid 5111] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] chdir("./file1" [pid 5113] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5111] <... futex resumed>) = 1 [pid 5104] <... futex resumed>) = 0 [pid 5104] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] creat("./file0", 000 [pid 5114] <... chdir resumed>) = 0 [pid 5113] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5113] <... futex resumed>) = 1 [pid 5104] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5111] <... creat resumed>) = 4 [pid 5107] <... futex resumed>) = 0 [pid 5107] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5107] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5113] creat("./file0", 000) = 4 [pid 5114] <... futex resumed>) = 1 [pid 5113] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5111] <... futex resumed>) = 1 [pid 5108] <... futex resumed>) = 0 [pid 5104] <... futex resumed>) = 0 [pid 5114] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5113] <... futex resumed>) = 1 [pid 5111] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5108] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = 0 [pid 5104] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5113] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5108] <... futex resumed>) = 0 [pid 5107] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5107] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5108] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5114] creat("./file0", 000 [pid 5104] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5114] <... creat resumed>) = 4 [ 78.106351][ T5112] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.122601][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.138841][ T5112] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5113] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5114] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5114] <... futex resumed>) = 1 [pid 5106] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 0 [pid 5108] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5108] <... futex resumed>) = 0 [pid 5107] <... mmap resumed>) = 0x7f9608197000 [pid 5108] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5107] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5107] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5114] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5106] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5104] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5107] <... clone3 resumed> => {parent_tid=[5115]}, 88) = 5115 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5104] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] <... mmap resumed>) = 0x7f9608197000 [pid 5105] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] <... mmap resumed>) = 0x7f9608197000 [ 78.152833][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.153215][ T5111] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.162297][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.167705][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.193332][ T5112] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 5115 attached [pid 5107] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5105] <... mprotect resumed>) = 0 [pid 5104] <... mmap resumed>) = 0x7f9608197000 [pid 5115] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5107] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5115] <... rseq resumed>) = 0 [pid 5107] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5115] set_robust_list(0x7f96081b79a0, 24 [pid 5107] <... futex resumed>) = 0 [pid 5115] <... set_robust_list resumed>) = 0 [pid 5107] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5115] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5115] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5104] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5106] <... mprotect resumed>) = 0 [pid 5105] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5104] <... mprotect resumed>) = 0 [pid 5106] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5105] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5104] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5108] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5108] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5106] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5105] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5104] <... rt_sigprocmask resumed>[], 8) = 0 [ 78.208945][ T5114] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.217515][ T29] audit: type=1800 audit(1715660550.872:7): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 78.232504][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.238459][ T5112] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5108] <... mmap resumed>) = 0x7f9608197000 [pid 5106] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5104] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5108] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5107] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5105] <... clone3 resumed> => {parent_tid=[5116]}, 88) = 5116 [pid 5105] rt_sigprocmask(SIG_SETMASK, [], [pid 5104] <... clone3 resumed> => {parent_tid=[5117]}, 88) = 5117 [pid 5106] <... clone3 resumed> => {parent_tid=[5118]}, 88) = 5118 [pid 5108] <... mprotect resumed>) = 0 [pid 5108] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5108] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5119]}, 88) = 5119 [pid 5108] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5119 attached ./strace-static-x86_64: Process 5118 attached ./strace-static-x86_64: Process 5117 attached ./strace-static-x86_64: Process 5116 attached [pid 5108] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] rt_sigprocmask(SIG_SETMASK, [], [pid 5105] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5104] rt_sigprocmask(SIG_SETMASK, [], [pid 5119] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5118] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5117] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5116] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5108] <... futex resumed>) = 0 [pid 5119] <... rseq resumed>) = 0 [pid 5118] <... rseq resumed>) = 0 [pid 5117] <... rseq resumed>) = 0 [pid 5116] <... rseq resumed>) = 0 [pid 5108] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5105] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5104] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5119] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5119] rt_sigprocmask(SIG_SETMASK, [], [pid 5117] set_robust_list(0x7f96081b79a0, 24 [pid 5116] set_robust_list(0x7f96081b79a0, 24 [pid 5119] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5117] <... set_robust_list resumed>) = 0 [pid 5116] <... set_robust_list resumed>) = 0 [pid 5119] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5118] set_robust_list(0x7f96081b79a0, 24 [pid 5117] rt_sigprocmask(SIG_SETMASK, [], [pid 5116] rt_sigprocmask(SIG_SETMASK, [], [pid 5106] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = 0 [pid 5104] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5118] <... set_robust_list resumed>) = 0 [ 78.252546][ T5111] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.261378][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.270164][ T5114] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.282488][ T5111] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.290331][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.297992][ T5112] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5117] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5116] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5105] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5104] <... futex resumed>) = 0 [pid 5117] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5116] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5104] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5106] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5118] rt_sigprocmask(SIG_SETMASK, [], [pid 5115] <... open resumed>) = 5 [pid 5115] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 78.308277][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.316373][ T5114] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.324050][ T29] audit: type=1800 audit(1715660550.972:8): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 78.338719][ T5111] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.345144][ T5112] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5115] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5118] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5108] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5118] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5119] <... open resumed>) = 5 [pid 5119] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... open resumed>) = 5 [pid 5119] <... futex resumed>) = 0 [pid 5117] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5119] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5117] <... futex resumed>) = 1 [pid 5117] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5104] <... futex resumed>) = 0 [ 78.352361][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.360764][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.374008][ T5114] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.385248][ T5114] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.392702][ T5110] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.402437][ T5111] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5112] <... write resumed>) = 53248 [pid 5116] <... open resumed>) = 5 [pid 5116] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5116] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5112] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5112] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] exit_group(0 [pid 5116] <... futex resumed>) = ? [pid 5113] <... write resumed>) = 53248 [pid 5112] <... futex resumed>) = ? [pid 5105] <... exit_group resumed>) = ? [pid 5116] +++ exited with 0 +++ [pid 5114] <... write resumed>) = 53248 [pid 5113] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 78.402468][ T5114] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.417410][ T5113] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.417495][ T29] audit: type=1800 audit(1715660550.982:9): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 78.435629][ T5111] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5107] exit_group(0 [pid 5115] <... futex resumed>) = ? [pid 5107] <... exit_group resumed>) = ? [pid 5115] +++ exited with 0 +++ [pid 5113] +++ exited with 0 +++ [pid 5111] <... write resumed>) = 53248 [pid 5111] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] +++ exited with 0 +++ [pid 5111] <... futex resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5111] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5110] <... write resumed>) = 53248 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5110] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5110] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5118] <... open resumed>) = 5 [pid 5114] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5112] +++ exited with 0 +++ [pid 5082] <... openat resumed>) = 3 [pid 5108] exit_group(0 [pid 5082] newfstatat(3, "", [pid 5119] <... futex resumed>) = ? [pid 5114] <... futex resumed>) = ? [pid 5108] <... exit_group resumed>) = ? [pid 5104] exit_group(0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5119] +++ exited with 0 +++ [pid 5118] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5117] <... futex resumed>) = ? [pid 5114] +++ exited with 0 +++ [pid 5105] +++ exited with 0 +++ [pid 5104] <... exit_group resumed>) = ? [pid 5118] <... futex resumed>) = 0 [pid 5117] +++ exited with 0 +++ [pid 5118] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5082] getdents64(3, [pid 5111] <... futex resumed>) = ? [pid 5108] +++ exited with 0 +++ [pid 5106] exit_group(0 [pid 5118] <... futex resumed>) = ? [pid 5110] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5118] +++ exited with 0 +++ [pid 5110] +++ exited with 0 +++ [pid 5082] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] unlink("./1/binderfs" [pid 5106] +++ exited with 0 +++ [pid 5085] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5082] <... unlink resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5084] newfstatat(3, "", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(3, [pid 5084] getdents64(3, [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=12 /* 0.12 s */} --- [pid 5111] +++ exited with 0 +++ [pid 5104] +++ exited with 0 +++ [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5085] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5081] <... restart_syscall resumed>) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... restart_syscall resumed>) = 0 [pid 5081] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5083] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] newfstatat(3, "", [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] unlink("./1/binderfs" [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] getdents64(3, [pid 5084] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] <... unlink resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(3, "", [pid 5081] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./1/binderfs" [pid 5081] unlink("./1/binderfs" [pid 5085] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5081] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./1/binderfs", [pid 5081] <... umount2 resumed>) = 0 [pid 5085] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] unlink("./1/binderfs" [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(AT_FDCWD, "./1/file1", [pid 5084] newfstatat(AT_FDCWD, "./1/file1", [ 78.455523][ T29] audit: type=1800 audit(1715660550.982:10): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 78.479392][ T29] audit: type=1800 audit(1715660551.042:11): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5082] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5081] newfstatat(AT_FDCWD, "./1/file1", [pid 5085] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(4, "", [pid 5081] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... openat resumed>) = 4 [pid 5084] <... openat resumed>) = 4 [pid 5082] getdents64(4, [pid 5081] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] newfstatat(4, "", [pid 5084] newfstatat(4, "", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 4 [pid 5085] getdents64(4, [pid 5084] getdents64(4, [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, [pid 5081] newfstatat(4, "", [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] close(4 [pid 5081] getdents64(4, [pid 5082] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5084] getdents64(4, [pid 5082] rmdir("./1/file1" [pid 5081] getdents64(4, [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4 [pid 5084] close(4 [pid 5083] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] rmdir("./1/file1" [pid 5085] <... close resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./1/file1", [pid 5085] rmdir("./1/file1" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] getdents64(3, [pid 5081] close(4 [pid 5083] umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] <... close resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] close(3 [pid 5081] rmdir("./1/file1" [pid 5085] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5082] rmdir("./1" [pid 5085] close(3 [pid 5084] close(3 [pid 5083] newfstatat(4, "", [pid 5082] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, [pid 5084] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5082] mkdir("./2", 0777 [pid 5081] <... close resumed>) = 0 [pid 5084] rmdir("./1" [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./1" [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] rmdir("./1" [pid 5084] mkdir("./2", 0777 [pid 5083] getdents64(4, [pid 5084] <... mkdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] getdents64(4, [pid 5082] <... openat resumed>) = 3 [pid 5081] mkdir("./2", 0777 [pid 5085] mkdir("./2", 0777 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5083] close(4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... close resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5083] rmdir("./1/file1" [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5083] getdents64(3, [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5083] close(3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./1") = 0 [pid 5083] mkdir("./2", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5082] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] close(3 [pid 5084] close(3 [pid 5082] <... close resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... ioctl resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5120 attached , child_tidptr=0x5555939db690) = 5121 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5120 [pid 5120] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5120] chdir("./2"./strace-static-x86_64: Process 5121 attached ) = 0 [pid 5120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] close(3 [pid 5121] set_robust_list(0x5555939db6a0, 24 [pid 5120] <... prctl resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5120] setpgid(0, 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5120] <... setpgid resumed>) = 0 [pid 5120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5121] <... set_robust_list resumed>) = 0 [pid 5120] <... openat resumed>) = 3 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5122 [pid 5083] <... ioctl resumed>) = 0 [pid 5120] write(3, "1000", 4 [pid 5121] chdir("./2" [pid 5120] <... write resumed>) = 4 [pid 5120] close(3) = 0 [pid 5121] <... chdir resumed>) = 0 [pid 5081] close(3./strace-static-x86_64: Process 5122 attached [pid 5120] symlink("/dev/binderfs", "./binderfs" [pid 5122] set_robust_list(0x5555939db6a0, 24 [pid 5120] <... symlink resumed>) = 0 [pid 5122] <... set_robust_list resumed>) = 0 [pid 5120] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... close resumed>) = 0 [pid 5122] chdir("./2" [pid 5121] <... prctl resumed>) = 0 [pid 5120] <... futex resumed>) = 0 [pid 5083] close(3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5121] setpgid(0, 0 [pid 5083] <... close resumed>) = 0 ./strace-static-x86_64: Process 5123 attached [pid 5122] <... chdir resumed>) = 0 [pid 5121] <... setpgid resumed>) = 0 [pid 5120] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5123 [pid 5120] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5120] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5120] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5123] set_robust_list(0x5555939db6a0, 24 [pid 5121] <... openat resumed>) = 3 [pid 5123] <... set_robust_list resumed>) = 0 [pid 5121] write(3, "1000", 4 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5125 ./strace-static-x86_64: Process 5125 attached [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5121] <... write resumed>) = 4 [pid 5120] <... mprotect resumed>) = 0 [pid 5123] chdir("./2" [pid 5122] <... prctl resumed>) = 0 [pid 5121] close(3 [pid 5123] <... chdir resumed>) = 0 [pid 5120] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5122] setpgid(0, 0 [pid 5121] <... close resumed>) = 0 [pid 5125] set_robust_list(0x5555939db6a0, 24 [pid 5123] <... prctl resumed>) = 0 [pid 5122] <... setpgid resumed>) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs" [pid 5125] <... set_robust_list resumed>) = 0 [pid 5123] setpgid(0, 0 [pid 5120] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5125] chdir("./2" [pid 5123] <... setpgid resumed>) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5121] <... symlink resumed>) = 0 [pid 5120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5126 attached [pid 5125] <... chdir resumed>) = 0 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] <... openat resumed>) = 3 [pid 5121] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... clone3 resumed> => {parent_tid=[5126]}, 88) = 5126 [pid 5123] <... openat resumed>) = 3 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5122] write(3, "1000", 4 [pid 5120] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] <... prctl resumed>) = 0 [pid 5123] write(3, "1000", 4 [pid 5122] <... write resumed>) = 4 [pid 5121] <... futex resumed>) = 0 [pid 5120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5122] close(3 [pid 5120] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] setpgid(0, 0 [pid 5123] <... write resumed>) = 4 [pid 5122] <... close resumed>) = 0 [pid 5121] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5120] <... futex resumed>) = 0 [pid 5126] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5125] <... setpgid resumed>) = 0 [pid 5123] close(3 [pid 5122] symlink("/dev/binderfs", "./binderfs" [pid 5121] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5120] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5126] <... rseq resumed>) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5123] <... close resumed>) = 0 [pid 5122] <... symlink resumed>) = 0 [pid 5121] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5126] set_robust_list(0x7f96081d89a0, 24 [pid 5125] <... openat resumed>) = 3 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5125] write(3, "1000", 4 [pid 5123] <... symlink resumed>) = 0 [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5123] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... mmap resumed>) = 0x7f96081b8000 [pid 5123] <... futex resumed>) = 0 [pid 5121] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5123] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5121] <... mprotect resumed>) = 0 [pid 5123] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5126] <... set_robust_list resumed>) = 0 [pid 5125] <... write resumed>) = 4 [pid 5123] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5122] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5126] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] close(3 [pid 5122] <... futex resumed>) = 0 [pid 5121] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5126] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5125] <... close resumed>) = 0 [pid 5122] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5126] memfd_create("syzkaller", 0 [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5122] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5126] <... memfd_create resumed>) = 3 [pid 5125] <... symlink resumed>) = 0 [pid 5123] <... mmap resumed>) = 0x7f96081b8000 [pid 5122] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5125] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5122] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5126] <... mmap resumed>) = 0x7f95ffc00000 [pid 5125] <... futex resumed>) = 0 [pid 5123] <... mprotect resumed>) = 0 [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5121] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5125] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5122] <... mmap resumed>) = 0x7f96081b8000 [pid 5121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5123] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5127 attached [pid 5125] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5122] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5125] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5122] <... mprotect resumed>) = 0 [pid 5127] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5122] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5127] <... rseq resumed>) = 0 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5122] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5128 attached [pid 5127] set_robust_list(0x7f96081d89a0, 24 [pid 5125] <... mmap resumed>) = 0x7f96081b8000 [pid 5123] <... clone3 resumed> => {parent_tid=[5128]}, 88) = 5128 [pid 5122] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5121] <... clone3 resumed> => {parent_tid=[5127]}, 88) = 5127 [pid 5128] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5127] <... set_robust_list resumed>) = 0 [pid 5125] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5123] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5129 attached [pid 5128] <... rseq resumed>) = 0 [pid 5127] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] <... mprotect resumed>) = 0 [pid 5123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5121] rt_sigprocmask(SIG_SETMASK, [], [pid 5129] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5128] set_robust_list(0x7f96081d89a0, 24 [pid 5127] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5123] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5129] <... rseq resumed>) = 0 [pid 5128] <... set_robust_list resumed>) = 0 [pid 5127] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5123] <... futex resumed>) = 0 [pid 5122] <... clone3 resumed> => {parent_tid=[5129]}, 88) = 5129 [pid 5121] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] set_robust_list(0x7f96081d89a0, 24 [pid 5128] rt_sigprocmask(SIG_SETMASK, [], [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5126] <... write resumed>) = 524288 [pid 5125] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5123] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5122] rt_sigprocmask(SIG_SETMASK, [], [pid 5121] <... futex resumed>) = 0 [pid 5129] <... set_robust_list resumed>) = 0 [pid 5128] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5127] memfd_create("syzkaller", 0 [pid 5125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5122] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5121] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5129] rt_sigprocmask(SIG_SETMASK, [], [pid 5128] memfd_create("syzkaller", 0 [pid 5127] <... memfd_create resumed>) = 3 [pid 5122] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5130 attached [pid 5129] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5128] <... memfd_create resumed>) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5125] <... clone3 resumed> => {parent_tid=[5130]}, 88) = 5130 [pid 5126] munmap(0x7f95ffc00000, 138412032 [pid 5122] <... futex resumed>) = 0 [pid 5130] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5129] memfd_create("syzkaller", 0 [pid 5128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5127] <... mmap resumed>) = 0x7f95ffc00000 [pid 5126] <... munmap resumed>) = 0 [pid 5125] rt_sigprocmask(SIG_SETMASK, [], [pid 5122] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5130] <... rseq resumed>) = 0 [pid 5128] <... mmap resumed>) = 0x7f95ffc00000 [pid 5125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5130] set_robust_list(0x7f96081d89a0, 24 [pid 5128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5125] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... set_robust_list resumed>) = 0 [pid 5129] <... memfd_create resumed>) = 3 [pid 5125] <... futex resumed>) = 0 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5126] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5125] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5130] rt_sigprocmask(SIG_SETMASK, [], [pid 5129] <... mmap resumed>) = 0x7f95ffc00000 [pid 5126] <... openat resumed>) = 4 [pid 5130] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5126] ioctl(4, LOOP_SET_FD, 3 [pid 5130] memfd_create("syzkaller", 0 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5130] <... memfd_create resumed>) = 3 [pid 5128] <... write resumed>) = 524288 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5127] <... write resumed>) = 524288 [pid 5128] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5127] munmap(0x7f95ffc00000, 138412032 [pid 5126] <... ioctl resumed>) = 0 [pid 5130] <... write resumed>) = 524288 [pid 5127] <... munmap resumed>) = 0 [pid 5130] munmap(0x7f95ffc00000, 138412032 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5127] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5126] close(3 [pid 5130] <... munmap resumed>) = 0 [pid 5128] <... openat resumed>) = 4 [pid 5127] <... openat resumed>) = 4 [pid 5126] <... close resumed>) = 0 [pid 5129] <... write resumed>) = 524288 [pid 5128] ioctl(4, LOOP_SET_FD, 3 [pid 5126] close(4 [pid 5129] munmap(0x7f95ffc00000, 138412032 [pid 5128] <... ioctl resumed>) = 0 [pid 5126] <... close resumed>) = 0 [ 78.766776][ T5126] loop1: detected capacity change from 0 to 1024 [ 78.804852][ T5128] loop0: detected capacity change from 0 to 1024 [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5130] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5129] <... munmap resumed>) = 0 [pid 5128] close(3 [pid 5127] <... ioctl resumed>) = 0 [pid 5126] mkdir("./file1", 0777 [pid 5130] <... openat resumed>) = 4 [pid 5128] <... close resumed>) = 0 [pid 5127] close(3 [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 5129] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5128] close(4 [pid 5126] <... mkdir resumed>) = 0 [pid 5127] <... close resumed>) = 0 [pid 5127] close(4) = 0 [pid 5127] mkdir("./file1", 0777 [pid 5130] <... ioctl resumed>) = 0 [pid 5129] <... openat resumed>) = 4 [pid 5128] <... close resumed>) = 0 [pid 5126] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5127] <... mkdir resumed>) = 0 [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 5128] mkdir("./file1", 0777 [pid 5126] <... mount resumed>) = 0 [pid 5130] close(3 [pid 5127] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5128] <... mkdir resumed>) = 0 [ 78.814453][ T5127] loop3: detected capacity change from 0 to 1024 [ 78.833006][ T5130] loop2: detected capacity change from 0 to 1024 [ 78.849693][ T5129] loop4: detected capacity change from 0 to 1024 [pid 5126] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5130] <... close resumed>) = 0 [pid 5129] <... ioctl resumed>) = 0 [pid 5128] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5126] <... openat resumed>) = 3 [pid 5130] close(4 [pid 5129] close(3 [pid 5130] <... close resumed>) = 0 [pid 5129] <... close resumed>) = 0 [pid 5126] chdir("./file1" [pid 5130] mkdir("./file1", 0777 [pid 5129] close(4 [pid 5126] <... chdir resumed>) = 0 [pid 5130] <... mkdir resumed>) = 0 [pid 5129] <... close resumed>) = 0 [pid 5126] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5130] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5129] mkdir("./file1", 0777 [pid 5126] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5129] <... mkdir resumed>) = 0 [pid 5126] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5129] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5120] <... futex resumed>) = 0 [pid 5126] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5120] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5120] <... futex resumed>) = 1 [pid 5126] creat("./file0", 000 [pid 5120] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] <... creat resumed>) = 4 [pid 5126] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5120] <... futex resumed>) = 0 [pid 5120] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5120] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5128] <... mount resumed>) = 0 [pid 5127] <... mount resumed>) = 0 [pid 5128] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5127] chdir("./file1") = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5127] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5121] <... futex resumed>) = 0 [pid 5127] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5121] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5121] <... futex resumed>) = 0 [pid 5127] creat("./file0", 000 [pid 5121] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... creat resumed>) = 4 [pid 5128] <... openat resumed>) = 3 [pid 5130] <... mount resumed>) = 0 [pid 5128] chdir("./file1" [pid 5130] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5128] <... chdir resumed>) = 0 [pid 5128] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5130] <... openat resumed>) = 3 [pid 5128] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5128] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5123] <... futex resumed>) = 0 [pid 5130] chdir("./file1" [pid 5129] <... mount resumed>) = 0 [pid 5128] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5127] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5123] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... futex resumed>) = 1 [pid 5121] <... futex resumed>) = 0 [pid 5121] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5121] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5129] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5128] creat("./file0", 000 [pid 5130] <... chdir resumed>) = 0 [pid 5129] <... openat resumed>) = 3 [pid 5130] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5129] chdir("./file1" [pid 5128] <... creat resumed>) = 4 [pid 5129] <... chdir resumed>) = 0 [pid 5130] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5129] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5120] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 78.887434][ T5126] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.901572][ T5126] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.914207][ T5126] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.914923][ T5127] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.921525][ T5126] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5130] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5129] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5128] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5120] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] <... futex resumed>) = 1 [pid 5125] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5129] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] creat("./file0", 000 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5123] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5121] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] <... futex resumed>) = 0 [pid 5121] <... futex resumed>) = 0 [pid 5123] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5121] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5130] <... creat resumed>) = 4 [pid 5129] <... futex resumed>) = 1 [ 78.943382][ T5126] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.950993][ T5126] hfsplus: request for non-existent node 16777216 in B*Tree [ 78.972993][ T5127] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5128] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5126] <... write resumed>) = 53248 [pid 5125] <... futex resumed>) = 0 [pid 5122] <... futex resumed>) = 0 [pid 5121] <... mprotect resumed>) = 0 [pid 5120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5130] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... futex resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5122] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... mmap resumed>) = 0x7f9608197000 [pid 5130] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5129] <... futex resumed>) = 0 [pid 5126] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] <... futex resumed>) = 1 [pid 5120] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5121] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5129] creat("./file0", 000 [pid 5125] <... futex resumed>) = 0 [pid 5123] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5121] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5120] <... mprotect resumed>) = 0 [pid 5129] <... creat resumed>) = 4 [pid 5125] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5123] <... futex resumed>) = 0 [pid 5121] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5120] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5129] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5129] <... futex resumed>) = 1 [pid 5123] <... mmap resumed>) = 0x7f9608197000 [pid 5122] <... futex resumed>) = 0 [pid 5120] <... rt_sigprocmask resumed>[], 8) = 0 [ 78.996154][ T5128] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.000047][ T5127] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.016722][ T5130] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.035158][ T5129] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5129] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5122] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5132 attached ./strace-static-x86_64: Process 5131 attached [pid 5123] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5122] <... futex resumed>) = 0 [pid 5121] <... clone3 resumed> => {parent_tid=[5131]}, 88) = 5131 [pid 5132] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5122] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5120] <... clone3 resumed> => {parent_tid=[5132]}, 88) = 5132 [pid 5121] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] <... rseq resumed>) = 0 [pid 5123] <... mprotect resumed>) = 0 [pid 5121] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5120] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] set_robust_list(0x7f96081b79a0, 24 [pid 5131] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5123] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5121] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5131] <... rseq resumed>) = 0 [pid 5123] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5121] <... futex resumed>) = 0 [pid 5123] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5131] set_robust_list(0x7f96081b79a0, 24 [pid 5121] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5133 attached [pid 5132] <... set_robust_list resumed>) = 0 [pid 5131] <... set_robust_list resumed>) = 0 [pid 5120] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5131] rt_sigprocmask(SIG_SETMASK, [], [pid 5123] <... clone3 resumed> => {parent_tid=[5133]}, 88) = 5133 [pid 5133] <... rseq resumed>) = 0 [pid 5131] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5123] rt_sigprocmask(SIG_SETMASK, [], [pid 5133] set_robust_list(0x7f96081b79a0, 24 [pid 5131] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5123] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5133] <... set_robust_list resumed>) = 0 [pid 5133] rt_sigprocmask(SIG_SETMASK, [], [pid 5132] rt_sigprocmask(SIG_SETMASK, [], [pid 5131] <... open resumed>) = 5 [pid 5125] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5123] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] <... futex resumed>) = 0 [pid 5132] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5125] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5120] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5132] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5125] <... futex resumed>) = 0 [pid 5132] <... open resumed>) = 5 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5125] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5132] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... mprotect resumed>) = 0 [pid 5123] <... futex resumed>) = 0 [pid 5133] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5123] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5133] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5131] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5132] <... futex resumed>) = 1 [pid 5125] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5120] <... futex resumed>) = 0 [pid 5132] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] <... futex resumed>) = 1 [pid 5125] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5121] <... futex resumed>) = 0 [pid 5125] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5120] exit_group(0 [pid 5131] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5132] <... futex resumed>) = ? [ 79.042492][ T5129] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.053822][ T5127] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.055201][ T5128] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.074278][ T5130] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.076259][ T5127] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5126] <... futex resumed>) = ? [pid 5120] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 5134 attached [pid 5132] +++ exited with 0 +++ [pid 5126] +++ exited with 0 +++ [pid 5125] <... clone3 resumed> => {parent_tid=[5134]}, 88) = 5134 [pid 5122] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5120] +++ exited with 0 +++ [pid 5134] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5125] rt_sigprocmask(SIG_SETMASK, [], [pid 5122] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5134] <... rseq resumed>) = 0 [pid 5125] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5122] <... futex resumed>) = 0 [pid 5134] set_robust_list(0x7f96081b79a0, 24 [pid 5125] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5134] <... set_robust_list resumed>) = 0 [pid 5125] <... futex resumed>) = 0 [pid 5122] <... mmap resumed>) = 0x7f9608197000 [pid 5134] rt_sigprocmask(SIG_SETMASK, [], [pid 5125] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5122] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5134] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5122] <... mprotect resumed>) = 0 [pid 5134] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5122] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5120, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5127] <... write resumed>) = 53248 [pid 5122] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5135]}, 88) = 5135 [pid 5122] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5122] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5122] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5135 attached [ 79.095911][ T5130] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.100331][ T5127] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.112668][ T5129] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.113660][ T5128] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.120183][ T5129] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.131262][ T5130] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5135] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5135] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5135] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5135] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5134] <... open resumed>) = 5 [pid 5121] exit_group(0 [pid 5134] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = ? [pid 5123] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5131] <... futex resumed>) = ? [pid 5121] <... exit_group resumed>) = ? [pid 5134] <... futex resumed>) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5134] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5131] +++ exited with 0 +++ [pid 5129] <... write resumed>) = 53248 [pid 5127] +++ exited with 0 +++ [pid 5121] +++ exited with 0 +++ [pid 5135] <... open resumed>) = 5 [pid 5135] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5133] <... open resumed>) = 5 [pid 5129] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5133] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5129] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5133] <... futex resumed>) = 0 [pid 5129] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5133] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] newfstatat(3, "", [pid 5084] <... openat resumed>) = 3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] newfstatat(3, "", [pid 5082] getdents64(3, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5135] <... futex resumed>) = 1 [pid 5122] <... futex resumed>) = 0 [pid 5084] getdents64(3, [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5135] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5122] exit_group(0 [pid 5135] <... futex resumed>) = ? [pid 5129] <... futex resumed>) = ? [pid 5122] <... exit_group resumed>) = ? [pid 5135] +++ exited with 0 +++ [pid 5129] +++ exited with 0 +++ [pid 5122] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 79.138667][ T5129] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.151182][ T5129] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.152864][ T5130] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.163563][ T5128] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.178400][ T5130] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.186898][ T5128] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5082] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./2/binderfs" [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./2/binderfs" [pid 5130] <... write resumed>) = 53248 [pid 5128] <... write resumed>) = 53248 [pid 5085] <... unlink resumed>) = 0 [pid 5084] unlink("./2/binderfs" [pid 5082] <... unlink resumed>) = 0 [pid 5130] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5128] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5082] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5130] <... futex resumed>) = 0 [pid 5128] <... futex resumed>) = 0 [pid 5084] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5130] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5128] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] exit_group(0 [pid 5123] exit_group(0 [pid 5133] <... futex resumed>) = ? [pid 5128] <... futex resumed>) = ? [pid 5123] <... exit_group resumed>) = ? [pid 5134] <... futex resumed>) = ? [pid 5133] +++ exited with 0 +++ [pid 5130] <... futex resumed>) = ? [pid 5128] +++ exited with 0 +++ [pid 5125] <... exit_group resumed>) = ? [pid 5123] +++ exited with 0 +++ [pid 5134] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ [pid 5085] <... umount2 resumed>) = 0 [pid 5125] +++ exited with 0 +++ [pid 5084] <... umount2 resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5085] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./2/file1", [pid 5084] newfstatat(AT_FDCWD, "./2/file1", [pid 5085] newfstatat(AT_FDCWD, "./2/file1", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... restart_syscall resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 79.194596][ T5128] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... openat resumed>) = 4 [pid 5085] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 3 [pid 5081] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... openat resumed>) = 4 [pid 5082] newfstatat(4, "", [pid 5085] newfstatat(4, "", [pid 5084] newfstatat(4, "", [pid 5083] newfstatat(3, "", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5081] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] getdents64(4, [pid 5084] getdents64(4, [pid 5083] getdents64(3, [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... openat resumed>) = 3 [pid 5082] getdents64(4, [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] newfstatat(3, "", [pid 5085] getdents64(4, [pid 5084] getdents64(4, [pid 5083] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] close(4 [pid 5084] close(4 [pid 5083] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] rmdir("./2/file1" [pid 5085] rmdir("./2/file1" [pid 5083] unlink("./2/binderfs" [pid 5082] close(4 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... close resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5082] rmdir("./2/file1" [pid 5081] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... rmdir resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5082] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(3, [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./2/binderfs", [pid 5082] rmdir("./2" [pid 5085] close(3 [pid 5084] <... rmdir resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] getdents64(3, [pid 5081] unlink("./2/binderfs" [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] mkdir("./3", 0777 [pid 5085] rmdir("./2" [pid 5084] close(3 [pid 5083] <... umount2 resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... mkdir resumed>) = 0 [pid 5081] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] mkdir("./3", 0777 [pid 5084] rmdir("./2" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./2/file1", [pid 5081] <... umount2 resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] mkdir("./3", 0777 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./2/file1", [pid 5084] <... mkdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... openat resumed>) = 3 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", [pid 5081] newfstatat(4, "", [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(4, [pid 5083] close(4 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] close(4 [pid 5083] rmdir("./2/file1" [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./2/file1" [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5081] rmdir("./2") = 0 [pid 5085] close(3 [pid 5084] close(3 [pid 5083] getdents64(3, [pid 5082] close(3 [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] mkdir("./3", 0777 [pid 5083] close(3 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./2"./strace-static-x86_64: Process 5137 attached [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5137 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5137] set_robust_list(0x5555939db6a0, 24 [pid 5083] mkdir("./3", 0777 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5137] <... set_robust_list resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5136 ./strace-static-x86_64: Process 5136 attached [pid 5083] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5138 attached [pid 5137] chdir("./3" [pid 5136] set_robust_list(0x5555939db6a0, 24 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5138] set_robust_list(0x5555939db6a0, 24 [pid 5137] <... chdir resumed>) = 0 [pid 5136] <... set_robust_list resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5138 [pid 5136] chdir("./3" [pid 5138] <... set_robust_list resumed>) = 0 [pid 5138] chdir("./3" [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5136] <... chdir resumed>) = 0 [pid 5137] <... prctl resumed>) = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5137] setpgid(0, 0) = 0 [pid 5136] <... prctl resumed>) = 0 [pid 5138] <... chdir resumed>) = 0 [pid 5136] setpgid(0, 0 [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5136] <... setpgid resumed>) = 0 [pid 5138] <... prctl resumed>) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5138] setpgid(0, 0) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5137] <... openat resumed>) = 3 [pid 5136] <... openat resumed>) = 3 [pid 5138] <... openat resumed>) = 3 [pid 5137] write(3, "1000", 4 [pid 5136] write(3, "1000", 4 [pid 5138] write(3, "1000", 4 [pid 5137] <... write resumed>) = 4 [pid 5136] <... write resumed>) = 4 [pid 5138] <... write resumed>) = 4 [pid 5136] close(3 [pid 5138] close(3 [pid 5136] <... close resumed>) = 0 [pid 5138] <... close resumed>) = 0 [pid 5137] close(3 [pid 5136] symlink("/dev/binderfs", "./binderfs" [pid 5138] symlink("/dev/binderfs", "./binderfs" [pid 5137] <... close resumed>) = 0 [pid 5136] <... symlink resumed>) = 0 [pid 5138] <... symlink resumed>) = 0 [pid 5137] symlink("/dev/binderfs", "./binderfs" [pid 5136] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5137] <... symlink resumed>) = 0 [pid 5137] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5136] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5138] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5136] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5137] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5136] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5137] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5136] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5137] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5138] <... futex resumed>) = 0 [pid 5137] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5139 attached [pid 5138] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5139] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5138] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5139] <... rseq resumed>) = 0 [pid 5138] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5139] set_robust_list(0x7f96081d89a0, 24 [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5136] <... clone3 resumed> => {parent_tid=[5139]}, 88) = 5139 [pid 5139] <... set_robust_list resumed>) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] rt_sigprocmask(SIG_SETMASK, [], [pid 5139] rt_sigprocmask(SIG_SETMASK, [], [pid 5138] <... mmap resumed>) = 0x7f96081b8000 [pid 5136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5139] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5138] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5136] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = 0 [pid 5139] memfd_create("syzkaller", 0 [pid 5138] <... mprotect resumed>) = 0 [pid 5137] <... mmap resumed>) = 0x7f96081b8000 [pid 5136] <... futex resumed>) = 0 [pid 5139] <... memfd_create resumed>) = 3 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5136] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5138] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5139] <... mmap resumed>) = 0x7f95ffc00000 [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5137] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5140 attached [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5140] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5137] <... mprotect resumed>) = 0 [pid 5140] <... rseq resumed>) = 0 [pid 5140] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5137] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5140] rt_sigprocmask(SIG_SETMASK, [], [pid 5138] <... clone3 resumed> => {parent_tid=[5140]}, 88) = 5140 [pid 5137] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5140] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5138] rt_sigprocmask(SIG_SETMASK, [], [pid 5140] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5137] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5138] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 1 [pid 5140] memfd_create("syzkaller", 0 [pid 5138] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5140] <... memfd_create resumed>) = 3 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288./strace-static-x86_64: Process 5141 attached [pid 5139] <... write resumed>) = 524288 [pid 5137] <... clone3 resumed> => {parent_tid=[5141]}, 88) = 5141 [pid 5083] close(3 [pid 5081] close(3 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... close resumed>) = 0 [pid 5141] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5081] <... close resumed>) = 0 [pid 5141] <... rseq resumed>) = 0 [pid 5137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5141] set_robust_list(0x7f96081d89a0, 24 [pid 5137] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5141] <... set_robust_list resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5137] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5141] rt_sigprocmask(SIG_SETMASK, [], [pid 5139] munmap(0x7f95ffc00000, 138412032 [pid 5141] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5143 attached [pid 5141] memfd_create("syzkaller", 0 [pid 5140] <... write resumed>) = 524288 [pid 5139] <... munmap resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5143 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5142 ./strace-static-x86_64: Process 5142 attached [pid 5142] set_robust_list(0x5555939db6a0, 24 [pid 5143] set_robust_list(0x5555939db6a0, 24 [pid 5139] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5142] <... set_robust_list resumed>) = 0 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5141] <... memfd_create resumed>) = 3 [pid 5143] chdir("./3" [pid 5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5139] <... openat resumed>) = 4 [pid 5142] chdir("./3" [pid 5143] <... chdir resumed>) = 0 [pid 5141] <... mmap resumed>) = 0x7f95ffc00000 [pid 5140] munmap(0x7f95ffc00000, 138412032 [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5142] <... chdir resumed>) = 0 [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5140] <... munmap resumed>) = 0 [pid 5139] <... ioctl resumed>) = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5143] <... prctl resumed>) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5143] setpgid(0, 0 [pid 5142] <... prctl resumed>) = 0 [pid 5143] <... setpgid resumed>) = 0 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [pid 5142] setpgid(0, 0 [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5142] <... setpgid resumed>) = 0 [pid 5143] <... openat resumed>) = 3 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5143] write(3, "1000", 4) = 4 [pid 5142] <... openat resumed>) = 3 [pid 5143] close(3 [pid 5139] close(3 [pid 5142] write(3, "1000", 4 [pid 5143] <... close resumed>) = 0 [pid 5139] <... close resumed>) = 0 [pid 5142] <... write resumed>) = 4 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5139] close(4 [pid 5142] close(3 [pid 5143] <... symlink resumed>) = 0 [pid 5142] <... close resumed>) = 0 [pid 5143] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... close resumed>) = 0 [pid 5142] symlink("/dev/binderfs", "./binderfs" [pid 5143] <... futex resumed>) = 0 [pid 5139] mkdir("./file1", 0777 [pid 5142] <... symlink resumed>) = 0 [pid 5143] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5139] <... mkdir resumed>) = 0 [pid 5142] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5139] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5142] <... futex resumed>) = 0 [pid 5143] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5142] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5140] <... ioctl resumed>) = 0 [pid 5142] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5140] close(3 [pid 5142] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5143] <... mmap resumed>) = 0x7f96081b8000 [pid 5141] <... write resumed>) = 524288 [pid 5140] <... close resumed>) = 0 [pid 5143] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5140] close(4 [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5140] <... close resumed>) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5140] mkdir("./file1", 0777) = 0 [pid 5142] <... mmap resumed>) = 0x7f96081b8000 [pid 5143] <... clone3 resumed> => {parent_tid=[5144]}, 88) = 5144 [pid 5142] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5139] <... mount resumed>) = 0 [pid 5142] <... mprotect resumed>) = 0 [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5139] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5143] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5139] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5144 attached [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5143] <... futex resumed>) = 0 [pid 5139] chdir("./file1" [pid 5144] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5142] <... rt_sigprocmask resumed>[], 8) = 0 [ 79.453803][ T5139] loop4: detected capacity change from 0 to 1024 [ 79.464037][ T5140] loop1: detected capacity change from 0 to 1024 [pid 5143] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5141] munmap(0x7f95ffc00000, 138412032 [pid 5139] <... chdir resumed>) = 0 [pid 5144] <... rseq resumed>) = 0 [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5139] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5145 attached [pid 5144] set_robust_list(0x7f96081d89a0, 24 [pid 5141] <... munmap resumed>) = 0 [pid 5139] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5145] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5144] <... set_robust_list resumed>) = 0 [pid 5142] <... clone3 resumed> => {parent_tid=[5145]}, 88) = 5145 [pid 5139] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... rseq resumed>) = 0 [pid 5144] rt_sigprocmask(SIG_SETMASK, [], [pid 5142] rt_sigprocmask(SIG_SETMASK, [], [pid 5139] <... futex resumed>) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5145] set_robust_list(0x7f96081d89a0, 24 [pid 5144] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5141] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5139] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... set_robust_list resumed>) = 0 [pid 5144] memfd_create("syzkaller", 0 [pid 5142] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] <... futex resumed>) = 0 [pid 5145] rt_sigprocmask(SIG_SETMASK, [], [pid 5144] <... memfd_create resumed>) = 3 [pid 5142] <... futex resumed>) = 0 [pid 5141] <... openat resumed>) = 4 [pid 5139] creat("./file0", 000 [pid 5136] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5142] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5141] ioctl(4, LOOP_SET_FD, 3 [pid 5140] <... mount resumed>) = 0 [pid 5139] <... creat resumed>) = 4 [pid 5145] memfd_create("syzkaller", 0 [pid 5144] <... mmap resumed>) = 0x7f95ffc00000 [pid 5145] <... memfd_create resumed>) = 3 [pid 5144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5139] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5136] <... futex resumed>) = 0 [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5141] <... ioctl resumed>) = 0 [pid 5140] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5139] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... openat resumed>) = 3 [pid 5141] close(3 [pid 5140] chdir("./file1" [pid 5145] <... mmap resumed>) = 0x7f95ffc00000 [pid 5141] <... close resumed>) = 0 [pid 5140] <... chdir resumed>) = 0 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] <... futex resumed>) = 0 [pid 5141] close(4 [pid 5140] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5139] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5136] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] <... close resumed>) = 0 [pid 5140] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5141] mkdir("./file1", 0777 [pid 5140] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5141] <... mkdir resumed>) = 0 [pid 5140] <... futex resumed>) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... write resumed>) = 524288 [pid 5144] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5140] creat("./file0", 000 [pid 5144] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5140] <... creat resumed>) = 4 [pid 5144] ioctl(4, LOOP_SET_FD, 3 [pid 5141] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5140] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5138] <... futex resumed>) = 0 [ 79.531101][ T5141] loop3: detected capacity change from 0 to 1024 [ 79.552232][ T5139] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.571937][ T5144] loop2: detected capacity change from 0 to 1024 [pid 5138] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... write resumed>) = 524288 [pid 5145] munmap(0x7f95ffc00000, 138412032 [pid 5144] <... ioctl resumed>) = 0 [pid 5136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5136] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5144] close(3 [pid 5136] <... mmap resumed>) = 0x7f9608197000 [pid 5144] <... close resumed>) = 0 [pid 5136] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5144] close(4 [pid 5136] <... mprotect resumed>) = 0 [pid 5144] <... close resumed>) = 0 [pid 5136] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5144] mkdir("./file1", 0777 [pid 5136] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5145] <... munmap resumed>) = 0 [pid 5144] <... mkdir resumed>) = 0 [pid 5136] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5144] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5136] <... clone3 resumed> => {parent_tid=[5146]}, 88) = 5146 [pid 5136] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5146 attached [pid 5145] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5136] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5146] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5145] <... openat resumed>) = 4 [pid 5136] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... rseq resumed>) = 0 [pid 5145] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... futex resumed>) = 0 [pid 5146] set_robust_list(0x7f96081b79a0, 24 [pid 5141] <... mount resumed>) = 0 [pid 5138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5136] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] <... set_robust_list resumed>) = 0 [pid 5138] <... futex resumed>) = 0 [pid 5146] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5146] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5138] <... mmap resumed>) = 0x7f9608197000 [ 79.581438][ T5140] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.584666][ T5139] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.615799][ T5145] loop0: detected capacity change from 0 to 1024 [ 79.622250][ T5140] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5138] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5141] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5138] <... mprotect resumed>) = 0 [pid 5145] <... ioctl resumed>) = 0 [pid 5138] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5145] close(3 [pid 5141] <... openat resumed>) = 3 [pid 5138] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5145] <... close resumed>) = 0 [pid 5141] chdir("./file1" [pid 5138] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5145] close(4./strace-static-x86_64: Process 5147 attached ) = 0 [pid 5144] <... mount resumed>) = 0 [pid 5141] <... chdir resumed>) = 0 [pid 5138] <... clone3 resumed> => {parent_tid=[5147]}, 88) = 5147 [pid 5147] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5145] mkdir("./file1", 0777 [pid 5144] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5141] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5138] rt_sigprocmask(SIG_SETMASK, [], [pid 5147] <... rseq resumed>) = 0 [pid 5145] <... mkdir resumed>) = 0 [pid 5141] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5138] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5147] set_robust_list(0x7f96081b79a0, 24 [pid 5145] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5144] <... openat resumed>) = 3 [pid 5138] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... set_robust_list resumed>) = 0 [pid 5144] chdir("./file1" [pid 5141] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] <... futex resumed>) = 1 [pid 5147] rt_sigprocmask(SIG_SETMASK, [], [pid 5141] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5147] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5144] <... chdir resumed>) = 0 [pid 5147] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5144] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5144] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5144] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5144] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = 0 [pid 5143] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5144] creat("./file0", 000 [pid 5143] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5144] <... creat resumed>) = 4 [pid 5141] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 1 [pid 5141] creat("./file0", 000 [pid 5137] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5141] <... creat resumed>) = 4 [pid 5141] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5137] <... futex resumed>) = 0 [pid 5141] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5137] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5137] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... mount resumed>) = 0 [pid 5144] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5143] <... futex resumed>) = 0 [pid 5146] <... open resumed>) = 5 [pid 5145] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5144] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 79.631412][ T5139] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.653724][ T5140] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.657740][ T5139] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.670631][ T5140] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5143] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5146] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... openat resumed>) = 3 [pid 5144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5143] <... futex resumed>) = 0 [pid 5146] <... futex resumed>) = 0 [pid 5143] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5146] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5145] chdir("./file1" [pid 5144] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5145] <... chdir resumed>) = 0 [pid 5145] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5147] <... open resumed>) = 5 [pid 5145] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5147] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5147] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = 1 [pid 5142] <... futex resumed>) = 0 [pid 5147] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5142] <... futex resumed>) = 0 [pid 5145] creat("./file0", 000 [pid 5142] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5145] <... creat resumed>) = 4 [pid 5145] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5142] <... futex resumed>) = 0 [pid 5145] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5142] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5142] <... futex resumed>) = 0 [pid 5145] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 79.709117][ T5139] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.713416][ T5141] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.734837][ T5139] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.743227][ T5140] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.747052][ T5144] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5142] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5137] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5143] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... mmap resumed>) = 0x7f9608197000 [pid 5143] <... futex resumed>) = 0 [pid 5137] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] <... mprotect resumed>) = 0 [pid 5142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5142] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5142] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5142] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5142] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5143] <... mmap resumed>) = 0x7f9608197000 [pid 5137] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5143] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5137] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5142] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5143] <... mprotect resumed>) = 0 [pid 5142] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5139] <... write resumed>) = 53248 [pid 5143] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5137] <... clone3 resumed> => {parent_tid=[5148]}, 88) = 5148 [pid 5143] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5139] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5149 attached [pid 5142] <... clone3 resumed> => {parent_tid=[5149]}, 88) = 5149 [pid 5143] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5140] <... write resumed>) = 53248 [pid 5139] <... futex resumed>) = 0 [pid 5137] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5142] rt_sigprocmask(SIG_SETMASK, [], [pid 5140] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [ 79.761340][ T5141] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.762268][ T5145] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.776977][ T5140] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.778259][ T5144] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.791938][ T5141] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5139] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5148 attached [pid 5142] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5136] exit_group(0 [pid 5142] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] exit_group(0 [pid 5137] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5150 attached [pid 5149] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5148] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5146] <... futex resumed>) = ? [pid 5142] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = ? [pid 5138] <... exit_group resumed>) = ? [pid 5137] <... futex resumed>) = 0 [pid 5136] <... exit_group resumed>) = ? [pid 5150] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5149] <... rseq resumed>) = 0 [pid 5148] <... rseq resumed>) = 0 [pid 5147] <... futex resumed>) = ? [pid 5146] +++ exited with 0 +++ [pid 5142] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... clone3 resumed> => {parent_tid=[5150]}, 88) = 5150 [pid 5137] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5150] <... rseq resumed>) = 0 [pid 5149] set_robust_list(0x7f96081b79a0, 24 [pid 5148] set_robust_list(0x7f96081b79a0, 24 [pid 5139] +++ exited with 0 +++ [pid 5136] +++ exited with 0 +++ [pid 5148] <... set_robust_list resumed>) = 0 [pid 5140] +++ exited with 0 +++ [pid 5148] rt_sigprocmask(SIG_SETMASK, [], [pid 5147] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 5148] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5148] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5150] set_robust_list(0x7f96081b79a0, 24 [pid 5149] <... set_robust_list resumed>) = 0 [pid 5143] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5150] <... set_robust_list resumed>) = 0 [ 79.808161][ T5141] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.812531][ T5145] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.830713][ T5144] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.836997][ T5141] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.845898][ T5141] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.847605][ T5145] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5149] rt_sigprocmask(SIG_SETMASK, [], [pid 5143] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5148] <... open resumed>) = 5 [pid 5141] <... write resumed>) = 53248 [pid 5148] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5141] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5148] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5141] <... futex resumed>) = 0 [pid 5141] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5137] <... futex resumed>) = 0 [pid 5149] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5137] exit_group(0 [pid 5150] rt_sigprocmask(SIG_SETMASK, [], [pid 5149] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5148] <... futex resumed>) = ? [pid 5143] <... futex resumed>) = 0 [pid 5141] <... futex resumed>) = ? [pid 5137] <... exit_group resumed>) = ? [pid 5085] <... restart_syscall resumed>) = 0 [pid 5082] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5148] +++ exited with 0 +++ [pid 5141] +++ exited with 0 +++ [pid 5150] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5143] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] +++ exited with 0 +++ [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5142] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5144] <... write resumed>) = 53248 [pid 5150] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5149] <... open resumed>) = 5 [pid 5145] <... write resumed>) = 53248 [pid 5144] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5150] <... open resumed>) = 5 [pid 5149] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5145] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5144] <... futex resumed>) = 0 [pid 5085] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5137, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5150] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5149] <... futex resumed>) = 0 [pid 5145] <... futex resumed>) = 0 [pid 5144] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... openat resumed>) = 3 [pid 5150] <... futex resumed>) = 1 [pid 5149] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5145] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5150] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... futex resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... restart_syscall resumed>) = 0 [pid 5082] newfstatat(3, "", [pid 5142] exit_group(0 [pid 5143] exit_group(0 [pid 5085] <... openat resumed>) = 3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5150] <... futex resumed>) = ? [pid 5149] <... futex resumed>) = ? [pid 5145] <... futex resumed>) = ? [pid 5144] <... futex resumed>) = ? [pid 5142] <... exit_group resumed>) = ? [pid 5143] <... exit_group resumed>) = ? [pid 5082] getdents64(3, [pid 5150] +++ exited with 0 +++ [pid 5149] +++ exited with 0 +++ [pid 5145] +++ exited with 0 +++ [pid 5144] +++ exited with 0 +++ [pid 5142] +++ exited with 0 +++ [pid 5143] +++ exited with 0 +++ [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] getdents64(3, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 79.854067][ T5144] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.870345][ T5145] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.871780][ T5144] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.881436][ T5145] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.887476][ T5144] hfsplus: request for non-existent node 16777216 in B*Tree [ 79.897237][ T5145] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5085] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(3, "", [pid 5082] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] getdents64(3, [pid 5082] unlink("./3/binderfs" [pid 5085] unlink("./3/binderfs" [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... unlink resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5084] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5083] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] newfstatat(3, "", [pid 5081] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] unlink("./3/binderfs" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5084] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5082] <... umount2 resumed>) = 0 [pid 5081] newfstatat(3, "", [pid 5082] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] getdents64(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./3/file1", [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5082] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./3/binderfs", [pid 5085] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] unlink("./3/binderfs" [pid 5082] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5081] unlink("./3/binderfs" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 4 [pid 5081] <... unlink resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./3/file1", [pid 5082] newfstatat(4, "", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(4, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] close(4 [pid 5085] <... openat resumed>) = 4 [pid 5082] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5082] rmdir("./3/file1" [pid 5084] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./3/file1") = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5082] getdents64(3, [pid 5085] getdents64(3, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] newfstatat(AT_FDCWD, "./3/file1", [pid 5083] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] close(3 [pid 5085] close(3 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... close resumed>) = 0 [pid 5081] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... close resumed>) = 0 [pid 5084] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./3/file1", [pid 5082] rmdir("./3" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] rmdir("./3" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./3/file1", [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] mkdir("./4", 0777 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] mkdir("./4", 0777 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5085] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] newfstatat(4, "", [pid 5081] umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 4 [pid 5081] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] newfstatat(4, "", [pid 5081] <... openat resumed>) = 4 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] getdents64(4, [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] newfstatat(4, "", [pid 5085] <... openat resumed>) = 3 [pid 5083] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5083] getdents64(4, [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5081] getdents64(4, [pid 5083] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] rmdir("./3/file1" [pid 5081] close(4 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./3/file1" [pid 5084] getdents64(4, [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] getdents64(3, [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5084] close(4 [pid 5083] close(3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./3" [pid 5084] rmdir("./3/file1") = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5081] getdents64(3, [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] mkdir("./4", 0777 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5083] <... mkdir resumed>) = 0 [pid 5081] close(3 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./3" [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./3" [pid 5084] <... rmdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 5084] mkdir("./4", 0777 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] mkdir("./4", 0777 [pid 5084] <... mkdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] <... ioctl resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5082] close(3 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] <... openat resumed>) = 3 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5152 attached ./strace-static-x86_64: Process 5151 attached [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5151 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5152] set_robust_list(0x5555939db6a0, 24 [pid 5151] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5152] <... set_robust_list resumed>) = 0 [pid 5151] chdir("./4" [pid 5152] chdir("./4" [pid 5151] <... chdir resumed>) = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5152 [pid 5151] <... prctl resumed>) = 0 [pid 5152] <... chdir resumed>) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5152] setpgid(0, 0) = 0 [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5151] <... openat resumed>) = 3 [pid 5152] <... openat resumed>) = 3 [pid 5151] write(3, "1000", 4 [pid 5152] write(3, "1000", 4 [pid 5151] <... write resumed>) = 4 [pid 5151] close(3 [pid 5152] <... write resumed>) = 4 [pid 5151] <... close resumed>) = 0 [pid 5152] close(3 [pid 5151] symlink("/dev/binderfs", "./binderfs" [pid 5152] <... close resumed>) = 0 [pid 5151] <... symlink resumed>) = 0 [pid 5152] symlink("/dev/binderfs", "./binderfs" [pid 5151] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5152] <... symlink resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5152] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5151] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5152] <... futex resumed>) = 0 [pid 5151] <... mmap resumed>) = 0x7f96081b8000 [pid 5151] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5152] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5152] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5151] <... mprotect resumed>) = 0 [pid 5152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5151] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5152] <... mmap resumed>) = 0x7f96081b8000 [pid 5152] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5153 attached [pid 5152] <... mprotect resumed>) = 0 [pid 5153] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5151] <... clone3 resumed> => {parent_tid=[5153]}, 88) = 5153 [pid 5153] set_robust_list(0x7f96081d89a0, 24 [pid 5152] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5151] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] close(3 [pid 5153] <... set_robust_list resumed>) = 0 [pid 5152] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5153] rt_sigprocmask(SIG_SETMASK, [], [pid 5152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5151] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5154 attached [pid 5153] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5084] close(3 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] close(3 [pid 5154] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5153] memfd_create("syzkaller", 0 [pid 5154] <... rseq resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5152] <... clone3 resumed> => {parent_tid=[5154]}, 88) = 5154 [pid 5154] set_robust_list(0x7f96081d89a0, 24 [pid 5153] <... memfd_create resumed>) = 3 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5154] <... set_robust_list resumed>) = 0 [pid 5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], [pid 5154] rt_sigprocmask(SIG_SETMASK, [], [pid 5153] <... mmap resumed>) = 0x7f95ffc00000 [pid 5152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5151] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 5155 attached [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5154] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5152] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5156 [pid 5155] set_robust_list(0x5555939db6a0, 24 [pid 5152] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5156 attached [pid 5156] set_robust_list(0x5555939db6a0, 24 [pid 5155] <... set_robust_list resumed>) = 0 [pid 5154] memfd_create("syzkaller", 0 [pid 5156] <... set_robust_list resumed>) = 0 [pid 5152] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] <... memfd_create resumed>) = 3 [pid 5156] chdir("./4" [pid 5155] chdir("./4" [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5155 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5157 [pid 5154] <... mmap resumed>) = 0x7f95ffc00000 [pid 5155] <... chdir resumed>) = 0 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5157 attached [pid 5155] setpgid(0, 0 [pid 5157] set_robust_list(0x5555939db6a0, 24 [pid 5155] <... setpgid resumed>) = 0 [pid 5157] <... set_robust_list resumed>) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5157] chdir("./4" [pid 5155] <... openat resumed>) = 3 [pid 5157] <... chdir resumed>) = 0 [pid 5156] <... chdir resumed>) = 0 [pid 5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5155] write(3, "1000", 4 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5157] setpgid(0, 0 [pid 5155] <... write resumed>) = 4 [pid 5157] <... setpgid resumed>) = 0 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5155] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] <... openat resumed>) = 3 [pid 5156] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5155] <... futex resumed>) = 0 [pid 5157] write(3, "1000", 4 [pid 5155] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5157] <... write resumed>) = 4 [pid 5156] <... prctl resumed>) = 0 [pid 5155] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5157] close(3 [pid 5156] setpgid(0, 0 [pid 5155] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5157] <... close resumed>) = 0 [pid 5156] <... setpgid resumed>) = 0 [pid 5155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs" [pid 5155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5157] <... symlink resumed>) = 0 [pid 5156] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5155] <... mmap resumed>) = 0x7f96081b8000 [pid 5157] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5156] <... openat resumed>) = 3 [pid 5155] <... mprotect resumed>) = 0 [pid 5157] <... futex resumed>) = 0 [pid 5156] write(3, "1000", 4 [pid 5155] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5157] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5156] <... write resumed>) = 4 [pid 5155] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5157] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5156] close(3 [pid 5155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5153] <... write resumed>) = 524288 ./strace-static-x86_64: Process 5158 attached [pid 5157] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5156] <... close resumed>) = 0 [pid 5153] munmap(0x7f95ffc00000, 138412032 [pid 5156] symlink("/dev/binderfs", "./binderfs" [pid 5155] <... clone3 resumed> => {parent_tid=[5158]}, 88) = 5158 [pid 5158] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5155] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] <... rseq resumed>) = 0 [pid 5156] <... symlink resumed>) = 0 [pid 5154] <... write resumed>) = 524288 [pid 5153] <... munmap resumed>) = 0 [pid 5154] munmap(0x7f95ffc00000, 138412032 [pid 5153] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5158] set_robust_list(0x7f96081d89a0, 24 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5155] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5158] <... set_robust_list resumed>) = 0 [pid 5157] <... mmap resumed>) = 0x7f96081b8000 [pid 5155] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5155] <... futex resumed>) = 0 [pid 5153] <... openat resumed>) = 4 [pid 5158] memfd_create("syzkaller", 0 [pid 5157] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5156] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5154] <... munmap resumed>) = 0 [pid 5153] ioctl(4, LOOP_SET_FD, 3 [pid 5158] <... memfd_create resumed>) = 3 [pid 5157] <... mprotect resumed>) = 0 [pid 5156] <... futex resumed>) = 0 [pid 5154] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5157] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5156] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5154] <... openat resumed>) = 4 [pid 5153] <... ioctl resumed>) = 0 [pid 5158] <... mmap resumed>) = 0x7f95ffc00000 [pid 5157] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5156] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5153] close(3 [pid 5157] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5154] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5159 attached [pid 5158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5156] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5154] <... ioctl resumed>) = 0 [pid 5153] <... close resumed>) = 0 [pid 5159] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5157] <... clone3 resumed> => {parent_tid=[5159]}, 88) = 5159 [pid 5156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5153] close(4 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5153] <... close resumed>) = 0 [pid 5156] <... mmap resumed>) = 0x7f96081b8000 [pid 5156] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5153] mkdir("./file1", 0777 [pid 5156] <... mprotect resumed>) = 0 [pid 5159] <... rseq resumed>) = 0 [pid 5157] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] set_robust_list(0x7f96081d89a0, 24 [pid 5157] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] <... set_robust_list resumed>) = 0 [pid 5157] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5153] <... mkdir resumed>) = 0 [pid 5159] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5159] memfd_create("syzkaller", 0 [pid 5153] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5159] <... memfd_create resumed>) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5154] close(3 [pid 5159] <... write resumed>) = 524288 [pid 5158] <... write resumed>) = 524288 [pid 5156] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5154] <... close resumed>) = 0 [pid 5159] munmap(0x7f95ffc00000, 138412032 [pid 5154] close(4 [pid 5159] <... munmap resumed>) = 0 [pid 5156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5154] <... close resumed>) = 0 [pid 5153] <... mount resumed>) = 0 [pid 5154] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 5160 attached [pid 5153] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5156] <... clone3 resumed> => {parent_tid=[5160]}, 88) = 5160 [ 80.188472][ T5153] loop1: detected capacity change from 0 to 1024 [ 80.205382][ T5154] loop4: detected capacity change from 0 to 1024 [pid 5154] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5153] <... openat resumed>) = 3 [pid 5160] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5159] <... openat resumed>) = 4 [pid 5156] rt_sigprocmask(SIG_SETMASK, [], [pid 5153] chdir("./file1" [pid 5160] <... rseq resumed>) = 0 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5158] munmap(0x7f95ffc00000, 138412032 [pid 5156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5153] <... chdir resumed>) = 0 [pid 5160] set_robust_list(0x7f96081d89a0, 24 [pid 5158] <... munmap resumed>) = 0 [pid 5156] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... set_robust_list resumed>) = 0 [pid 5158] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5156] <... futex resumed>) = 0 [pid 5153] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5158] <... openat resumed>) = 4 [pid 5156] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5153] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5160] rt_sigprocmask(SIG_SETMASK, [], [pid 5158] ioctl(4, LOOP_SET_FD, 3 [pid 5160] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5153] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5154] <... mount resumed>) = 0 [pid 5153] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5151] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5153] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 1 [pid 5153] creat("./file0", 000 [pid 5151] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... creat resumed>) = 4 [pid 5154] <... openat resumed>) = 3 [pid 5153] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] chdir("./file1" [pid 5153] <... futex resumed>) = 1 [pid 5151] <... futex resumed>) = 0 [pid 5154] <... chdir resumed>) = 0 [pid 5153] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5151] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] memfd_create("syzkaller", 0 [pid 5154] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5151] <... futex resumed>) = 0 [pid 5154] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... memfd_create resumed>) = 3 [pid 5154] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5152] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5152] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5160] <... mmap resumed>) = 0x7f95ffc00000 [pid 5159] <... ioctl resumed>) = 0 [pid 5158] <... ioctl resumed>) = 0 [pid 5154] creat("./file0", 000 [pid 5159] close(3 [pid 5158] close(3 [pid 5154] <... creat resumed>) = 4 [pid 5158] <... close resumed>) = 0 [pid 5159] <... close resumed>) = 0 [pid 5158] close(4 [pid 5159] close(4) = 0 [pid 5159] mkdir("./file1", 0777 [pid 5158] <... close resumed>) = 0 [pid 5154] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... mkdir resumed>) = 0 [ 80.252213][ T5159] loop0: detected capacity change from 0 to 1024 [ 80.261205][ T5158] loop2: detected capacity change from 0 to 1024 [ 80.277808][ T5153] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5159] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5154] <... futex resumed>) = 1 [pid 5152] <... futex resumed>) = 0 [pid 5154] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5152] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] mkdir("./file1", 0777 [pid 5154] <... futex resumed>) = 0 [pid 5152] <... futex resumed>) = 1 [pid 5154] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5152] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5158] <... mkdir resumed>) = 0 [pid 5158] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] <... write resumed>) = 524288 [pid 5151] <... futex resumed>) = 0 [pid 5151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5158] <... mount resumed>) = 0 [pid 5152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5151] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5152] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] <... mprotect resumed>) = 0 [pid 5152] <... futex resumed>) = 0 [pid 5160] munmap(0x7f95ffc00000, 138412032 [pid 5158] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5151] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5159] <... mount resumed>) = 0 [pid 5152] <... mmap resumed>) = 0x7f9608197000 [pid 5151] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5160] <... munmap resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5151] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5160] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5159] <... openat resumed>) = 3 [pid 5158] <... openat resumed>) = 3 [pid 5152] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5159] chdir("./file1" [pid 5151] <... clone3 resumed> => {parent_tid=[5161]}, 88) = 5161 [pid 5160] <... openat resumed>) = 4 [pid 5159] <... chdir resumed>) = 0 [pid 5158] chdir("./file1" [pid 5152] <... mprotect resumed>) = 0 [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5151] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5158] <... chdir resumed>) = 0 [pid 5152] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5161 attached [pid 5160] ioctl(4, LOOP_SET_FD, 3 [ 80.305173][ T5153] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.314882][ T5153] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.330768][ T5154] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5159] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5152] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5151] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5159] creat("./file0", 000 [pid 5157] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5151] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... creat resumed>) = 4 [pid 5157] <... futex resumed>) = 0 [pid 5151] <... futex resumed>) = 0 [pid 5157] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5161] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5152] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5158] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5161] set_robust_list(0x7f96081b79a0, 24 [pid 5159] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... set_robust_list resumed>) = 0 [pid 5158] <... futex resumed>) = 1 [pid 5152] <... clone3 resumed> => {parent_tid=[5162]}, 88) = 5162 [pid 5159] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5162 attached [pid 5161] rt_sigprocmask(SIG_SETMASK, [], [pid 5159] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5158] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = 0 [pid 5152] rt_sigprocmask(SIG_SETMASK, [], [pid 5162] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5161] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5152] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5162] <... rseq resumed>) = 0 [pid 5161] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5152] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5162] set_robust_list(0x7f96081b79a0, 24 [pid 5155] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5158] <... futex resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5162] <... set_robust_list resumed>) = 0 [pid 5160] <... ioctl resumed>) = 0 [pid 5158] creat("./file0", 000 [pid 5155] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5152] <... futex resumed>) = 0 [pid 5162] rt_sigprocmask(SIG_SETMASK, [], [pid 5160] close(3 [pid 5152] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5162] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5160] <... close resumed>) = 0 [ 80.369522][ T5153] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.370686][ T5160] loop3: detected capacity change from 0 to 1024 [ 80.381837][ T5154] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.396154][ T5154] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.412506][ T5159] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5162] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5160] close(4 [pid 5158] <... creat resumed>) = 4 [pid 5160] <... close resumed>) = 0 [pid 5158] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5155] <... futex resumed>) = 0 [pid 5158] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5155] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] mkdir("./file1", 0777 [pid 5155] <... futex resumed>) = 0 [pid 5160] <... mkdir resumed>) = 0 [pid 5155] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5151] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5160] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5157] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5157] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5157] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5157] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5160] <... mount resumed>) = 0 [ 80.430726][ T5153] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.440635][ T5158] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.448890][ T5154] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.468219][ T5153] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5160] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5157] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5152] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5157] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5163]}, 88) = 5163 [pid 5157] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5157] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5163 attached [pid 5162] <... open resumed>) = 5 [pid 5160] <... openat resumed>) = 3 [pid 5163] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5162] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] chdir("./file1" [pid 5155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5162] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5155] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5161] <... open resumed>) = 5 [pid 5163] <... rseq resumed>) = 0 [pid 5161] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... futex resumed>) = 0 [pid 5160] <... chdir resumed>) = 0 [pid 5161] <... futex resumed>) = 0 [ 80.471287][ T5159] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.482471][ T5158] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.504031][ T5154] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.517000][ T5159] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5163] set_robust_list(0x7f96081b79a0, 24 [pid 5162] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5161] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5160] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5153] <... write resumed>) = 53248 [pid 5163] <... set_robust_list resumed>) = 0 [pid 5160] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5155] <... mmap resumed>) = 0x7f9608197000 [pid 5153] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5160] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] <... futex resumed>) = 0 [pid 5160] <... futex resumed>) = 1 [pid 5160] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5153] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] <... futex resumed>) = 0 [pid 5163] rt_sigprocmask(SIG_SETMASK, [], [pid 5156] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5160] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = 1 [pid 5163] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5155] <... mprotect resumed>) = 0 [pid 5163] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5155] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5151] exit_group(0 [pid 5155] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5151] <... exit_group resumed>) = ? [pid 5155] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5164 attached [pid 5161] <... futex resumed>) = ? [pid 5160] creat("./file0", 000 [pid 5156] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5153] <... futex resumed>) = ? [pid 5155] <... clone3 resumed> => {parent_tid=[5164]}, 88) = 5164 [pid 5155] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5160] <... creat resumed>) = 4 [pid 5155] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5153] +++ exited with 0 +++ [pid 5155] <... futex resumed>) = 0 [pid 5155] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5164] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5161] +++ exited with 0 +++ [pid 5160] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... write resumed>) = 53248 [pid 5151] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5164] <... rseq resumed>) = 0 [pid 5160] <... futex resumed>) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5164] set_robust_list(0x7f96081b79a0, 24 [pid 5160] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 80.542948][ T5159] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.544708][ T5158] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.560330][ T5159] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.565504][ T5154] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.582945][ T5159] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5156] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... set_robust_list resumed>) = 0 [pid 5163] <... open resumed>) = 5 [pid 5159] <... futex resumed>) = 0 [pid 5156] <... futex resumed>) = 0 [pid 5154] <... write resumed>) = 53248 [pid 5082] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5164] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./4/binderfs") = 0 [pid 5082] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5154] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5163] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5157] exit_group(0) = ? [pid 5152] exit_group(0 [pid 5164] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5154] <... futex resumed>) = ? [pid 5152] <... exit_group resumed>) = ? [pid 5159] <... futex resumed>) = ? [pid 5163] <... futex resumed>) = ? [pid 5162] <... futex resumed>) = ? [pid 5154] +++ exited with 0 +++ [pid 5162] +++ exited with 0 +++ [pid 5163] +++ exited with 0 +++ [pid 5159] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ [pid 5152] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [ 80.606780][ T5158] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.610071][ T5160] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.623685][ T5160] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.623884][ T5158] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.631425][ T5160] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5082] <... umount2 resumed>) = 0 [pid 5085] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] newfstatat(3, "", [pid 5081] <... openat resumed>) = 3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] newfstatat(3, "", [pid 5085] getdents64(3, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] getdents64(3, [pid 5085] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5085] unlink("./4/binderfs" [pid 5082] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] unlink("./4/binderfs" [pid 5085] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... unlink resumed>) = 0 [pid 5156] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5156] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5156] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./4/file1", [pid 5085] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] newfstatat(AT_FDCWD, "./4/file1", [pid 5156] <... mmap resumed>) = 0x7f9608197000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5156] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5160] <... write resumed>) = 53248 [pid 5160] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... mprotect resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(4, "", [pid 5085] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5082] getdents64(4, [pid 5160] <... futex resumed>) = 0 [pid 5160] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5156] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] newfstatat(4, "", [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5085] getdents64(4, [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] close(4 [pid 5085] getdents64(4, [pid 5082] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] rmdir("./4/file1" [pid 5085] close(4 [pid 5082] <... rmdir resumed>) = 0 [pid 5156] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5156] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... close resumed>) = 0 [pid 5082] getdents64(3, [pid 5156] <... clone3 resumed> => {parent_tid=[5165]}, 88) = 5165 [pid 5085] rmdir("./4/file1"./strace-static-x86_64: Process 5165 attached [pid 5164] <... open resumed>) = 5 [pid 5156] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... rmdir resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5165] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5164] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] close(3 [pid 5165] <... rseq resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5158] <... write resumed>) = 53248 [pid 5156] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5158] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5156] <... futex resumed>) = 0 [pid 5164] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] getdents64(3, [pid 5082] rmdir("./4" [pid 5165] set_robust_list(0x7f96081b79a0, 24 [pid 5158] <... futex resumed>) = 0 [ 80.659533][ T5160] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.670251][ T5160] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.680075][ T5158] hfsplus: request for non-existent node 16777216 in B*Tree [ 80.680438][ T5160] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5156] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5165] <... set_robust_list resumed>) = 0 [pid 5158] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5155] exit_group(0 [pid 5085] close(3 [pid 5082] mkdir("./5", 0777 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5165] rt_sigprocmask(SIG_SETMASK, [], [pid 5164] <... futex resumed>) = ? [pid 5158] <... futex resumed>) = ? [pid 5155] <... exit_group resumed>) = ? [pid 5085] <... close resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./4/file1", [pid 5165] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5164] +++ exited with 0 +++ [pid 5158] +++ exited with 0 +++ [pid 5085] rmdir("./4" [pid 5165] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 5085] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5165] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5156] <... futex resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5156] exit_group(0 [pid 5155] +++ exited with 0 +++ [pid 5081] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5160] <... futex resumed>) = ? [pid 5156] <... exit_group resumed>) = ? [pid 5085] mkdir("./5", 0777 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5165] +++ exited with 0 +++ [pid 5160] +++ exited with 0 +++ [pid 5156] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5082] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... mkdir resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5156, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... restart_syscall resumed>) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5085] <... openat resumed>) = 3 [pid 5081] newfstatat(4, "", [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5084] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] newfstatat(3, "", [pid 5081] getdents64(4, [pid 5084] <... openat resumed>) = 3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] newfstatat(3, "", [pid 5083] getdents64(3, [pid 5081] close(4 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] getdents64(3, [pid 5083] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... close resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./4/binderfs", [pid 5083] unlink("./4/binderfs" [pid 5081] rmdir("./4/file1" [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5084] unlink("./4/binderfs" [pid 5083] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5083] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5083] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] rmdir("./4" [pid 5083] newfstatat(4, "", [pid 5082] close(3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] mkdir("./5", 0777 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5166 attached [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5166] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5166] chdir("./5" [pid 5084] <... umount2 resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5083] getdents64(4, [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5166 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5166] <... chdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5166] setpgid(0, 0) = 0 [pid 5166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5166] write(3, "1000", 4) = 4 [pid 5166] close(3) = 0 [pid 5166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] close(4 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5084] rmdir("./4/file1") = 0 [pid 5166] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5166] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] getdents64(3, [pid 5166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] close(3 [pid 5166] <... mmap resumed>) = 0x7f96081b8000 [pid 5084] <... close resumed>) = 0 [pid 5166] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5084] rmdir("./4" [pid 5166] <... mprotect resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] close(3 [pid 5084] mkdir("./5", 0777 [pid 5083] rmdir("./4/file1" [pid 5085] <... close resumed>) = 0 [pid 5166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5167 attached [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] getdents64(3, [pid 5167] set_robust_list(0x5555939db6a0, 24 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5167 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5167] <... set_robust_list resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] close(3 [pid 5167] chdir("./5" [pid 5166] <... clone3 resumed> => {parent_tid=[5168]}, 88) = 5168 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... close resumed>) = 0 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] rmdir("./4" [pid 5166] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5168 attached [pid 5166] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... rmdir resumed>) = 0 [pid 5168] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5166] <... futex resumed>) = 0 [pid 5168] <... rseq resumed>) = 0 [pid 5166] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5168] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5167] <... chdir resumed>) = 0 [pid 5168] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] mkdir("./5", 0777 [pid 5081] <... ioctl resumed>) = 0 [pid 5168] memfd_create("syzkaller", 0 [pid 5167] <... prctl resumed>) = 0 [pid 5168] <... memfd_create resumed>) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5167] setpgid(0, 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5168] <... mmap resumed>) = 0x7f95ffc00000 [pid 5081] close(3 [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5167] <... setpgid resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5169 attached [pid 5168] <... write resumed>) = 524288 [pid 5167] <... openat resumed>) = 3 [pid 5169] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5168] munmap(0x7f95ffc00000, 138412032 [pid 5167] write(3, "1000", 4 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5169 [pid 5169] chdir("./5" [pid 5167] <... write resumed>) = 4 [pid 5169] <... chdir resumed>) = 0 [pid 5168] <... munmap resumed>) = 0 [pid 5167] close(3 [pid 5084] <... ioctl resumed>) = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] close(3 [pid 5169] <... prctl resumed>) = 0 [pid 5168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5167] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5167] symlink("/dev/binderfs", "./binderfs" [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5169] setpgid(0, 0 [pid 5168] <... openat resumed>) = 4 [pid 5167] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 5170 attached [pid 5167] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5170 [pid 5170] set_robust_list(0x5555939db6a0, 24 [pid 5169] <... setpgid resumed>) = 0 [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 5167] <... futex resumed>) = 0 [pid 5170] <... set_robust_list resumed>) = 0 [pid 5170] chdir("./5") = 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3) = 0 [pid 5170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5170] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5170] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5170] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5167] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5167] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5170] <... mmap resumed>) = 0x7f96081b8000 [pid 5170] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5169] <... openat resumed>) = 3 [pid 5170] <... mprotect resumed>) = 0 [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5171 attached => {parent_tid=[5171]}, 88) = 5171 [pid 5171] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], [pid 5171] <... rseq resumed>) = 0 [pid 5170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5171] set_robust_list(0x7f96081d89a0, 24 [pid 5170] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... set_robust_list resumed>) = 0 [pid 5170] <... futex resumed>) = 0 [pid 5171] rt_sigprocmask(SIG_SETMASK, [], [pid 5170] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5171] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5171] memfd_create("syzkaller", 0) = 3 [pid 5083] close(3 [pid 5169] write(3, "1000", 4 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] <... close resumed>) = 0 [pid 5171] <... mmap resumed>) = 0x7f95ffc00000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5169] <... write resumed>) = 4 [pid 5167] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5169] close(3) = 0 [pid 5167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5172 attached ) = 0 [pid 5167] <... mmap resumed>) = 0x7f96081b8000 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5172 [pid 5172] set_robust_list(0x5555939db6a0, 24 [pid 5167] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5172] <... set_robust_list resumed>) = 0 [pid 5169] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] chdir("./5" [pid 5169] <... futex resumed>) = 0 [pid 5172] <... chdir resumed>) = 0 [pid 5169] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5167] <... mprotect resumed>) = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5169] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5172] <... prctl resumed>) = 0 [pid 5169] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5172] setpgid(0, 0 [pid 5169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] <... setpgid resumed>) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5169] <... mmap resumed>) = 0x7f96081b8000 [pid 5167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5169] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5168] <... ioctl resumed>) = 0 [pid 5168] close(3 [pid 5167] <... clone3 resumed> => {parent_tid=[5173]}, 88) = 5173 [pid 5169] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5173 attached [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5168] <... close resumed>) = 0 [ 80.929630][ T5168] loop1: detected capacity change from 0 to 1024 [pid 5167] rt_sigprocmask(SIG_SETMASK, [], [pid 5173] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5172] <... openat resumed>) = 3 [pid 5169] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5168] close(4 [pid 5167] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5173] <... rseq resumed>) = 0 [pid 5172] write(3, "1000", 4 [pid 5171] <... write resumed>) = 524288 [pid 5169] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5168] <... close resumed>) = 0 [pid 5167] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] set_robust_list(0x7f96081d89a0, 24 [pid 5172] <... write resumed>) = 4 [pid 5171] munmap(0x7f95ffc00000, 138412032 [pid 5169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5168] mkdir("./file1", 0777 [pid 5167] <... futex resumed>) = 0 [pid 5173] <... set_robust_list resumed>) = 0 [pid 5172] close(3 [pid 5167] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5174 attached [pid 5173] rt_sigprocmask(SIG_SETMASK, [], [pid 5172] <... close resumed>) = 0 [pid 5171] <... munmap resumed>) = 0 [pid 5169] <... clone3 resumed> => {parent_tid=[5174]}, 88) = 5174 [pid 5168] <... mkdir resumed>) = 0 [pid 5174] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5173] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs" [pid 5171] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5169] rt_sigprocmask(SIG_SETMASK, [], [pid 5168] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5174] <... rseq resumed>) = 0 [pid 5173] memfd_create("syzkaller", 0 [pid 5172] <... symlink resumed>) = 0 [pid 5171] <... openat resumed>) = 4 [pid 5169] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5173] <... memfd_create resumed>) = 3 [pid 5172] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5169] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] set_robust_list(0x7f96081d89a0, 24 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5172] <... futex resumed>) = 0 [pid 5172] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5172] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5173] <... mmap resumed>) = 0x7f95ffc00000 [pid 5172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5172] <... mmap resumed>) = 0x7f96081b8000 [pid 5174] <... set_robust_list resumed>) = 0 [pid 5174] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5174] memfd_create("syzkaller", 0 [pid 5172] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5174] <... memfd_create resumed>) = 3 [pid 5172] <... mprotect resumed>) = 0 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5172] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5174] <... mmap resumed>) = 0x7f95ffc00000 [pid 5172] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5171] <... ioctl resumed>) = 0 [pid 5168] <... mount resumed>) = 0 [pid 5168] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5168] chdir("./file1"./strace-static-x86_64: Process 5175 attached ) = 0 [pid 5175] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5168] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5175] <... rseq resumed>) = 0 [pid 5175] set_robust_list(0x7f96081d89a0, 24 [pid 5172] <... clone3 resumed> => {parent_tid=[5175]}, 88) = 5175 [pid 5168] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5175] <... set_robust_list resumed>) = 0 [pid 5172] rt_sigprocmask(SIG_SETMASK, [], [pid 5168] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] rt_sigprocmask(SIG_SETMASK, [], [pid 5172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5166] <... futex resumed>) = 0 [pid 5168] <... futex resumed>) = 1 [pid 5175] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5172] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5168] creat("./file0", 000 [pid 5166] <... futex resumed>) = 0 [pid 5172] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5166] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] memfd_create("syzkaller", 0 [pid 5171] close(3 [pid 5168] <... creat resumed>) = 4 [pid 5171] <... close resumed>) = 0 [pid 5171] close(4) = 0 [pid 5171] mkdir("./file1", 0777) = 0 [pid 5168] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5166] <... futex resumed>) = 0 [pid 5168] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5166] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5166] <... futex resumed>) = 0 [pid 5175] <... memfd_create resumed>) = 3 [pid 5174] <... write resumed>) = 524288 [pid 5171] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5168] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5166] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5174] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5175] <... mmap resumed>) = 0x7f95ffc00000 [ 81.005231][ T5171] loop3: detected capacity change from 0 to 1024 [pid 5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5174] ioctl(4, LOOP_SET_FD, 3 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5174] <... ioctl resumed>) = 0 [pid 5175] <... write resumed>) = 524288 [pid 5173] <... write resumed>) = 524288 [pid 5171] <... mount resumed>) = 0 [pid 5171] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5171] chdir("./file1") = 0 [pid 5171] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5171] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5171] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] close(3) = 0 [pid 5174] close(4) = 0 [pid 5173] munmap(0x7f95ffc00000, 138412032 [pid 5175] munmap(0x7f95ffc00000, 138412032 [pid 5174] mkdir("./file1", 0777 [pid 5170] <... futex resumed>) = 0 [pid 5174] <... mkdir resumed>) = 0 [pid 5173] <... munmap resumed>) = 0 [pid 5175] <... munmap resumed>) = 0 [pid 5174] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5173] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5170] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 81.068491][ T5174] loop0: detected capacity change from 0 to 1024 [ 81.077500][ T5168] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.085431][ T5168] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5174] <... mount resumed>) = 0 [pid 5174] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5173] <... openat resumed>) = 4 [pid 5171] <... futex resumed>) = 0 [pid 5170] <... futex resumed>) = 1 [pid 5175] <... openat resumed>) = 4 [pid 5174] <... openat resumed>) = 3 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5171] creat("./file0", 000 [pid 5170] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] ioctl(4, LOOP_SET_FD, 3 [pid 5174] chdir("./file1" [pid 5173] <... ioctl resumed>) = 0 [pid 5171] <... creat resumed>) = 4 [pid 5166] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5173] close(3 [pid 5166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5174] <... chdir resumed>) = 0 [pid 5171] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... mmap resumed>) = 0x7f9608197000 [pid 5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5171] <... futex resumed>) = 1 [pid 5174] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5171] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5174] creat("./file0", 000 [pid 5169] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5174] <... creat resumed>) = 4 [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5174] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5174] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5169] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5166] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5169] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5166] <... mprotect resumed>) = 0 [ 81.115118][ T5168] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.125155][ T5173] loop4: detected capacity change from 0 to 1024 [ 81.126627][ T5168] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.140885][ T5175] loop2: detected capacity change from 0 to 1024 [ 81.150820][ T5174] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5173] <... close resumed>) = 0 [pid 5170] <... futex resumed>) = 0 [pid 5166] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5175] <... ioctl resumed>) = 0 [pid 5173] close(4 [pid 5170] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5173] <... close resumed>) = 0 [pid 5170] <... futex resumed>) = 1 [pid 5166] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5171] <... futex resumed>) = 0 [pid 5171] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 5176 attached [pid 5170] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] mkdir("./file1", 0777 [pid 5166] <... clone3 resumed> => {parent_tid=[5176]}, 88) = 5176 [pid 5176] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5175] close(3 [pid 5173] <... mkdir resumed>) = 0 [pid 5166] rt_sigprocmask(SIG_SETMASK, [], [pid 5176] <... rseq resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5166] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5176] set_robust_list(0x7f96081b79a0, 24 [pid 5175] close(4 [pid 5176] <... set_robust_list resumed>) = 0 [pid 5175] <... close resumed>) = 0 [pid 5176] rt_sigprocmask(SIG_SETMASK, [], [pid 5175] mkdir("./file1", 0777 [pid 5176] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5175] <... mkdir resumed>) = 0 [pid 5166] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5176] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5175] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5173] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5166] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5169] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5169] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5169] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5177]}, 88) = 5177 [ 81.163905][ T5171] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.171256][ T5171] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.185751][ T5168] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.195085][ T5174] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5169] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5170] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5177 attached [pid 5173] <... mount resumed>) = 0 [pid 5170] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5177] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5175] <... mount resumed>) = 0 [pid 5173] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5173] <... openat resumed>) = 3 [pid 5175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5170] <... mmap resumed>) = 0x7f9608197000 [pid 5177] <... rseq resumed>) = 0 [pid 5173] chdir("./file1" [pid 5170] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5177] set_robust_list(0x7f96081b79a0, 24 [pid 5175] <... openat resumed>) = 3 [pid 5169] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5170] <... mprotect resumed>) = 0 [pid 5177] <... set_robust_list resumed>) = 0 [pid 5175] chdir("./file1" [pid 5173] <... chdir resumed>) = 0 [pid 5177] rt_sigprocmask(SIG_SETMASK, [], [pid 5175] <... chdir resumed>) = 0 [pid 5177] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5175] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5177] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5173] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5170] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5175] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5175] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5170] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5166] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5175] <... futex resumed>) = 1 [pid 5170] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5173] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 ./strace-static-x86_64: Process 5178 attached [pid 5176] <... open resumed>) = 5 [pid 5175] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... futex resumed>) = 0 [pid 5168] <... write resumed>) = 53248 [pid 5167] <... futex resumed>) = 0 [pid 5178] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5176] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] <... rseq resumed>) = 0 [pid 5176] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = 0 [pid 5172] <... futex resumed>) = 1 [pid 5170] <... clone3 resumed> => {parent_tid=[5178]}, 88) = 5178 [pid 5178] set_robust_list(0x7f96081b79a0, 24 [pid 5176] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] creat("./file0", 000 [pid 5172] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] <... set_robust_list resumed>) = 0 [pid 5168] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] rt_sigprocmask(SIG_SETMASK, [], [pid 5175] <... creat resumed>) = 4 [pid 5173] <... futex resumed>) = 0 [pid 5170] rt_sigprocmask(SIG_SETMASK, [], [pid 5168] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 1 [pid 5178] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5173] creat("./file0", 000 [pid 5168] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5178] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] <... creat resumed>) = 4 [pid 5170] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5166] exit_group(0 [pid 5176] <... futex resumed>) = ? [pid 5175] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5168] <... futex resumed>) = ? [pid 5166] <... exit_group resumed>) = ? [pid 5178] <... futex resumed>) = 0 [pid 5176] +++ exited with 0 +++ [pid 5175] <... futex resumed>) = 1 [pid 5173] <... futex resumed>) = 1 [pid 5172] <... futex resumed>) = 0 [pid 5170] <... futex resumed>) = 1 [pid 5168] +++ exited with 0 +++ [pid 5167] <... futex resumed>) = 0 [ 81.214009][ T5168] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.225187][ T5174] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.232741][ T5174] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.242794][ T5171] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5178] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5175] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5173] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5172] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5166] +++ exited with 0 +++ [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5172] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5175] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5172] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5166, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5082] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5177] <... open resumed>) = 5 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5177] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] getdents64(3, [pid 5177] <... futex resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5177] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./5/binderfs") = 0 [ 81.272440][ T5171] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.304603][ T5175] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.307115][ T5174] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5178] <... open resumed>) = 5 [pid 5178] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5170] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5167] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5178] <... futex resumed>) = 0 [pid 5167] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5172] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5178] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... umount2 resumed>) = 0 [ 81.314466][ T5173] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.326777][ T5175] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.329016][ T5174] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.338003][ T5175] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.343708][ T5171] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.350564][ T5173] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.364663][ T5175] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./5/file1" [pid 5172] <... futex resumed>) = 0 [pid 5167] <... mmap resumed>) = 0x7f9608197000 [pid 5082] <... rmdir resumed>) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./5") = 0 [pid 5082] mkdir("./6", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5167] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5174] <... write resumed>) = 53248 [pid 5172] <... mmap resumed>) = 0x7f9608197000 [pid 5171] <... write resumed>) = 53248 [pid 5167] <... mprotect resumed>) = 0 [pid 5175] <... write resumed>) = 53248 [pid 5175] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5174] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5174] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5171] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5170] exit_group(0 [pid 5167] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... ioctl resumed>) = 0 [ 81.373377][ T5173] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.380737][ T5171] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.385269][ T5175] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.389176][ T5173] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.405232][ T5175] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.408445][ T5173] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5169] exit_group(0 [pid 5082] close(3 [pid 5178] <... futex resumed>) = ? [pid 5177] <... futex resumed>) = ? [pid 5174] <... futex resumed>) = ? [pid 5172] <... mprotect resumed>) = 0 [pid 5171] <... futex resumed>) = ? [pid 5170] <... exit_group resumed>) = ? [pid 5169] <... exit_group resumed>) = ? [pid 5167] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5178] +++ exited with 0 +++ [pid 5177] +++ exited with 0 +++ [pid 5167] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5171] +++ exited with 0 +++ [pid 5174] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ [pid 5170] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5167] <... clone3 resumed> => {parent_tid=[5179]}, 88) = 5179 [pid 5172] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5167] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] <... close resumed>) = 0 ./strace-static-x86_64: Process 5179 attached [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5172] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5167] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5179] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5179] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5179] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5179] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000./strace-static-x86_64: Process 5180 attached [pid 5173] <... write resumed>) = 53248 [pid 5172] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5167] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5181 attached [pid 5180] set_robust_list(0x5555939db6a0, 24 [pid 5173] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5179] <... open resumed>) = 5 [pid 5181] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5180] <... set_robust_list resumed>) = 0 [pid 5179] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... futex resumed>) = 0 [pid 5172] <... clone3 resumed> => {parent_tid=[5181]}, 88) = 5181 [pid 5084] <... openat resumed>) = 3 [pid 5181] <... rseq resumed>) = 0 [pid 5180] chdir("./6" [pid 5179] <... futex resumed>) = 1 [pid 5173] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] rt_sigprocmask(SIG_SETMASK, [], [pid 5167] <... futex resumed>) = 0 [pid 5084] newfstatat(3, "", [pid 5081] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5181] set_robust_list(0x7f96081b79a0, 24 [pid 5180] <... chdir resumed>) = 0 [pid 5179] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5167] exit_group(0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5180 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5081] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5181] <... set_robust_list resumed>) = 0 [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5179] <... futex resumed>) = ? [pid 5173] <... futex resumed>) = ? [pid 5172] <... futex resumed>) = 0 [pid 5167] <... exit_group resumed>) = ? [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] <... openat resumed>) = 3 [pid 5181] rt_sigprocmask(SIG_SETMASK, [], [pid 5180] <... prctl resumed>) = 0 [pid 5179] +++ exited with 0 +++ [pid 5173] +++ exited with 0 +++ [pid 5172] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] newfstatat(3, "", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5081] getdents64(3, [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] unlink("./5/binderfs" [pid 5081] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5181] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5180] setpgid(0, 0 [pid 5167] +++ exited with 0 +++ [pid 5084] <... unlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5180] <... setpgid resumed>) = 0 [pid 5084] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] unlink("./5/binderfs" [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... unlink resumed>) = 0 [pid 5181] <... open resumed>) = 5 [pid 5180] <... openat resumed>) = 3 [pid 5085] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... umount2 resumed>) = 0 [ 81.428210][ T5173] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5181] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] write(3, "1000", 4 [pid 5085] <... openat resumed>) = 3 [pid 5084] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5181] <... futex resumed>) = 1 [pid 5180] <... write resumed>) = 4 [pid 5172] <... futex resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5181] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] close(3 [pid 5172] exit_group(0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] newfstatat(AT_FDCWD, "./5/file1", [pid 5181] <... futex resumed>) = ? [pid 5180] <... close resumed>) = 0 [pid 5175] <... futex resumed>) = ? [pid 5172] <... exit_group resumed>) = ? [pid 5085] getdents64(3, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5181] +++ exited with 0 +++ [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5175] +++ exited with 0 +++ [pid 5172] +++ exited with 0 +++ [pid 5180] symlink("/dev/binderfs", "./binderfs" [pid 5085] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5084] <... openat resumed>) = 4 [pid 5081] newfstatat(AT_FDCWD, "./5/file1", [pid 5180] <... symlink resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] newfstatat(4, "", [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5180] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] unlink("./5/binderfs" [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5180] <... futex resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5084] getdents64(4, [pid 5083] <... restart_syscall resumed>) = 0 [pid 5081] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5180] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5085] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] getdents64(4, [pid 5180] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] close(4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 4 [pid 5084] <... close resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] rmdir("./5/file1" [pid 5083] <... openat resumed>) = 3 [pid 5081] newfstatat(4, "", [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] newfstatat(3, "", [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5180] <... mmap resumed>) = 0x7f96081b8000 [pid 5084] getdents64(3, [pid 5083] getdents64(3, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5180] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] getdents64(4, [pid 5180] <... mprotect resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] close(3 [pid 5083] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] newfstatat(AT_FDCWD, "./5/binderfs", [pid 5180] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5084] <... close resumed>) = 0 [pid 5083] unlink("./5/binderfs" [pid 5081] getdents64(4, [pid 5085] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] rmdir("./5" [pid 5083] <... unlink resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5182 attached [pid 5180] <... clone3 resumed> => {parent_tid=[5182]}, 88) = 5182 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... rmdir resumed>) = 0 [pid 5083] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] close(4 [pid 5182] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5180] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] newfstatat(AT_FDCWD, "./5/file1", [pid 5182] <... rseq resumed>) = 0 [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] <... close resumed>) = 0 [pid 5182] set_robust_list(0x7f96081d89a0, 24 [pid 5180] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] mkdir("./6", 0777 [pid 5081] rmdir("./5/file1" [pid 5182] <... set_robust_list resumed>) = 0 [pid 5180] <... futex resumed>) = 0 [pid 5085] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5182] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5182] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5081] getdents64(3, [pid 5182] memfd_create("syzkaller", 0 [pid 5085] newfstatat(4, "", [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5180] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] close(3 [pid 5085] getdents64(4, [pid 5081] <... close resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5182] <... memfd_create resumed>) = 3 [pid 5085] getdents64(4, [pid 5081] rmdir("./5" [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... rmdir resumed>) = 0 [pid 5182] <... mmap resumed>) = 0x7f95ffc00000 [pid 5085] close(4 [pid 5081] mkdir("./6", 0777 [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5085] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5085] rmdir("./5/file1") = 0 [pid 5083] newfstatat(AT_FDCWD, "./5/file1", [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5084] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 3 [pid 5085] getdents64(3, [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] close(3) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5085] rmdir("./5" [pid 5083] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] <... rmdir resumed>) = 0 [pid 5083] newfstatat(4, "", [pid 5085] mkdir("./6", 0777 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5083] close(4 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./5/file1") = 0 [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5182] <... write resumed>) = 524288 [pid 5083] rmdir("./5" [pid 5182] munmap(0x7f95ffc00000, 138412032 [pid 5083] <... rmdir resumed>) = 0 [pid 5182] <... munmap resumed>) = 0 [pid 5083] mkdir("./6", 0777) = 0 [pid 5182] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5182] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5182] <... ioctl resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5182] close(3) = 0 [pid 5182] close(4) = 0 [pid 5182] mkdir("./file1", 0777) = 0 [pid 5085] close(3 [pid 5084] <... ioctl resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5182] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] close(3) = 0 ./strace-static-x86_64: Process 5183 attached [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5183] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5081] close(3 [pid 5183] chdir("./6") = 0 [pid 5081] <... close resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5184 [ 81.579671][ T5182] loop1: detected capacity change from 0 to 1024 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5184 attached [pid 5184] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5184] chdir("./6") = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5184] setpgid(0, 0) = 0 [pid 5182] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5184] <... openat resumed>) = 3 [pid 5182] <... openat resumed>) = 3 [pid 5182] chdir("./file1" [pid 5183] <... prctl resumed>) = 0 [pid 5182] <... chdir resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5183 [pid 5083] <... ioctl resumed>) = 0 [pid 5183] setpgid(0, 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5185 [pid 5183] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5185 attached [pid 5184] write(3, "1000", 4 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] set_robust_list(0x5555939db6a0, 24 [pid 5184] <... write resumed>) = 4 [pid 5183] <... openat resumed>) = 3 [pid 5185] <... set_robust_list resumed>) = 0 [pid 5184] close(3 [pid 5183] write(3, "1000", 4 [pid 5182] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5183] <... write resumed>) = 4 [pid 5185] chdir("./6" [pid 5184] <... close resumed>) = 0 [pid 5183] close(3 [pid 5182] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] close(3 [pid 5185] <... chdir resumed>) = 0 [pid 5184] symlink("/dev/binderfs", "./binderfs" [pid 5183] <... close resumed>) = 0 [pid 5182] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5184] <... symlink resumed>) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5182] <... futex resumed>) = 1 [pid 5180] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5185] <... prctl resumed>) = 0 [pid 5184] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5180] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5186 attached [pid 5185] setpgid(0, 0 [pid 5184] <... futex resumed>) = 0 [pid 5183] <... symlink resumed>) = 0 [pid 5182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5180] <... futex resumed>) = 0 [pid 5186] set_robust_list(0x5555939db6a0, 24 [pid 5185] <... setpgid resumed>) = 0 [pid 5184] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5183] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] creat("./file0", 000 [pid 5180] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5186 [pid 5186] <... set_robust_list resumed>) = 0 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5182] <... creat resumed>) = 4 [pid 5185] write(3, "1000", 4 [pid 5184] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5182] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] <... write resumed>) = 4 [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5182] <... futex resumed>) = 0 [pid 5185] close(3 [pid 5184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5182] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5185] <... close resumed>) = 0 [pid 5184] <... mmap resumed>) = 0x7f96081b8000 [pid 5180] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5186] chdir("./6" [pid 5185] symlink("/dev/binderfs", "./binderfs" [pid 5184] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5183] <... futex resumed>) = 0 [pid 5180] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... chdir resumed>) = 0 [pid 5185] <... symlink resumed>) = 0 [pid 5183] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5180] <... futex resumed>) = 1 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5183] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5180] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5186] <... prctl resumed>) = 0 [pid 5183] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5186] setpgid(0, 0 [pid 5184] <... mprotect resumed>) = 0 [pid 5183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5182] <... futex resumed>) = 0 [pid 5186] <... setpgid resumed>) = 0 [pid 5185] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5182] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] <... futex resumed>) = 0 [pid 5184] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5183] <... mmap resumed>) = 0x7f96081b8000 [pid 5186] <... openat resumed>) = 3 [pid 5185] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5183] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5186] write(3, "1000", 4 [pid 5185] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5183] <... mprotect resumed>) = 0 [pid 5186] <... write resumed>) = 4 [pid 5186] close(3) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5186] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5186] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5186] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5183] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5183] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5183] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5186] <... mmap resumed>) = 0x7f96081b8000 [pid 5185] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 5187 attached [pid 5186] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5183] <... clone3 resumed> => {parent_tid=[5187]}, 88) = 5187 [pid 5186] <... mprotect resumed>) = 0 [pid 5183] rt_sigprocmask(SIG_SETMASK, [], [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5183] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5188 attached [pid 5187] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5186] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5184] <... clone3 resumed> => {parent_tid=[5188]}, 88) = 5188 [pid 5183] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5189 attached [pid 5186] <... clone3 resumed> => {parent_tid=[5189]}, 88) = 5189 [pid 5189] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], [pid 5189] <... rseq resumed>) = 0 [pid 5188] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5187] <... rseq resumed>) = 0 [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] <... mmap resumed>) = 0x7f96081b8000 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], [pid 5189] set_robust_list(0x7f96081d89a0, 24 [pid 5186] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] <... set_robust_list resumed>) = 0 [pid 5186] <... futex resumed>) = 0 [pid 5189] rt_sigprocmask(SIG_SETMASK, [], [pid 5188] <... rseq resumed>) = 0 [pid 5186] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5185] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5187] set_robust_list(0x7f96081d89a0, 24 [pid 5189] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5189] memfd_create("syzkaller", 0 [pid 5188] set_robust_list(0x7f96081d89a0, 24 [pid 5187] <... set_robust_list resumed>) = 0 [pid 5185] <... mprotect resumed>) = 0 [pid 5184] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5189] <... memfd_create resumed>) = 3 [pid 5180] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5180] <... futex resumed>) = 0 [pid 5189] <... mmap resumed>) = 0x7f95ffc00000 [pid 5180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5180] <... mmap resumed>) = 0x7f9608197000 [pid 5184] <... futex resumed>) = 0 [pid 5180] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5188] <... set_robust_list resumed>) = 0 [pid 5187] rt_sigprocmask(SIG_SETMASK, [], [pid 5185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5184] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5180] <... mprotect resumed>) = 0 [pid 5188] rt_sigprocmask(SIG_SETMASK, [], [pid 5187] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5180] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5188] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5187] memfd_create("syzkaller", 0 [pid 5185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5180] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5190 attached [ 81.698009][ T5182] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.712001][ T5182] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.720494][ T5182] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.738774][ T5182] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5188] memfd_create("syzkaller", 0 [pid 5187] <... memfd_create resumed>) = 3 [pid 5180] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5191 attached [pid 5190] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5189] <... write resumed>) = 524288 [pid 5188] <... memfd_create resumed>) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5185] <... clone3 resumed> => {parent_tid=[5190]}, 88) = 5190 [pid 5191] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5190] <... rseq resumed>) = 0 [pid 5188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5187] <... mmap resumed>) = 0x7f95ffc00000 [pid 5191] <... rseq resumed>) = 0 [pid 5188] <... mmap resumed>) = 0x7f95ffc00000 [pid 5180] <... clone3 resumed> => {parent_tid=[5191]}, 88) = 5191 [pid 5191] set_robust_list(0x7f96081b79a0, 24 [pid 5180] rt_sigprocmask(SIG_SETMASK, [], [pid 5191] <... set_robust_list resumed>) = 0 [pid 5180] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5191] rt_sigprocmask(SIG_SETMASK, [], [pid 5180] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5180] <... futex resumed>) = 0 [pid 5191] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5180] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5189] munmap(0x7f95ffc00000, 138412032 [pid 5191] <... open resumed>) = 5 [pid 5190] set_robust_list(0x7f96081d89a0, 24 [pid 5188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5187] <... write resumed>) = 524288 [pid 5191] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... set_robust_list resumed>) = 0 [pid 5189] <... munmap resumed>) = 0 [pid 5185] rt_sigprocmask(SIG_SETMASK, [], [pid 5182] <... write resumed>) = 53248 [pid 5191] <... futex resumed>) = 1 [pid 5190] rt_sigprocmask(SIG_SETMASK, [], [pid 5185] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5182] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5180] <... futex resumed>) = 0 [pid 5191] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5189] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5185] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5182] <... futex resumed>) = 0 [pid 5180] exit_group(0 [pid 5191] <... futex resumed>) = ? [pid 5190] memfd_create("syzkaller", 0 [pid 5189] <... openat resumed>) = 4 [pid 5185] <... futex resumed>) = 0 [pid 5180] <... exit_group resumed>) = ? [pid 5191] +++ exited with 0 +++ [pid 5190] <... memfd_create resumed>) = 3 [pid 5189] ioctl(4, LOOP_SET_FD, 3 [pid 5188] <... write resumed>) = 524288 [pid 5187] munmap(0x7f95ffc00000, 138412032 [pid 5185] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5182] +++ exited with 0 +++ [pid 5190] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5189] <... ioctl resumed>) = 0 [pid 5188] munmap(0x7f95ffc00000, 138412032 [pid 5187] <... munmap resumed>) = 0 [pid 5180] +++ exited with 0 +++ [pid 5190] <... mmap resumed>) = 0x7f95ffc00000 [pid 5190] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5189] close(3 [pid 5188] <... munmap resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5189] <... close resumed>) = 0 [pid 5188] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 81.754263][ T5182] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.773229][ T5182] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.794305][ T5189] loop2: detected capacity change from 0 to 1024 [pid 5189] close(4) = 0 [pid 5188] <... openat resumed>) = 4 [pid 5189] mkdir("./file1", 0777 [pid 5082] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5189] <... mkdir resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5188] ioctl(4, LOOP_SET_FD, 3 [pid 5189] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./6/binderfs") = 0 [pid 5082] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5187] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5187] close(3) = 0 [pid 5187] close(4) = 0 [pid 5187] mkdir("./file1", 0777) = 0 [pid 5188] <... ioctl resumed>) = 0 [pid 5188] close(3 [pid 5082] <... umount2 resumed>) = 0 [pid 5189] <... mount resumed>) = 0 [pid 5189] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5188] <... close resumed>) = 0 [pid 5188] close(4 [pid 5189] <... openat resumed>) = 3 [pid 5188] <... close resumed>) = 0 [pid 5187] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5189] chdir("./file1" [pid 5188] mkdir("./file1", 0777 [pid 5189] <... chdir resumed>) = 0 [pid 5190] <... write resumed>) = 524288 [pid 5189] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5188] <... mkdir resumed>) = 0 [pid 5082] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5189] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./6/file1", [pid 5190] munmap(0x7f95ffc00000, 138412032 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5190] <... munmap resumed>) = 0 [pid 5082] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5189] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] <... futex resumed>) = 0 [pid 5189] <... futex resumed>) = 1 [pid 5186] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 4 [ 81.811016][ T5188] loop3: detected capacity change from 0 to 1024 [ 81.817440][ T5187] loop4: detected capacity change from 0 to 1024 [pid 5190] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5189] creat("./file0", 000 [pid 5186] <... futex resumed>) = 0 [pid 5082] newfstatat(4, "", [pid 5186] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5190] <... openat resumed>) = 4 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5190] ioctl(4, LOOP_SET_FD, 3 [pid 5082] getdents64(4, [pid 5189] <... creat resumed>) = 4 [pid 5189] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5188] <... mount resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5188] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5082] close(4) = 0 [pid 5082] rmdir("./6/file1") = 0 [pid 5082] getdents64(3, [pid 5189] <... futex resumed>) = 1 [pid 5188] <... openat resumed>) = 3 [pid 5186] <... futex resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5186] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] close(3 [pid 5186] <... futex resumed>) = 0 [pid 5189] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5082] <... close resumed>) = 0 [pid 5186] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5187] <... mount resumed>) = 0 [pid 5082] rmdir("./6" [pid 5187] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5082] <... rmdir resumed>) = 0 [pid 5187] chdir("./file1") = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5187] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] mkdir("./7", 0777 [pid 5190] <... ioctl resumed>) = 0 [pid 5187] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5190] close(3 [pid 5187] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5190] <... close resumed>) = 0 [pid 5188] chdir("./file1" [pid 5187] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5183] <... futex resumed>) = 0 [pid 5188] <... chdir resumed>) = 0 [ 81.852817][ T5190] loop0: detected capacity change from 0 to 1024 [ 81.879942][ T5189] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.890105][ T5189] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5187] creat("./file0", 000 [pid 5183] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... openat resumed>) = 3 [pid 5190] close(4 [pid 5188] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5187] <... creat resumed>) = 4 [pid 5188] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5188] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... close resumed>) = 0 [pid 5188] <... futex resumed>) = 1 [pid 5187] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... futex resumed>) = 0 [pid 5188] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5187] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = 0 [pid 5183] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5190] mkdir("./file1", 0777 [pid 5187] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5183] <... futex resumed>) = 0 [pid 5184] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... mkdir resumed>) = 0 [pid 5188] <... futex resumed>) = 0 [pid 5184] <... futex resumed>) = 1 [pid 5183] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5188] creat("./file0", 000 [pid 5184] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5190] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5188] <... creat resumed>) = 4 [pid 5186] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5188] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5188] <... futex resumed>) = 1 [pid 5186] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5184] <... futex resumed>) = 0 [pid 5188] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5186] <... mmap resumed>) = 0x7f9608197000 [pid 5184] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5184] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 81.899285][ T5189] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.907918][ T5189] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.922135][ T5189] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.925466][ T5187] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.931070][ T5189] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5186] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5189] <... write resumed>) = 53248 [pid 5186] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... ioctl resumed>) = 0 [pid 5189] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] close(3 [pid 5189] <... futex resumed>) = 0 [pid 5186] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5183] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 ./strace-static-x86_64: Process 5192 attached [pid 5189] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] <... futex resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5193 [pid 5183] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5186] <... clone3 resumed> => {parent_tid=[5192]}, 88) = 5192 [pid 5192] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5183] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5192] <... rseq resumed>) = 0 [pid 5183] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5186] rt_sigprocmask(SIG_SETMASK, [], [pid 5192] set_robust_list(0x7f96081b79a0, 24 [pid 5186] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5183] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5194 attached ./strace-static-x86_64: Process 5193 attached [pid 5192] <... set_robust_list resumed>) = 0 [pid 5190] <... mount resumed>) = 0 [pid 5186] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] set_robust_list(0x5555939db6a0, 24 [pid 5190] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5183] <... clone3 resumed> => {parent_tid=[5194]}, 88) = 5194 [pid 5193] <... set_robust_list resumed>) = 0 [pid 5190] <... openat resumed>) = 3 [pid 5183] rt_sigprocmask(SIG_SETMASK, [], [pid 5193] chdir("./7" [ 81.952050][ T5188] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.958540][ T5187] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.961758][ T5188] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.979161][ T5188] hfsplus: request for non-existent node 16777216 in B*Tree [ 81.990490][ T5188] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5190] chdir("./file1" [pid 5183] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5194] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5193] <... chdir resumed>) = 0 [pid 5192] rt_sigprocmask(SIG_SETMASK, [], [pid 5190] <... chdir resumed>) = 0 [pid 5186] <... futex resumed>) = 0 [pid 5184] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... rseq resumed>) = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5192] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5190] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5186] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5184] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5183] <... futex resumed>) = 0 [pid 5194] set_robust_list(0x7f96081b79a0, 24 [pid 5193] <... prctl resumed>) = 0 [pid 5192] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5190] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5184] <... futex resumed>) = 0 [pid 5183] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... set_robust_list resumed>) = 0 [pid 5194] rt_sigprocmask(SIG_SETMASK, [], [pid 5184] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5194] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5193] setpgid(0, 0 [pid 5192] <... open resumed>) = 5 [pid 5184] <... mmap resumed>) = 0x7f9608197000 [pid 5194] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5192] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5193] <... setpgid resumed>) = 0 [pid 5190] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5190] <... futex resumed>) = 1 [pid 5185] <... futex resumed>) = 0 [pid 5190] creat("./file0", 000 [pid 5185] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... openat resumed>) = 3 [pid 5192] <... futex resumed>) = 1 [pid 5190] <... creat resumed>) = 4 [pid 5186] <... futex resumed>) = 0 [pid 5185] <... futex resumed>) = 0 [pid 5184] <... mprotect resumed>) = 0 [pid 5192] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5188] <... write resumed>) = 53248 [pid 5186] exit_group(0 [pid 5184] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5192] <... futex resumed>) = ? [pid 5189] <... futex resumed>) = ? [pid 5188] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5186] <... exit_group resumed>) = ? [pid 5184] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5192] +++ exited with 0 +++ [pid 5188] <... futex resumed>) = 0 [pid 5184] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5188] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5195 attached [pid 5193] write(3, "1000", 4 [pid 5190] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5189] +++ exited with 0 +++ [pid 5186] +++ exited with 0 +++ [pid 5185] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5193] <... write resumed>) = 4 [pid 5190] <... futex resumed>) = 0 [pid 5185] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5195] <... rseq resumed>) = 0 [pid 5193] close(3 [ 82.000715][ T5188] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.009258][ T5188] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.014747][ T5187] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5190] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5185] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5184] <... clone3 resumed> => {parent_tid=[5195]}, 88) = 5195 [pid 5195] set_robust_list(0x7f96081b79a0, 24 [pid 5193] <... close resumed>) = 0 [pid 5193] symlink("/dev/binderfs", "./binderfs" [pid 5185] <... futex resumed>) = 0 [pid 5193] <... symlink resumed>) = 0 [pid 5185] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... set_robust_list resumed>) = 0 [pid 5193] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5195] rt_sigprocmask(SIG_SETMASK, [], [pid 5193] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5195] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5195] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5184] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5184] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5184] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 0 [pid 5193] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5184] <... futex resumed>) = 1 [pid 5183] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5184] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... openat resumed>) = 3 [pid 5193] <... mmap resumed>) = 0x7f96081b8000 [pid 5083] newfstatat(3, "", [pid 5195] <... open resumed>) = 5 [pid 5193] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5193] <... mprotect resumed>) = 0 [pid 5083] getdents64(3, [pid 5195] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5195] <... futex resumed>) = 1 [pid 5193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5184] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5184] exit_group(0 [pid 5083] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5188] <... futex resumed>) = ? [pid 5184] <... exit_group resumed>) = ? [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5195] +++ exited with 0 +++ [pid 5193] <... clone3 resumed> => {parent_tid=[5196]}, 88) = 5196 [pid 5188] +++ exited with 0 +++ [pid 5083] newfstatat(AT_FDCWD, "./6/binderfs", ./strace-static-x86_64: Process 5196 attached [ 82.045088][ T5190] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.052435][ T5190] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.067212][ T5187] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5193] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5196] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5193] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5184] +++ exited with 0 +++ [pid 5083] unlink("./6/binderfs" [pid 5196] <... rseq resumed>) = 0 [pid 5194] <... open resumed>) = 5 [pid 5193] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5083] <... unlink resumed>) = 0 [pid 5194] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5196] set_robust_list(0x7f96081d89a0, 24 [pid 5194] <... futex resumed>) = 0 [pid 5193] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5196] <... set_robust_list resumed>) = 0 [pid 5185] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5196] rt_sigprocmask(SIG_SETMASK, [], [pid 5185] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] memfd_create("syzkaller", 0 [pid 5185] <... mmap resumed>) = 0x7f9608197000 [pid 5084] <... openat resumed>) = 3 [pid 5196] <... memfd_create resumed>) = 3 [pid 5185] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5084] newfstatat(3, "", [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5185] <... mprotect resumed>) = 0 [pid 5196] <... mmap resumed>) = 0x7f95ffc00000 [pid 5185] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5185] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5185] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5197]}, 88) = 5197 [pid 5185] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5084] getdents64(3, ./strace-static-x86_64: Process 5197 attached [pid 5185] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5197] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5185] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5197] <... rseq resumed>) = 0 [pid 5185] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5197] set_robust_list(0x7f96081b79a0, 24 [pid 5084] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5197] <... set_robust_list resumed>) = 0 [ 82.097106][ T5190] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.116684][ T5187] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.129710][ T5190] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5197] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5197] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5197] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./6/binderfs") = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5187] <... write resumed>) = 53248 [pid 5084] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5196] <... write resumed>) = 524288 [pid 5187] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5196] munmap(0x7f95ffc00000, 138412032 [pid 5083] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5196] <... munmap resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", [pid 5196] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5187] <... futex resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5187] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5183] exit_group(0 [pid 5194] <... futex resumed>) = ? [pid 5187] <... futex resumed>) = ? [pid 5183] <... exit_group resumed>) = ? [pid 5083] getdents64(4, [pid 5194] +++ exited with 0 +++ [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 5196] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5083] close(4 [pid 5187] +++ exited with 0 +++ [pid 5185] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5183] +++ exited with 0 +++ [pid 5083] <... close resumed>) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5083] rmdir("./6/file1") = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./6") = 0 [pid 5085] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] mkdir("./7", 0777 [pid 5085] <... openat resumed>) = 3 [pid 5083] <... mkdir resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5197] <... open resumed>) = 5 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = 0 [pid 5197] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5197] <... futex resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5190] <... write resumed>) = 53248 [pid 5084] newfstatat(AT_FDCWD, "./6/file1", [pid 5196] <... ioctl resumed>) = 0 [pid 5190] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5185] exit_group(0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5197] <... futex resumed>) = ? [pid 5196] close(3 [pid 5190] <... futex resumed>) = ? [pid 5185] <... exit_group resumed>) = ? [pid 5085] unlink("./6/binderfs" [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5197] +++ exited with 0 +++ [pid 5196] <... close resumed>) = 0 [pid 5190] +++ exited with 0 +++ [pid 5185] +++ exited with 0 +++ [pid 5084] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5196] close(4 [pid 5084] <... openat resumed>) = 4 [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5196] <... close resumed>) = 0 [pid 5196] mkdir("./file1", 0777) = 0 [pid 5084] newfstatat(4, "", [pid 5081] <... restart_syscall resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5196] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5081] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] <... unlink resumed>) = 0 [ 82.143335][ T5187] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.165257][ T5190] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.172714][ T5190] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.185220][ T5196] loop1: detected capacity change from 0 to 1024 [pid 5084] getdents64(4, [pid 5081] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5196] <... mount resumed>) = 0 [pid 5084] getdents64(4, [pid 5081] <... openat resumed>) = 3 [pid 5196] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5081] newfstatat(3, "", [pid 5196] <... openat resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5196] chdir("./file1" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] close(4 [pid 5196] <... chdir resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5196] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5196] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5196] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5196] creat("./file0", 000 [pid 5193] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5196] <... creat resumed>) = 4 [pid 5196] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5084] rmdir("./6/file1" [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5196] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5196] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5196] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5193] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... rmdir resumed>) = 0 [pid 5081] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = 0 [pid 5084] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./6/binderfs", [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] unlink("./6/binderfs" [pid 5084] rmdir("./6" [pid 5085] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] mkdir("./7", 0777 [pid 5085] newfstatat(AT_FDCWD, "./6/file1", [pid 5084] <... mkdir resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5085] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5085] getdents64(4, [pid 5081] <... umount2 resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [ 82.247280][ T5196] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] close(4 [pid 5081] newfstatat(AT_FDCWD, "./6/file1", [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./6/file1" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] close(3) = 0 [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... rmdir resumed>) = 0 [pid 5081] umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] close(3 [pid 5193] <... futex resumed>) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... openat resumed>) = 4 [pid 5085] <... close resumed>) = 0 ./strace-static-x86_64: Process 5198 attached [pid 5085] rmdir("./6" [pid 5081] newfstatat(4, "", [pid 5193] <... mmap resumed>) = 0x7f9608197000 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5198 [pid 5193] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5193] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] mkdir("./7", 0777 [pid 5081] getdents64(4, [pid 5193] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5193] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5198] set_robust_list(0x5555939db6a0, 24 [pid 5193] <... clone3 resumed> => {parent_tid=[5199]}, 88) = 5199 [pid 5085] <... mkdir resumed>) = 0 [pid 5081] close(4 [pid 5193] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5193] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5199 attached [pid 5199] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5199] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5199] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5199] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5081] <... close resumed>) = 0 [ 82.290323][ T5196] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.324138][ T5196] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.333460][ T29] kauditd_printk_skb: 25 callbacks suppressed [pid 5198] <... set_robust_list resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] <... ioctl resumed>) = 0 [pid 5081] rmdir("./6/file1" [pid 5198] chdir("./7" [pid 5085] <... openat resumed>) = 3 [pid 5084] close(3 [pid 5081] <... rmdir resumed>) = 0 [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5081] getdents64(3, [pid 5198] <... chdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] close(3 [pid 5198] <... prctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./6" [pid 5198] setpgid(0, 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5200 [pid 5198] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 5200 attached [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... rmdir resumed>) = 0 [pid 5200] set_robust_list(0x5555939db6a0, 24 [pid 5198] <... openat resumed>) = 3 [ 82.333477][ T29] audit: type=1800 audit(1715660554.992:37): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 82.368629][ T5196] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.381663][ T5196] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] mkdir("./7", 0777 [pid 5200] <... set_robust_list resumed>) = 0 [pid 5198] write(3, "1000", 4 [pid 5081] <... mkdir resumed>) = 0 [pid 5200] chdir("./7" [pid 5198] <... write resumed>) = 4 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5198] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5198] <... close resumed>) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs" [pid 5199] <... open resumed>) = 5 [pid 5199] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... symlink resumed>) = 0 [pid 5199] <... futex resumed>) = 0 [pid 5198] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5199] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... futex resumed>) = 0 [pid 5198] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5200] <... chdir resumed>) = 0 [pid 5200] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5198] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5196] <... write resumed>) = 53248 [pid 5200] <... prctl resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5085] <... ioctl resumed>) = 0 [pid 5200] setpgid(0, 0 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] close(3 [pid 5200] <... setpgid resumed>) = 0 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... close resumed>) = 0 [pid 5200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5198] <... mmap resumed>) = 0x7f96081b8000 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5200] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5201 attached [pid 5200] write(3, "1000", 4 [pid 5198] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5196] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] set_robust_list(0x5555939db6a0, 24 [pid 5200] <... write resumed>) = 4 [pid 5198] <... mprotect resumed>) = 0 [pid 5196] <... futex resumed>) = 0 [pid 5193] exit_group(0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5201 [pid 5201] <... set_robust_list resumed>) = 0 [pid 5200] close(3 [pid 5199] <... futex resumed>) = ? [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5193] <... exit_group resumed>) = ? [ 82.398948][ T5196] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5201] chdir("./7" [pid 5200] <... close resumed>) = 0 [pid 5199] +++ exited with 0 +++ [pid 5198] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5196] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 5201] <... chdir resumed>) = 0 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5082] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5201] setpgid(0, 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5201] <... setpgid resumed>) = 0 [pid 5082] unlink("./7/binderfs" [pid 5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5202 attached [pid 5200] symlink("/dev/binderfs", "./binderfs" [pid 5198] <... clone3 resumed> => {parent_tid=[5202]}, 88) = 5202 [pid 5202] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5082] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5202] <... rseq resumed>) = 0 [pid 5200] <... symlink resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5202] set_robust_list(0x7f96081d89a0, 24 [pid 5201] <... openat resumed>) = 3 [pid 5200] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5081] close(3 [pid 5202] <... set_robust_list resumed>) = 0 [pid 5200] <... futex resumed>) = 0 [pid 5198] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] rt_sigprocmask(SIG_SETMASK, [], [pid 5200] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5082] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5200] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5198] <... futex resumed>) = 0 [pid 5202] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5198] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5201] write(3, "1000", 4 [pid 5200] <... mmap resumed>) = 0x7f96081b8000 [pid 5082] newfstatat(AT_FDCWD, "./7/file1", [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5201] <... write resumed>) = 4 [pid 5200] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... close resumed>) = 0 [pid 5202] <... mmap resumed>) = 0x7f95ffc00000 [pid 5201] close(3 [pid 5200] <... mprotect resumed>) = 0 [pid 5082] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5201] <... close resumed>) = 0 [pid 5201] symlink("/dev/binderfs", "./binderfs" [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5201] <... symlink resumed>) = 0 [pid 5201] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5201] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5201] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5082] newfstatat(4, "", [pid 5201] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5201] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] getdents64(4, [pid 5201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5203 attached [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5200] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] getdents64(4, [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5203 [pid 5201] <... mmap resumed>) = 0x7f96081b8000 [pid 5200] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5204 attached [pid 5203] set_robust_list(0x5555939db6a0, 24 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5201] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] close(4 [pid 5201] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... close resumed>) = 0 [pid 5201] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] rmdir("./7/file1" [pid 5201] <... clone3 resumed> => {parent_tid=[5205]}, 88) = 5205 [pid 5082] <... rmdir resumed>) = 0 [pid 5201] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3./strace-static-x86_64: Process 5205 attached [pid 5201] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... close resumed>) = 0 [pid 5205] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5201] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] rmdir("./7" [pid 5205] <... rseq resumed>) = 0 [pid 5205] set_robust_list(0x7f96081d89a0, 24 [pid 5201] <... futex resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5205] <... set_robust_list resumed>) = 0 [pid 5201] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5205] rt_sigprocmask(SIG_SETMASK, [], [pid 5203] <... set_robust_list resumed>) = 0 [pid 5200] <... clone3 resumed> => {parent_tid=[5204]}, 88) = 5204 [pid 5205] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5200] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] mkdir("./8", 0777 [pid 5205] memfd_create("syzkaller", 0 [pid 5204] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5203] chdir("./7" [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5205] <... memfd_create resumed>) = 3 [pid 5204] <... rseq resumed>) = 0 [pid 5203] <... chdir resumed>) = 0 [pid 5200] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] set_robust_list(0x7f96081d89a0, 24 [pid 5203] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5202] <... write resumed>) = 524288 [pid 5200] <... futex resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5204] <... set_robust_list resumed>) = 0 [pid 5203] <... prctl resumed>) = 0 [pid 5202] munmap(0x7f95ffc00000, 138412032 [pid 5200] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... openat resumed>) = 3 [pid 5204] rt_sigprocmask(SIG_SETMASK, [], [pid 5203] setpgid(0, 0 [pid 5204] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5203] <... setpgid resumed>) = 0 [pid 5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5204] memfd_create("syzkaller", 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5205] <... mmap resumed>) = 0x7f95ffc00000 [pid 5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5202] <... munmap resumed>) = 0 [pid 5205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5204] <... memfd_create resumed>) = 3 [pid 5203] <... openat resumed>) = 3 [pid 5202] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5203] write(3, "1000", 4 [pid 5202] <... openat resumed>) = 4 [pid 5204] <... mmap resumed>) = 0x7f95ffc00000 [pid 5203] <... write resumed>) = 4 [pid 5203] close(3) = 0 [pid 5203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 5203] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5203] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5203] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5205] <... write resumed>) = 524288 [pid 5204] <... write resumed>) = 524288 [pid 5203] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5202] <... ioctl resumed>) = 0 [pid 5203] <... mprotect resumed>) = 0 [pid 5203] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5205] munmap(0x7f95ffc00000, 138412032 [pid 5204] munmap(0x7f95ffc00000, 138412032 [pid 5203] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5202] close(3 [pid 5203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5206 attached [pid 5204] <... munmap resumed>) = 0 [pid 5202] <... close resumed>) = 0 [pid 5206] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5204] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5203] <... clone3 resumed> => {parent_tid=[5206]}, 88) = 5206 [pid 5202] close(4 [pid 5206] <... rseq resumed>) = 0 [pid 5206] set_robust_list(0x7f96081d89a0, 24 [pid 5204] <... openat resumed>) = 4 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] <... set_robust_list resumed>) = 0 [pid 5206] rt_sigprocmask(SIG_SETMASK, [], [pid 5204] ioctl(4, LOOP_SET_FD, 3 [pid 5203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5202] <... close resumed>) = 0 [pid 5206] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5202] mkdir("./file1", 0777 [pid 5206] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5203] <... futex resumed>) = 0 [pid 5206] memfd_create("syzkaller", 0 [pid 5205] <... munmap resumed>) = 0 [pid 5204] <... ioctl resumed>) = 0 [pid 5203] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5202] <... mkdir resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [ 82.543826][ T5202] loop2: detected capacity change from 0 to 1024 [ 82.582968][ T5204] loop3: detected capacity change from 0 to 1024 [pid 5205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5206] <... memfd_create resumed>) = 3 [pid 5082] close(3 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5202] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5206] <... mmap resumed>) = 0x7f95ffc00000 [pid 5205] <... openat resumed>) = 4 [pid 5082] <... close resumed>) = 0 [pid 5205] ioctl(4, LOOP_SET_FD, 3 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5207 attached [pid 5202] <... mount resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5204] close(3 [pid 5207] set_robust_list(0x5555939db6a0, 24 [pid 5204] <... close resumed>) = 0 [pid 5202] <... openat resumed>) = 3 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5207 [pid 5204] close(4 [pid 5202] chdir("./file1" [pid 5204] <... close resumed>) = 0 [pid 5207] <... set_robust_list resumed>) = 0 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5205] <... ioctl resumed>) = 0 [pid 5202] <... chdir resumed>) = 0 [pid 5204] mkdir("./file1", 0777 [pid 5207] chdir("./8" [pid 5205] close(3 [pid 5202] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5207] <... chdir resumed>) = 0 [pid 5205] <... close resumed>) = 0 [pid 5204] <... mkdir resumed>) = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5205] close(4 [pid 5202] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] <... prctl resumed>) = 0 [pid 5205] <... close resumed>) = 0 [pid 5202] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] setpgid(0, 0 [pid 5205] mkdir("./file1", 0777 [pid 5202] <... futex resumed>) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5207] <... setpgid resumed>) = 0 [pid 5205] <... mkdir resumed>) = 0 [pid 5204] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5202] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5202] creat("./file0", 000 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 82.606763][ T5205] loop4: detected capacity change from 0 to 1024 [pid 5205] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5207] write(3, "1000", 4) = 4 [pid 5207] close(3 [pid 5206] <... write resumed>) = 524288 [pid 5202] <... creat resumed>) = 4 [pid 5207] <... close resumed>) = 0 [pid 5207] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5207] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5205] <... mount resumed>) = 0 [pid 5207] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5205] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5207] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5205] chdir("./file1" [pid 5207] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5206] munmap(0x7f95ffc00000, 138412032 [pid 5205] <... chdir resumed>) = 0 [pid 5202] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5205] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5202] <... futex resumed>) = 1 [pid 5198] <... futex resumed>) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5205] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5202] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... mmap resumed>) = 0x7f96081b8000 [pid 5206] <... munmap resumed>) = 0 [pid 5205] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5198] <... futex resumed>) = 0 [pid 5207] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5205] <... futex resumed>) = 1 [pid 5202] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5201] <... futex resumed>) = 0 [pid 5198] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... mprotect resumed>) = 0 [pid 5204] <... mount resumed>) = 0 [pid 5201] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5206] <... openat resumed>) = 4 [pid 5205] creat("./file0", 000 [pid 5201] <... futex resumed>) = 0 [pid 5207] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5205] <... creat resumed>) = 4 [pid 5201] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5204] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5208 attached [pid 5207] <... clone3 resumed> => {parent_tid=[5208]}, 88) = 5208 [pid 5205] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... openat resumed>) = 3 [pid 5208] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], [pid 5205] <... futex resumed>) = 1 [pid 5201] <... futex resumed>) = 0 [pid 5208] <... rseq resumed>) = 0 [pid 5207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5205] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5201] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] set_robust_list(0x7f96081d89a0, 24 [pid 5207] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5201] <... futex resumed>) = 0 [pid 5208] <... set_robust_list resumed>) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5205] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5201] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] rt_sigprocmask(SIG_SETMASK, [], [pid 5207] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5208] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 82.687066][ T5202] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.704636][ T5206] loop0: detected capacity change from 0 to 1024 [ 82.711375][ T5205] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.711400][ T5205] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.711741][ T5205] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5208] memfd_create("syzkaller", 0) = 3 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5204] chdir("./file1" [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5204] <... chdir resumed>) = 0 [pid 5204] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5198] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5204] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5204] <... futex resumed>) = 1 [pid 5198] <... mmap resumed>) = 0x7f9608197000 [pid 5198] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5204] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5198] <... mprotect resumed>) = 0 [pid 5208] <... mmap resumed>) = 0x7f95ffc00000 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5200] <... futex resumed>) = 0 [pid 5198] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5200] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5204] <... futex resumed>) = 0 [pid 5200] <... futex resumed>) = 1 [pid 5198] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5201] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5204] creat("./file0", 000 [pid 5201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5200] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5201] <... mmap resumed>) = 0x7f9608197000 [ 82.711759][ T5205] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.729301][ T5205] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.743002][ T5202] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.773229][ T5202] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5201] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5209 attached [pid 5208] <... write resumed>) = 524288 [pid 5204] <... creat resumed>) = 4 [pid 5201] <... mprotect resumed>) = 0 [pid 5198] <... clone3 resumed> => {parent_tid=[5209]}, 88) = 5209 [pid 5201] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5201] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5210]}, 88) = 5210 [pid 5201] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5198] rt_sigprocmask(SIG_SETMASK, [], [pid 5201] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5210 attached [pid 5201] <... futex resumed>) = 0 [pid 5198] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5201] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5198] <... futex resumed>) = 0 [pid 5209] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5204] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5198] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... rseq resumed>) = 0 [pid 5204] <... futex resumed>) = 1 [pid 5200] <... futex resumed>) = 0 [pid 5200] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... rseq resumed>) = 0 [pid 5209] set_robust_list(0x7f96081b79a0, 24 [pid 5200] <... futex resumed>) = 0 [pid 5210] set_robust_list(0x7f96081b79a0, 24 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5200] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... set_robust_list resumed>) = 0 [pid 5210] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5210] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5209] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] <... ioctl resumed>) = 0 [pid 5204] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 82.792991][ T5202] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.806979][ T5202] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.810206][ T29] audit: type=1800 audit(1715660555.472:38): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 82.822961][ T5202] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5208] munmap(0x7f95ffc00000, 138412032 [pid 5209] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5208] <... munmap resumed>) = 0 [pid 5206] close(3 [pid 5209] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5206] <... close resumed>) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5208] <... ioctl resumed>) = 0 [pid 5208] close(3) = 0 [pid 5201] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5208] close(4 [pid 5209] <... open resumed>) = 5 [pid 5208] <... close resumed>) = 0 [pid 5206] close(4 [pid 5200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5208] mkdir("./file1", 0777) = 0 [pid 5208] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5209] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... mount resumed>) = 0 [pid 5206] <... close resumed>) = 0 [pid 5205] <... write resumed>) = 53248 [pid 5200] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5206] mkdir("./file1", 0777 [pid 5205] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5202] <... write resumed>) = 53248 [pid 5208] <... openat resumed>) = 3 [ 82.837536][ T5205] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.853794][ T5208] loop1: detected capacity change from 0 to 1024 [ 82.858842][ T5204] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.873494][ T5204] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5205] <... futex resumed>) = 0 [pid 5210] <... open resumed>) = 5 [pid 5208] chdir("./file1" [pid 5205] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... chdir resumed>) = 0 [pid 5201] exit_group(0 [pid 5210] <... futex resumed>) = ? [pid 5208] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5205] <... futex resumed>) = ? [pid 5201] <... exit_group resumed>) = ? [pid 5210] +++ exited with 0 +++ [pid 5209] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5206] <... mkdir resumed>) = 0 [pid 5205] +++ exited with 0 +++ [pid 5202] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5201] +++ exited with 0 +++ [pid 5200] <... futex resumed>) = 0 [pid 5198] exit_group(0 [pid 5209] <... futex resumed>) = ? [pid 5208] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5202] <... futex resumed>) = ? [pid 5200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5198] <... exit_group resumed>) = ? [pid 5209] +++ exited with 0 +++ [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5202] +++ exited with 0 +++ [pid 5200] <... mmap resumed>) = 0x7f9608197000 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5201, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5208] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5207] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5198] +++ exited with 0 +++ [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5207] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5208] creat("./file0", 000 [pid 5207] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5208] <... creat resumed>) = 4 [pid 5083] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5208] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5208] <... futex resumed>) = 1 [pid 5207] <... futex resumed>) = 0 [pid 5083] newfstatat(3, "", [pid 5208] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5207] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5207] <... futex resumed>) = 0 [pid 5083] getdents64(3, [pid 5207] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./7/binderfs") = 0 [ 82.889149][ T5204] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.913063][ T29] audit: type=1800 audit(1715660555.532:39): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5083] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5206] <... mount resumed>) = 0 [pid 5200] <... mprotect resumed>) = 0 [pid 5085] <... restart_syscall resumed>) = 0 [pid 5206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5200] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5206] <... openat resumed>) = 3 [pid 5200] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5206] chdir("./file1" [pid 5085] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5200] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5211 attached [pid 5085] newfstatat(3, "", [pid 5211] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5200] <... clone3 resumed> => {parent_tid=[5211]}, 88) = 5211 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5211] <... rseq resumed>) = 0 [pid 5085] getdents64(3, [pid 5211] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5200] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5211] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5211] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5211] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5206] <... chdir resumed>) = 0 [pid 5200] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./7/binderfs" [pid 5200] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... unlink resumed>) = 0 [pid 5085] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5211] <... futex resumed>) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5200] <... futex resumed>) = 1 [pid 5211] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5207] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5200] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... futex resumed>) = 0 [pid 5207] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5206] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5207] <... mmap resumed>) = 0x7f9608197000 [pid 5206] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5207] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5206] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = 0 [pid 5207] <... mprotect resumed>) = 0 [pid 5206] <... futex resumed>) = 1 [pid 5203] <... futex resumed>) = 0 [pid 5085] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 82.936966][ T5208] hfsplus: request for non-existent node 16777216 in B*Tree [ 82.937654][ T5204] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5207] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5206] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5203] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] newfstatat(AT_FDCWD, "./7/file1", [pid 5083] <... umount2 resumed>) = 0 [pid 5207] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5203] <... futex resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5206] creat("./file0", 000 [pid 5203] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... clone3 resumed> => {parent_tid=[5212]}, 88) = 5212 [pid 5206] <... creat resumed>) = 4 [pid 5207] rt_sigprocmask(SIG_SETMASK, [], [pid 5206] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5206] <... futex resumed>) = 1 [pid 5203] <... futex resumed>) = 0 [pid 5207] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5203] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5211] <... open resumed>) = 5 [pid 5207] <... futex resumed>) = 0 [pid 5203] <... futex resumed>) = 0 [pid 5085] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5211] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5203] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5212 attached [pid 5211] <... futex resumed>) = 1 [pid 5200] <... futex resumed>) = 0 [pid 5083] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5212] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5211] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5212] <... rseq resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./7/file1", [pid 5212] set_robust_list(0x7f96081b79a0, 24 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5212] <... set_robust_list resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5212] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5212] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5212] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5083] <... openat resumed>) = 4 [ 82.988792][ T5208] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.011446][ T5206] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.020394][ T5204] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", [pid 5085] newfstatat(4, "", [pid 5203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5207] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5203] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 5203] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] close(4 [pid 5085] getdents64(4, [pid 5203] <... mmap resumed>) = 0x7f9608197000 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, [pid 5204] <... write resumed>) = 53248 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 5204] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] close(4 [pid 5204] <... futex resumed>) = 0 [pid 5203] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5200] exit_group(0 [pid 5085] <... close resumed>) = 0 [pid 5083] rmdir("./7/file1" [pid 5204] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] rmdir("./7/file1" [pid 5204] <... futex resumed>) = ? [pid 5200] <... exit_group resumed>) = ? [pid 5085] <... rmdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5204] +++ exited with 0 +++ [pid 5085] getdents64(3, [pid 5203] <... mprotect resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] getdents64(3, [pid 5085] close(3 [pid 5203] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] rmdir("./7" [pid 5211] <... futex resumed>) = ? [pid 5203] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] close(3 [pid 5085] <... rmdir resumed>) = 0 [pid 5211] +++ exited with 0 +++ [pid 5203] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5200] +++ exited with 0 +++ [pid 5085] mkdir("./8", 0777 [pid 5083] <... close resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5200, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5083] rmdir("./7" [pid 5203] <... clone3 resumed> => {parent_tid=[5213]}, 88) = 5213 [pid 5085] <... mkdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5203] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] mkdir("./8", 0777./strace-static-x86_64: Process 5213 attached [pid 5203] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5083] <... mkdir resumed>) = 0 [pid 5213] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5203] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5213] <... rseq resumed>) = 0 [pid 5203] <... futex resumed>) = 0 [pid 5085] ioctl(3, LOOP_CLR_FD [ 83.036937][ T29] audit: type=1800 audit(1715660555.642:40): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 83.052966][ T5204] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.057520][ T5208] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.076003][ T5206] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5213] set_robust_list(0x7f96081b79a0, 24 [pid 5203] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5213] <... set_robust_list resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5213] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5213] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5213] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] <... openat resumed>) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [ 83.102855][ T5206] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.110315][ T5206] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.124214][ T5208] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.124825][ T29] audit: type=1800 audit(1715660555.702:41): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5084] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./7/binderfs") = 0 [pid 5084] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5212] <... open resumed>) = 5 [pid 5212] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5212] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5213] <... open resumed>) = 5 [pid 5213] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5203] <... futex resumed>) = 0 [pid 5213] <... futex resumed>) = 1 [pid 5213] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 83.152381][ T29] audit: type=1800 audit(1715660555.792:42): pid=5213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 83.153585][ T5206] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.172571][ T5208] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.190349][ T5208] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] close(3 [pid 5084] newfstatat(4, "", [pid 5083] <... ioctl resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] close(4) = 0 [pid 5085] <... close resumed>) = 0 [pid 5083] close(3 [pid 5084] rmdir("./7/file1" [pid 5083] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5214 [pid 5084] close(3./strace-static-x86_64: Process 5215 attached ./strace-static-x86_64: Process 5214 attached [pid 5208] <... write resumed>) = 53248 [pid 5084] <... close resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5215 [pid 5084] rmdir("./7" [pid 5215] set_robust_list(0x5555939db6a0, 24 [pid 5084] <... rmdir resumed>) = 0 [pid 5215] <... set_robust_list resumed>) = 0 [pid 5084] mkdir("./8", 0777 [pid 5215] chdir("./8" [pid 5214] set_robust_list(0x5555939db6a0, 24 [pid 5208] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5206] <... write resumed>) = 53248 [pid 5214] <... set_robust_list resumed>) = 0 [pid 5208] <... futex resumed>) = 0 [pid 5207] exit_group(0 [pid 5206] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... chdir resumed>) = 0 [pid 5207] <... exit_group resumed>) = ? [pid 5215] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5214] chdir("./8" [pid 5212] <... futex resumed>) = ? [pid 5206] <... futex resumed>) = 0 [pid 5203] exit_group(0 [pid 5084] <... mkdir resumed>) = 0 [pid 5215] <... prctl resumed>) = 0 [pid 5214] <... chdir resumed>) = 0 [pid 5213] <... futex resumed>) = ? [pid 5212] +++ exited with 0 +++ [pid 5208] +++ exited with 0 +++ [pid 5207] +++ exited with 0 +++ [pid 5203] <... exit_group resumed>) = ? [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5215] setpgid(0, 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5213] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5203] +++ exited with 0 +++ [pid 5084] <... openat resumed>) = 3 [pid 5215] <... setpgid resumed>) = 0 [pid 5214] <... prctl resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5214] setpgid(0, 0 [pid 5082] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... openat resumed>) = 3 [pid 5214] <... setpgid resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] write(3, "1000", 4) = 4 [pid 5082] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] close(3) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] symlink("/dev/binderfs", "./binderfs" [pid 5082] newfstatat(3, "", [ 83.218140][ T5206] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5215] <... symlink resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] getdents64(3, [pid 5081] newfstatat(3, "", [pid 5215] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5214] <... openat resumed>) = 3 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5215] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5214] write(3, "1000", 4 [pid 5082] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] getdents64(3, [pid 5215] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5215] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5214] <... write resumed>) = 4 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] close(3 [pid 5082] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5081] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... close resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5214] symlink("/dev/binderfs", "./binderfs" [pid 5082] unlink("./8/binderfs" [pid 5081] newfstatat(AT_FDCWD, "./7/binderfs", [pid 5214] <... symlink resumed>) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... unlink resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5214] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] unlink("./7/binderfs" [pid 5215] <... mmap resumed>) = 0x7f96081b8000 [pid 5214] <... futex resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5215] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5214] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5082] <... umount2 resumed>) = 0 [pid 5081] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5082] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5214] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] <... mprotect resumed>) = 0 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] newfstatat(AT_FDCWD, "./8/file1", [pid 5081] <... umount2 resumed>) = 0 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5214] <... mmap resumed>) = 0x7f96081b8000 [pid 5082] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5214] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5214] <... mprotect resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... ioctl resumed>) = 0 [pid 5214] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... openat resumed>) = 4 [pid 5081] newfstatat(AT_FDCWD, "./7/file1", [pid 5214] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] newfstatat(4, "", [pid 5214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5217 attached ./strace-static-x86_64: Process 5216 attached [pid 5215] <... clone3 resumed> => {parent_tid=[5216]}, 88) = 5216 [pid 5082] getdents64(4, [pid 5081] umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5217] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5216] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5215] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] <... clone3 resumed> => {parent_tid=[5217]}, 88) = 5217 [pid 5217] <... rseq resumed>) = 0 [pid 5216] <... rseq resumed>) = 0 [pid 5215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] close(3 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] set_robust_list(0x7f96081d89a0, 24 [pid 5216] set_robust_list(0x7f96081d89a0, 24 [pid 5215] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5216] <... set_robust_list resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5082] getdents64(4, [pid 5081] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] rt_sigprocmask(SIG_SETMASK, [], [pid 5216] rt_sigprocmask(SIG_SETMASK, [], [pid 5215] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5217] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] close(4 [pid 5081] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5218 attached [pid 5217] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5216] memfd_create("syzkaller", 0 [pid 5214] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5081] newfstatat(4, "", [pid 5218] set_robust_list(0x5555939db6a0, 24 [pid 5214] <... futex resumed>) = 0 [pid 5217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5214] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5218] <... set_robust_list resumed>) = 0 [pid 5217] memfd_create("syzkaller", 0 [pid 5216] <... memfd_create resumed>) = 3 [pid 5082] rmdir("./8/file1" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5218] chdir("./8" [pid 5217] <... memfd_create resumed>) = 3 [pid 5216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5218] <... chdir resumed>) = 0 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5216] <... mmap resumed>) = 0x7f95ffc00000 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5218 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5217] <... mmap resumed>) = 0x7f95ffc00000 [pid 5216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5082] getdents64(3, [pid 5218] <... prctl resumed>) = 0 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5218] setpgid(0, 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(4, [pid 5218] <... setpgid resumed>) = 0 [pid 5082] close(3 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] <... close resumed>) = 0 [pid 5081] close(4 [pid 5082] rmdir("./8" [pid 5081] <... close resumed>) = 0 [pid 5218] <... openat resumed>) = 3 [pid 5218] write(3, "1000", 4 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] rmdir("./7/file1" [pid 5218] <... write resumed>) = 4 [pid 5082] mkdir("./9", 0777 [pid 5218] close(3 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5218] symlink("/dev/binderfs", "./binderfs" [pid 5081] getdents64(3, [pid 5218] <... symlink resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5218] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5218] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5217] <... write resumed>) = 524288 [pid 5081] <... close resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5081] rmdir("./7" [pid 5217] munmap(0x7f95ffc00000, 138412032 [pid 5218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./8", 0777 [pid 5218] <... mmap resumed>) = 0x7f96081b8000 [pid 5218] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... mkdir resumed>) = 0 [pid 5217] <... munmap resumed>) = 0 [pid 5218] <... mprotect resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] <... openat resumed>) = 3 [pid 5217] <... openat resumed>) = 4 [pid 5218] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5217] ioctl(4, LOOP_SET_FD, 3 [pid 5216] <... write resumed>) = 524288 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5217] <... ioctl resumed>) = 0 [pid 5216] munmap(0x7f95ffc00000, 138412032./strace-static-x86_64: Process 5219 attached [pid 5219] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5218] <... clone3 resumed> => {parent_tid=[5219]}, 88) = 5219 [pid 5216] <... munmap resumed>) = 0 [pid 5219] set_robust_list(0x7f96081d89a0, 24 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], [pid 5219] <... set_robust_list resumed>) = 0 [pid 5218] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5219] rt_sigprocmask(SIG_SETMASK, [], [pid 5218] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] close(3 [pid 5216] <... openat resumed>) = 4 [pid 5219] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5217] <... close resumed>) = 0 [pid 5216] ioctl(4, LOOP_SET_FD, 3 [pid 5219] memfd_create("syzkaller", 0 [pid 5218] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5217] close(4 [pid 5219] <... memfd_create resumed>) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5217] <... close resumed>) = 0 [pid 5216] <... ioctl resumed>) = 0 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5217] mkdir("./file1", 0777 [pid 5216] close(3 [pid 5082] <... ioctl resumed>) = 0 [pid 5217] <... mkdir resumed>) = 0 [pid 5082] close(3 [pid 5217] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] <... close resumed>) = 0 [pid 5216] <... close resumed>) = 0 [pid 5216] close(4 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5216] <... close resumed>) = 0 [pid 5216] mkdir("./file1", 0777) = 0 [pid 5216] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5220 [pid 5217] <... mount resumed>) = 0 [pid 5219] <... write resumed>) = 524288 [pid 5217] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5081] <... ioctl resumed>) = 0 [ 83.386239][ T5217] loop4: detected capacity change from 0 to 1024 [ 83.399638][ T5216] loop2: detected capacity change from 0 to 1024 [pid 5219] munmap(0x7f95ffc00000, 138412032) = 0 ./strace-static-x86_64: Process 5220 attached [pid 5217] <... openat resumed>) = 3 [pid 5219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5220] set_robust_list(0x5555939db6a0, 24 [pid 5217] chdir("./file1" [pid 5216] <... mount resumed>) = 0 [pid 5081] close(3 [pid 5219] <... openat resumed>) = 4 [pid 5217] <... chdir resumed>) = 0 [pid 5216] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5219] ioctl(4, LOOP_SET_FD, 3 [pid 5220] <... set_robust_list resumed>) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5216] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5216] chdir("./file1" [pid 5217] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5216] <... chdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5217] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5221 attached [pid 5220] chdir("./9" [pid 5217] <... futex resumed>) = 1 [pid 5216] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5214] <... futex resumed>) = 0 [pid 5216] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5217] creat("./file0", 000 [pid 5216] <... futex resumed>) = 1 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5221 [pid 5214] <... futex resumed>) = 0 [pid 5214] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5216] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5217] <... creat resumed>) = 4 [pid 5221] chdir("./8" [pid 5220] <... chdir resumed>) = 0 [pid 5221] <... chdir resumed>) = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5221] setpgid(0, 0) = 0 [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5221] write(3, "1000", 4) = 4 [pid 5221] close(3) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5221] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5221] <... futex resumed>) = 0 [pid 5220] <... prctl resumed>) = 0 [pid 5219] <... ioctl resumed>) = 0 [pid 5217] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... futex resumed>) = 0 [pid 5220] setpgid(0, 0 [pid 5217] <... futex resumed>) = 1 [pid 5214] <... futex resumed>) = 0 [pid 5220] <... setpgid resumed>) = 0 [pid 5214] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5215] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5215] <... futex resumed>) = 1 [pid 5216] <... futex resumed>) = 0 [pid 5221] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5219] close(3 [pid 5217] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5216] creat("./file0", 000 [pid 5215] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5214] <... futex resumed>) = 0 [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5219] <... close resumed>) = 0 [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5219] close(4 [pid 5221] <... mmap resumed>) = 0x7f96081b8000 [pid 5219] <... close resumed>) = 0 [pid 5221] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5219] mkdir("./file1", 0777 [pid 5216] <... creat resumed>) = 4 [pid 5214] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] <... mprotect resumed>) = 0 [pid 5219] <... mkdir resumed>) = 0 [pid 5216] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5220] <... openat resumed>) = 3 [pid 5216] <... futex resumed>) = 1 [pid 5215] <... futex resumed>) = 0 [pid 5221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5220] write(3, "1000", 4 [ 83.469387][ T5219] loop3: detected capacity change from 0 to 1024 [pid 5219] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5215] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5220] <... write resumed>) = 4 [pid 5216] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 5222 attached [pid 5215] <... futex resumed>) = 0 [pid 5222] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5221] <... clone3 resumed> => {parent_tid=[5222]}, 88) = 5222 [pid 5222] <... rseq resumed>) = 0 [pid 5221] rt_sigprocmask(SIG_SETMASK, [], [pid 5219] <... mount resumed>) = 0 [pid 5215] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] set_robust_list(0x7f96081d89a0, 24 [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5219] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5222] <... set_robust_list resumed>) = 0 [pid 5221] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... openat resumed>) = 3 [pid 5222] rt_sigprocmask(SIG_SETMASK, [], [pid 5221] <... futex resumed>) = 0 [pid 5219] chdir("./file1" [pid 5222] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5221] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5219] <... chdir resumed>) = 0 [pid 5222] memfd_create("syzkaller", 0 [pid 5219] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5220] close(3 [pid 5219] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5222] <... memfd_create resumed>) = 3 [pid 5219] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5219] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5218] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5218] <... futex resumed>) = 0 [pid 5222] <... mmap resumed>) = 0x7f95ffc00000 [pid 5219] creat("./file0", 000 [pid 5218] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5220] <... close resumed>) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] <... creat resumed>) = 4 [pid 5219] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5218] <... futex resumed>) = 0 [pid 5218] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [ 83.512726][ T5217] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.527523][ T5216] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5219] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5218] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5222] <... write resumed>) = 524288 [pid 5220] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5214] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5220] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5214] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5220] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5214] <... futex resumed>) = 0 [pid 5220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5214] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5220] <... mmap resumed>) = 0x7f96081b8000 [pid 5214] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5220] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5214] <... mprotect resumed>) = 0 [pid 5220] <... mprotect resumed>) = 0 [pid 5215] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [ 83.556811][ T5219] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.563024][ T5217] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.578960][ T5216] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.579710][ T5222] loop0: detected capacity change from 0 to 1024 [ 83.591553][ T5217] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5214] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5220] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5215] <... futex resumed>) = 0 [pid 5214] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5220] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5215] <... mmap resumed>) = 0x7f9608197000 [pid 5214] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5223 attached [pid 5215] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5223] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5220] <... clone3 resumed> => {parent_tid=[5223]}, 88) = 5223 [pid 5215] <... mprotect resumed>) = 0 [pid 5220] rt_sigprocmask(SIG_SETMASK, [], [pid 5223] <... rseq resumed>) = 0 [pid 5223] set_robust_list(0x7f96081d89a0, 24 [pid 5220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5215] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5214] <... clone3 resumed> => {parent_tid=[5224]}, 88) = 5224 [pid 5223] <... set_robust_list resumed>) = 0 [pid 5220] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5218] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] rt_sigprocmask(SIG_SETMASK, [], [pid 5215] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5214] rt_sigprocmask(SIG_SETMASK, [], [pid 5223] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5214] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5225 attached [pid 5218] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5223] memfd_create("syzkaller", 0 [pid 5214] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] <... clone3 resumed> => {parent_tid=[5225]}, 88) = 5225 ./strace-static-x86_64: Process 5224 attached [pid 5225] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5223] <... memfd_create resumed>) = 3 [pid 5218] <... mmap resumed>) = 0x7f9608197000 [pid 5215] rt_sigprocmask(SIG_SETMASK, [], [pid 5214] <... futex resumed>) = 0 [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5215] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5225] <... rseq resumed>) = 0 [pid 5224] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5223] <... mmap resumed>) = 0x7f95ffc00000 [pid 5218] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5215] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5214] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... rseq resumed>) = 0 [pid 5218] <... mprotect resumed>) = 0 [pid 5215] <... futex resumed>) = 0 [pid 5224] set_robust_list(0x7f96081b79a0, 24 [pid 5222] <... ioctl resumed>) = 0 [pid 5218] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5215] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... set_robust_list resumed>) = 0 [pid 5222] close(3 [pid 5218] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5224] rt_sigprocmask(SIG_SETMASK, [], [pid 5222] <... close resumed>) = 0 [pid 5224] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5218] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5224] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5222] close(4 [pid 5224] <... open resumed>) = 5 [pid 5222] <... close resumed>) = 0 [pid 5224] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5222] mkdir("./file1", 0777 [pid 5224] <... futex resumed>) = 1 [pid 5222] <... mkdir resumed>) = 0 [pid 5214] <... futex resumed>) = 0 [ 83.601921][ T5216] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.602258][ T5219] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.623292][ T5217] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.637202][ T5216] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5224] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5218] <... clone3 resumed> => {parent_tid=[5226]}, 88) = 5226 ./strace-static-x86_64: Process 5226 attached [pid 5225] set_robust_list(0x7f96081b79a0, 24 [pid 5218] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5218] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... set_robust_list resumed>) = 0 [pid 5218] <... futex resumed>) = 0 [pid 5226] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5226] <... rseq resumed>) = 0 [pid 5218] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5226] set_robust_list(0x7f96081b79a0, 24 [pid 5225] rt_sigprocmask(SIG_SETMASK, [], [pid 5223] <... write resumed>) = 524288 [pid 5220] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5226] <... set_robust_list resumed>) = 0 [pid 5225] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 83.645729][ T29] audit: type=1800 audit(1715660556.302:43): pid=5224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 83.683106][ T5217] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.686182][ T5219] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.690631][ T5217] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5223] munmap(0x7f95ffc00000, 138412032 [pid 5226] rt_sigprocmask(SIG_SETMASK, [], [pid 5223] <... munmap resumed>) = 0 [pid 5215] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5226] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5223] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5226] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5223] <... openat resumed>) = 4 [pid 5223] ioctl(4, LOOP_SET_FD, 3 [pid 5225] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5223] <... ioctl resumed>) = 0 [pid 5218] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] close(3) = 0 [ 83.710294][ T5216] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.719800][ T5223] loop1: detected capacity change from 0 to 1024 [ 83.727269][ T5216] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.737315][ T29] audit: type=1800 audit(1715660556.392:44): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5223] close(4 [pid 5225] <... open resumed>) = 5 [pid 5223] <... close resumed>) = 0 [pid 5222] <... mount resumed>) = 0 [pid 5217] <... write resumed>) = 53248 [pid 5216] <... write resumed>) = 53248 [pid 5225] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] mkdir("./file1", 0777 [pid 5217] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5216] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5215] exit_group(0 [pid 5225] <... futex resumed>) = 0 [pid 5225] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5217] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = ? [pid 5216] <... futex resumed>) = ? [pid 5215] <... exit_group resumed>) = ? [pid 5217] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5225] +++ exited with 0 +++ [pid 5222] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5222] chdir("./file1" [pid 5223] <... mkdir resumed>) = 0 [pid 5222] <... chdir resumed>) = 0 [pid 5226] <... open resumed>) = 5 [pid 5216] +++ exited with 0 +++ [pid 5215] +++ exited with 0 +++ [pid 5214] exit_group(0 [pid 5226] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = ? [pid 5223] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5222] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5217] <... futex resumed>) = ? [pid 5214] <... exit_group resumed>) = ? [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5226] <... futex resumed>) = 0 [pid 5224] +++ exited with 0 +++ [pid 5222] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5217] +++ exited with 0 +++ [pid 5214] +++ exited with 0 +++ [ 83.763507][ T29] audit: type=1800 audit(1715660556.412:45): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 83.763751][ T5219] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.800079][ T5219] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5226] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5222] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5222] <... futex resumed>) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5083] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5222] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5221] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5222] creat("./file0", 000 [pid 5221] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 3 [pid 5222] <... creat resumed>) = 4 [pid 5219] <... write resumed>) = 53248 [pid 5083] newfstatat(3, "", [pid 5222] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5219] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5218] exit_group(0 [pid 5226] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = 0 [pid 5221] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5219] <... futex resumed>) = ? [pid 5218] <... exit_group resumed>) = ? [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5223] <... mount resumed>) = 0 [pid 5226] +++ exited with 0 +++ [pid 5222] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5221] <... futex resumed>) = 0 [pid 5219] +++ exited with 0 +++ [pid 5083] getdents64(3, [pid 5223] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5221] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5218] +++ exited with 0 +++ [pid 5085] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5223] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] chdir("./file1" [pid 5085] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5083] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5223] <... chdir resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5085] newfstatat(3, "", [pid 5083] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5223] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5223] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] getdents64(3, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] unlink("./8/binderfs" [pid 5223] <... futex resumed>) = 1 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... unlink resumed>) = 0 [pid 5223] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... futex resumed>) = 0 [pid 5085] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(3, "", [pid 5083] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5220] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 83.817245][ T5219] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.837730][ T5222] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.846084][ T5222] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5220] <... futex resumed>) = 1 [pid 5085] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5084] getdents64(3, [pid 5083] <... umount2 resumed>) = 0 [pid 5220] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./8/binderfs") = 0 [pid 5084] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5223] creat("./file0", 000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5084] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] unlink("./8/binderfs" [pid 5084] <... openat resumed>) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, [pid 5223] <... creat resumed>) = 4 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 5085] <... unlink resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5223] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5085] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] close(4 [pid 5223] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... close resumed>) = 0 [pid 5220] <... futex resumed>) = 0 [pid 5084] rmdir("./8/file1") = 0 [pid 5222] <... write resumed>) = 53248 [pid 5221] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5220] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] <... futex resumed>) = 0 [pid 5222] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... futex resumed>) = 1 [pid 5085] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [ 83.864360][ T5222] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.871836][ T5222] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.883641][ T5222] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.893725][ T5222] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5223] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5222] <... futex resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5220] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(3 [pid 5083] <... openat resumed>) = 4 [pid 5222] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] newfstatat(AT_FDCWD, "./8/file1", [pid 5084] <... close resumed>) = 0 [pid 5083] newfstatat(4, "", [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] rmdir("./8" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... rmdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5221] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] mkdir("./9", 0777 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5221] <... mmap resumed>) = 0x7f9608197000 [pid 5085] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... openat resumed>) = 4 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5221] <... mprotect resumed>) = 0 [pid 5085] newfstatat(4, "", [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5221] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] close(4 [pid 5221] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] getdents64(4, [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... close resumed>) = 0 [pid 5221] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... openat resumed>) = 3 [pid 5083] rmdir("./8/file1"./strace-static-x86_64: Process 5227 attached [pid 5085] getdents64(4, [pid 5083] <... rmdir resumed>) = 0 [pid 5221] <... clone3 resumed> => {parent_tid=[5227]}, 88) = 5227 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5221] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] close(4 [pid 5083] getdents64(3, [pid 5221] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5221] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] rmdir("./8/file1" [pid 5221] <... futex resumed>) = 0 [pid 5083] close(3 [pid 5221] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./8" [pid 5085] getdents64(3, [pid 5083] <... rmdir resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./8" [pid 5227] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5085] <... rmdir resumed>) = 0 [pid 5083] mkdir("./9", 0777 [pid 5227] <... rseq resumed>) = 0 [pid 5227] set_robust_list(0x7f96081b79a0, 24 [pid 5083] <... mkdir resumed>) = 0 [pid 5227] <... set_robust_list resumed>) = 0 [pid 5227] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] mkdir("./9", 0777 [pid 5227] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] <... openat resumed>) = 3 [ 83.918464][ T5223] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.925886][ T5223] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.936193][ T5223] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.945443][ T5223] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.958226][ T5223] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5227] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 5220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5220] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5220] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5220] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5227] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5221] <... futex resumed>) = 0 [pid 5220] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5227] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5221] exit_group(0 [pid 5227] <... futex resumed>) = ? [pid 5222] <... futex resumed>) = ? [pid 5221] <... exit_group resumed>) = ? [pid 5220] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5228 attached [pid 5223] <... write resumed>) = 53248 [pid 5222] +++ exited with 0 +++ [pid 5228] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5227] +++ exited with 0 +++ [pid 5223] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] +++ exited with 0 +++ [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... clone3 resumed> => {parent_tid=[5228]}, 88) = 5228 [pid 5220] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5220] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5228] <... rseq resumed>) = 0 [pid 5220] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] set_robust_list(0x7f96081b79a0, 24 [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5228] <... set_robust_list resumed>) = 0 [pid 5228] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5228] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... open resumed>) = 5 [pid 5081] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5081] newfstatat(3, "", [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, [pid 5083] close(3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [ 83.966496][ T5223] hfsplus: request for non-existent node 16777216 in B*Tree [ 83.975362][ T29] audit: type=1800 audit(1715660556.642:46): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5083] <... close resumed>) = 0 [pid 5081] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5228] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5228] <... futex resumed>) = 1 [pid 5081] newfstatat(AT_FDCWD, "./8/binderfs", [pid 5228] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] <... futex resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5220] exit_group(0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5229 [pid 5081] unlink("./8/binderfs") = 0 [pid 5228] <... futex resumed>) = ? [pid 5223] <... futex resumed>) = ? [pid 5220] <... exit_group resumed>) = ? [pid 5081] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5228] +++ exited with 0 +++ [pid 5223] +++ exited with 0 +++ [pid 5220] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5085] <... ioctl resumed>) = 0 [pid 5082] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] close(3 [pid 5082] newfstatat(3, "", [pid 5085] <... close resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5229 attached [pid 5082] unlink("./9/binderfs") = 0 ./strace-static-x86_64: Process 5230 attached ./strace-static-x86_64: Process 5231 attached [pid 5229] set_robust_list(0x5555939db6a0, 24 [pid 5230] set_robust_list(0x5555939db6a0, 24 [pid 5231] set_robust_list(0x5555939db6a0, 24 [pid 5229] <... set_robust_list resumed>) = 0 [pid 5230] <... set_robust_list resumed>) = 0 [pid 5229] chdir("./9" [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5231 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5230 [pid 5082] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5231] <... set_robust_list resumed>) = 0 [pid 5229] <... chdir resumed>) = 0 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5230] chdir("./9" [pid 5229] setpgid(0, 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5231] chdir("./9" [pid 5230] <... chdir resumed>) = 0 [pid 5231] <... chdir resumed>) = 0 [pid 5229] <... setpgid resumed>) = 0 [pid 5082] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5230] <... prctl resumed>) = 0 [pid 5231] <... prctl resumed>) = 0 [pid 5229] <... openat resumed>) = 3 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] setpgid(0, 0 [pid 5231] setpgid(0, 0 [pid 5082] newfstatat(AT_FDCWD, "./9/file1", [pid 5230] <... setpgid resumed>) = 0 [pid 5231] <... setpgid resumed>) = 0 [pid 5229] write(3, "1000", 4 [pid 5081] newfstatat(AT_FDCWD, "./8/file1", [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5229] <... write resumed>) = 4 [pid 5230] <... openat resumed>) = 3 [pid 5231] <... openat resumed>) = 3 [pid 5229] close(3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5230] write(3, "1000", 4 [pid 5082] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5230] <... write resumed>) = 4 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5230] close(3 [pid 5082] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5231] write(3, "1000", 4 [pid 5229] <... close resumed>) = 0 [pid 5231] <... write resumed>) = 4 [pid 5229] symlink("/dev/binderfs", "./binderfs" [pid 5082] <... openat resumed>) = 4 [pid 5230] <... close resumed>) = 0 [pid 5231] close(3 [pid 5229] <... symlink resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] symlink("/dev/binderfs", "./binderfs" [pid 5231] <... close resumed>) = 0 [pid 5229] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] newfstatat(4, "", [pid 5081] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5231] symlink("/dev/binderfs", "./binderfs" [pid 5229] <... futex resumed>) = 0 [pid 5230] <... symlink resumed>) = 0 [pid 5231] <... symlink resumed>) = 0 [pid 5229] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5231] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5082] getdents64(4, [pid 5081] newfstatat(4, "", [pid 5231] <... futex resumed>) = 0 [pid 5229] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5231] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5230] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5229] <... mmap resumed>) = 0x7f96081b8000 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5230] <... futex resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5229] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5230] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5229] <... mprotect resumed>) = 0 [pid 5082] getdents64(4, [pid 5230] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5231] <... mmap resumed>) = 0x7f96081b8000 [pid 5229] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5230] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] close(4 [pid 5230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] getdents64(4, [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5230] <... mmap resumed>) = 0x7f96081b8000 [pid 5229] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] rmdir("./9/file1" [pid 5081] close(4 [pid 5230] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5081] <... close resumed>) = 0 [pid 5230] <... mprotect resumed>) = 0 [pid 5231] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5081] rmdir("./8/file1" [pid 5231] <... mprotect resumed>) = 0 [pid 5229] <... clone3 resumed> => {parent_tid=[5232]}, 88) = 5232 ./strace-static-x86_64: Process 5232 attached [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5229] rt_sigprocmask(SIG_SETMASK, [], [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5229] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5231] <... clone3 resumed> => {parent_tid=[5233]}, 88) = 5233 [pid 5229] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] <... rmdir resumed>) = 0 [pid 5232] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5233 attached [pid 5232] <... rseq resumed>) = 0 [pid 5230] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5231] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] getdents64(3, [pid 5081] getdents64(3, [pid 5233] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5232] set_robust_list(0x7f96081d89a0, 24 [pid 5230] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] <... futex resumed>) = 0 [pid 5233] <... rseq resumed>) = 0 [pid 5232] <... set_robust_list resumed>) = 0 [pid 5230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5231] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5233] set_robust_list(0x7f96081d89a0, 24 [pid 5232] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5234 attached [pid 5233] <... set_robust_list resumed>) = 0 [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] close(3 [pid 5081] close(3 [pid 5234] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] memfd_create("syzkaller", 0 [pid 5230] <... clone3 resumed> => {parent_tid=[5234]}, 88) = 5234 [pid 5082] <... close resumed>) = 0 [pid 5234] <... rseq resumed>) = 0 [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] <... memfd_create resumed>) = 3 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] rmdir("./9" [pid 5081] <... close resumed>) = 0 [pid 5234] set_robust_list(0x7f96081d89a0, 24 [pid 5233] memfd_create("syzkaller", 0 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5230] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] rmdir("./8" [pid 5234] <... set_robust_list resumed>) = 0 [pid 5233] <... memfd_create resumed>) = 3 [pid 5232] <... mmap resumed>) = 0x7f95ffc00000 [pid 5230] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5230] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5234] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] <... mmap resumed>) = 0x7f95ffc00000 [pid 5230] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] mkdir("./10", 0777 [pid 5234] memfd_create("syzkaller", 0 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5234] <... memfd_create resumed>) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] mkdir("./9", 0777) = 0 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5233] <... write resumed>) = 524288 [pid 5232] <... write resumed>) = 524288 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5233] munmap(0x7f95ffc00000, 138412032 [pid 5232] munmap(0x7f95ffc00000, 138412032 [pid 5082] <... openat resumed>) = 3 [pid 5081] <... openat resumed>) = 3 [pid 5233] <... munmap resumed>) = 0 [pid 5232] <... munmap resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5232] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5234] <... write resumed>) = 524288 [pid 5234] munmap(0x7f95ffc00000, 138412032 [pid 5233] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5234] <... munmap resumed>) = 0 [pid 5232] <... ioctl resumed>) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5232] close(3 [pid 5233] <... ioctl resumed>) = 0 [pid 5234] <... openat resumed>) = 4 [pid 5232] <... close resumed>) = 0 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5233] close(3 [pid 5232] close(4 [pid 5233] <... close resumed>) = 0 [pid 5233] close(4 [pid 5234] <... ioctl resumed>) = 0 [pid 5233] <... close resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5234] close(3 [pid 5233] mkdir("./file1", 0777 [pid 5081] close(3) = 0 [pid 5233] <... mkdir resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5233] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] close(3 [pid 5234] <... close resumed>) = 0 [pid 5232] mkdir("./file1", 0777 [pid 5082] <... close resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5235 ./strace-static-x86_64: Process 5235 attached [pid 5234] close(4 [pid 5232] <... mkdir resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5235] set_robust_list(0x5555939db6a0, 24 [pid 5234] <... close resumed>) = 0 [pid 5232] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5235] <... set_robust_list resumed>) = 0 [pid 5234] mkdir("./file1", 0777 [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5235] chdir("./9" [pid 5234] <... mkdir resumed>) = 0 [pid 5233] <... openat resumed>) = 3 [pid 5235] <... chdir resumed>) = 0 [pid 5234] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5233] chdir("./file1"./strace-static-x86_64: Process 5236 attached ) = 0 [pid 5236] set_robust_list(0x5555939db6a0, 24 [ 84.191368][ T5232] loop3: detected capacity change from 0 to 1024 [ 84.199525][ T5233] loop4: detected capacity change from 0 to 1024 [ 84.220916][ T5234] loop2: detected capacity change from 0 to 1024 [pid 5233] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5236 [pid 5236] <... set_robust_list resumed>) = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5236] chdir("./10" [pid 5233] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5236] <... chdir resumed>) = 0 [pid 5233] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5231] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5231] <... futex resumed>) = 0 [pid 5236] <... prctl resumed>) = 0 [pid 5233] creat("./file0", 000 [pid 5231] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] setpgid(0, 0 [pid 5235] <... prctl resumed>) = 0 [pid 5233] <... creat resumed>) = 4 [pid 5236] <... setpgid resumed>) = 0 [pid 5235] setpgid(0, 0 [pid 5233] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5235] <... setpgid resumed>) = 0 [pid 5233] <... futex resumed>) = 1 [pid 5231] <... futex resumed>) = 0 [pid 5233] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5231] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] <... openat resumed>) = 3 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5231] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] write(3, "1000", 4) = 4 [pid 5235] <... openat resumed>) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3 [pid 5236] close(3 [pid 5234] <... mount resumed>) = 0 [pid 5232] <... mount resumed>) = 0 [pid 5235] <... close resumed>) = 0 [pid 5234] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5232] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5234] <... openat resumed>) = 3 [pid 5236] <... close resumed>) = 0 [pid 5234] chdir("./file1" [pid 5235] symlink("/dev/binderfs", "./binderfs" [pid 5232] chdir("./file1" [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] <... symlink resumed>) = 0 [pid 5234] <... chdir resumed>) = 0 [pid 5232] <... chdir resumed>) = 0 [pid 5235] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5234] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5232] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5235] <... futex resumed>) = 0 [pid 5234] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5236] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5234] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5236] <... futex resumed>) = 0 [pid 5235] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5234] <... futex resumed>) = 1 [pid 5232] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = 0 [pid 5236] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5234] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] <... futex resumed>) = 1 [pid 5230] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5236] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... futex resumed>) = 0 [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5229] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5231] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] <... futex resumed>) = 0 [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 84.284484][ T5233] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.291922][ T5233] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.299754][ T5233] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5231] <... futex resumed>) = 0 [pid 5229] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5234] creat("./file0", 000 [pid 5232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5236] <... mmap resumed>) = 0x7f96081b8000 [pid 5231] <... mmap resumed>) = 0x7f9608197000 [pid 5236] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5231] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5236] <... mprotect resumed>) = 0 [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5232] creat("./file0", 000 [pid 5236] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] <... mprotect resumed>) = 0 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5232] <... creat resumed>) = 4 [pid 5235] <... mmap resumed>) = 0x7f96081b8000 [pid 5234] <... creat resumed>) = 4 [pid 5232] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5232] <... futex resumed>) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5229] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5235] <... mprotect resumed>) = 0 [pid 5229] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5237 attached [pid 5236] <... clone3 resumed> => {parent_tid=[5237]}, 88) = 5237 [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5237] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5236] rt_sigprocmask(SIG_SETMASK, [], [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5229] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... rseq resumed>) = 0 [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5235] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5238 attached [pid 5237] set_robust_list(0x7f96081d89a0, 24 [pid 5236] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5234] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... clone3 resumed> => {parent_tid=[5238]}, 88) = 5238 [pid 5238] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5237] <... set_robust_list resumed>) = 0 [pid 5236] <... futex resumed>) = 0 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5238] <... rseq resumed>) = 0 [pid 5237] rt_sigprocmask(SIG_SETMASK, [], [pid 5236] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5238] set_robust_list(0x7f96081b79a0, 24 [pid 5237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5234] <... futex resumed>) = 1 [pid 5231] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] memfd_create("syzkaller", 0 [pid 5231] <... futex resumed>) = 0 [pid 5238] <... set_robust_list resumed>) = 0 [pid 5237] <... memfd_create resumed>) = 3 [pid 5231] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5238] rt_sigprocmask(SIG_SETMASK, [], [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5238] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5237] <... mmap resumed>) = 0x7f95ffc00000 [ 84.353053][ T5233] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.378037][ T5232] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.382551][ T5233] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 5239 attached [pid 5238] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5235] <... clone3 resumed> => {parent_tid=[5239]}, 88) = 5239 [pid 5234] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5230] <... futex resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], [pid 5230] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5234] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = 1 [pid 5234] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5239] <... rseq resumed>) = 0 [pid 5235] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] set_robust_list(0x7f96081d89a0, 24 [pid 5235] <... futex resumed>) = 0 [pid 5239] <... set_robust_list resumed>) = 0 [ 84.402730][ T5233] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.416172][ T5234] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.419536][ T5232] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.431947][ T5234] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.432172][ T5232] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5235] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5237] <... write resumed>) = 524288 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], [pid 5238] <... open resumed>) = 5 [pid 5233] <... write resumed>) = 53248 [pid 5229] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5238] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] memfd_create("syzkaller", 0 [pid 5237] munmap(0x7f95ffc00000, 138412032 [pid 5230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] exit_group(0 [pid 5229] <... futex resumed>) = 0 [pid 5229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5230] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... memfd_create resumed>) = 3 [pid 5237] <... munmap resumed>) = 0 [pid 5233] <... futex resumed>) = ? [pid 5230] <... futex resumed>) = 0 [pid 5231] <... exit_group resumed>) = ? [pid 5229] <... mmap resumed>) = 0x7f9608197000 [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5229] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5238] <... futex resumed>) = ? [pid 5233] +++ exited with 0 +++ [pid 5230] <... mmap resumed>) = 0x7f9608197000 [pid 5229] <... mprotect resumed>) = 0 [pid 5239] <... mmap resumed>) = 0x7f95ffc00000 [pid 5230] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5229] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5238] +++ exited with 0 +++ [pid 5237] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5231] +++ exited with 0 +++ [pid 5237] <... openat resumed>) = 4 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5237] ioctl(4, LOOP_SET_FD, 3 [pid 5229] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5230] <... mprotect resumed>) = 0 [pid 5230] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5229] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5230] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5240 attached [pid 5230] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5240] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5229] <... clone3 resumed> => {parent_tid=[5240]}, 88) = 5240 [pid 5240] set_robust_list(0x7f96081b79a0, 24 [pid 5230] <... clone3 resumed> => {parent_tid=[5241]}, 88) = 5241 [pid 5229] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] <... set_robust_list resumed>) = 0 [pid 5230] rt_sigprocmask(SIG_SETMASK, [], [pid 5229] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] rt_sigprocmask(SIG_SETMASK, [], [pid 5230] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5241 attached [pid 5241] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5230] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5229] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... rseq resumed>) = 0 [pid 5240] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5241] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5241] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5237] <... ioctl resumed>) = 0 [pid 5237] close(3) = 0 [ 84.439947][ T5234] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.447908][ T5232] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.470936][ T5237] loop1: detected capacity change from 0 to 1024 [ 84.482523][ T5232] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.487141][ T5234] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5239] <... write resumed>) = 524288 [pid 5237] close(4 [pid 5230] <... futex resumed>) = 0 [pid 5229] <... futex resumed>) = 0 [pid 5085] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5237] <... close resumed>) = 0 [pid 5237] mkdir("./file1", 0777) = 0 [pid 5237] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5229] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5239] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5085] newfstatat(3, "", [pid 5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5239] <... openat resumed>) = 4 [pid 5085] getdents64(3, [pid 5239] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5239] <... ioctl resumed>) = 0 [pid 5237] <... mount resumed>) = 0 [pid 5085] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5239] close(3) = 0 [pid 5237] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5239] close(4 [pid 5237] <... openat resumed>) = 3 [pid 5239] <... close resumed>) = 0 [pid 5237] chdir("./file1" [pid 5085] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5237] <... chdir resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5085] unlink("./9/binderfs" [pid 5237] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5239] mkdir("./file1", 0777 [pid 5237] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... unlink resumed>) = 0 [pid 5237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = 0 [pid 5237] creat("./file0", 000 [pid 5236] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... mkdir resumed>) = 0 [pid 5237] <... creat resumed>) = 4 [pid 5085] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5237] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5237] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5236] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 84.496920][ T5232] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.518048][ T5239] loop0: detected capacity change from 0 to 1024 [ 84.520577][ T5234] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.539618][ T5234] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5239] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5236] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] <... open resumed>) = 5 [pid 5240] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5229] <... futex resumed>) = 0 [pid 5240] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5232] <... write resumed>) = 53248 [pid 5232] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5229] exit_group(0 [pid 5240] <... futex resumed>) = ? [pid 5232] <... futex resumed>) = ? [pid 5230] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5229] <... exit_group resumed>) = ? [pid 5240] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5229] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5241] <... open resumed>) = 5 [pid 5241] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5241] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5241] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5239] <... mount resumed>) = 0 [pid 5084] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5234] <... write resumed>) = 53248 [pid 5234] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] exit_group(0 [pid 5084] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5230] <... exit_group resumed>) = ? [pid 5241] <... futex resumed>) = ? [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5241] +++ exited with 0 +++ [pid 5084] unlink("./9/binderfs") = 0 [pid 5234] <... futex resumed>) = ? [pid 5239] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5234] +++ exited with 0 +++ [pid 5230] +++ exited with 0 +++ [pid 5085] <... umount2 resumed>) = 0 [pid 5084] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5239] <... openat resumed>) = 3 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5083] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5239] chdir("./file1" [pid 5085] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(3, "", [pid 5239] <... chdir resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./9/file1", [pid 5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5239] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [ 84.551239][ T5237] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.571137][ T5237] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] getdents64(3, [pid 5239] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5239] <... futex resumed>) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5239] creat("./file0", 000 [pid 5235] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] <... futex resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5235] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5239] <... creat resumed>) = 4 [pid 5085] <... openat resumed>) = 4 [pid 5083] unlink("./9/binderfs" [pid 5085] newfstatat(4, "", [pid 5083] <... unlink resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, [pid 5083] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4 [pid 5239] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] rmdir("./9/file1" [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5239] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5236] <... mmap resumed>) = 0x7f9608197000 [pid 5236] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... rmdir resumed>) = 0 [pid 5236] <... mprotect resumed>) = 0 [pid 5085] getdents64(3, [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5236] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] close(3 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5242 attached [pid 5236] <... clone3 resumed> => {parent_tid=[5242]}, 88) = 5242 [pid 5242] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5085] rmdir("./9" [pid 5084] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5236] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] newfstatat(AT_FDCWD, "./9/file1", [pid 5236] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... rmdir resumed>) = 0 [ 84.594276][ T5237] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.622781][ T5239] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.632090][ T5237] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... rseq resumed>) = 0 [pid 5085] mkdir("./10", 0777 [pid 5084] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./9/file1", [pid 5242] set_robust_list(0x7f96081b79a0, 24 [pid 5236] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... set_robust_list resumed>) = 0 [pid 5236] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5083] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5242] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... openat resumed>) = 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5242] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] newfstatat(4, "", [pid 5083] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5242] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5084] getdents64(4, [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./9/file1" [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... rmdir resumed>) = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] close(3 [pid 5085] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5083] rmdir("./9" [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./10", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5235] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5235] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] close(4 [pid 5242] <... open resumed>) = 5 [pid 5235] <... mmap resumed>) = 0x7f9608197000 [pid 5084] <... close resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5242] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5084] rmdir("./9/file1" [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5235] <... mprotect resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5243]}, 88) = 5243 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5235] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5235] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5242] <... futex resumed>) = 1 [pid 5242] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5243 attached [pid 5237] <... write resumed>) = 53248 [pid 5237] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... rmdir resumed>) = 0 [pid 5243] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5084] getdents64(3, [pid 5243] set_robust_list(0x7f96081b79a0, 24 [pid 5236] exit_group(0 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5243] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5243] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5243] <... open resumed>) = 5 [pid 5243] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5242] <... futex resumed>) = ? [pid 5237] <... futex resumed>) = ? [pid 5236] <... exit_group resumed>) = ? [pid 5084] close(3 [pid 5243] <... futex resumed>) = 1 [pid 5242] +++ exited with 0 +++ [pid 5237] +++ exited with 0 +++ [pid 5235] <... futex resumed>) = 0 [pid 5243] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5082] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5082] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... close resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5084] rmdir("./9") = 0 [pid 5084] mkdir("./10", 0777) = 0 [ 84.645630][ T5239] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.653533][ T5239] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.661056][ T5237] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.670500][ T5237] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.679698][ T5239] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] <... ioctl resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5082] getdents64(3, [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./10/binderfs" [pid 5085] close(3 [pid 5082] <... unlink resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5082] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5244 attached [pid 5244] set_robust_list(0x5555939db6a0, 24 [pid 5239] <... write resumed>) = 53248 [pid 5083] <... ioctl resumed>) = 0 [pid 5239] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5244 [pid 5239] <... futex resumed>) = 0 [pid 5235] exit_group(0 [pid 5239] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] <... futex resumed>) = ? [pid 5239] <... futex resumed>) = ? [pid 5235] <... exit_group resumed>) = ? [pid 5244] <... set_robust_list resumed>) = 0 [pid 5243] +++ exited with 0 +++ [pid 5239] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5083] close(3 [pid 5082] <... umount2 resumed>) = 0 [pid 5244] chdir("./10") = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5245 attached [pid 5244] <... prctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5245 [pid 5082] newfstatat(AT_FDCWD, "./10/file1", [pid 5244] setpgid(0, 0 [pid 5245] set_robust_list(0x5555939db6a0, 24 [pid 5244] <... setpgid resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] newfstatat(3, "", [pid 5082] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5245] <... set_robust_list resumed>) = 0 [pid 5244] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(3, [pid 5082] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5244] <... openat resumed>) = 3 [pid 5081] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] chdir("./10" [pid 5244] write(3, "1000", 4 [pid 5082] newfstatat(4, "", [ 84.704574][ T5239] hfsplus: request for non-existent node 16777216 in B*Tree [ 84.718752][ T5239] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] newfstatat(AT_FDCWD, "./9/binderfs", [pid 5245] <... chdir resumed>) = 0 [pid 5244] <... write resumed>) = 4 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5244] close(3 [pid 5082] getdents64(4, [pid 5081] unlink("./9/binderfs" [pid 5245] <... prctl resumed>) = 0 [pid 5244] <... close resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... unlink resumed>) = 0 [pid 5245] setpgid(0, 0 [pid 5244] symlink("/dev/binderfs", "./binderfs" [pid 5084] close(3 [pid 5081] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5245] <... setpgid resumed>) = 0 [pid 5244] <... symlink resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] getdents64(4, [pid 5081] <... umount2 resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5244] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5246 attached [pid 5245] <... openat resumed>) = 3 [pid 5081] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5246] set_robust_list(0x5555939db6a0, 24 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5246 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] <... set_robust_list resumed>) = 0 [pid 5246] chdir("./10" [pid 5245] write(3, "1000", 4 [pid 5244] <... futex resumed>) = 0 [pid 5082] close(4 [pid 5081] newfstatat(AT_FDCWD, "./9/file1", [pid 5246] <... chdir resumed>) = 0 [pid 5245] <... write resumed>) = 4 [pid 5082] <... close resumed>) = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5245] close(3 [pid 5244] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5082] rmdir("./10/file1" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5246] <... prctl resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5244] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5246] setpgid(0, 0 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5244] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5246] <... setpgid resumed>) = 0 [pid 5245] <... symlink resumed>) = 0 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] getdents64(3, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5246] <... openat resumed>) = 3 [pid 5245] <... futex resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5246] write(3, "1000", 4 [pid 5245] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5244] <... mmap resumed>) = 0x7f96081b8000 [pid 5082] close(3 [pid 5081] <... openat resumed>) = 4 [pid 5246] <... write resumed>) = 4 [pid 5245] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5244] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... close resumed>) = 0 [pid 5081] newfstatat(4, "", [pid 5246] close(3 [pid 5245] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5246] <... close resumed>) = 0 [pid 5244] <... mprotect resumed>) = 0 [pid 5081] getdents64(4, [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5246] <... symlink resumed>) = 0 [pid 5081] getdents64(4, [pid 5246] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5244] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] close(4 [pid 5246] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 5247 attached [pid 5246] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] rmdir("./10" [pid 5081] rmdir("./9/file1" [pid 5247] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5246] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5247] <... rseq resumed>) = 0 [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] <... mmap resumed>) = 0x7f96081b8000 [pid 5244] <... clone3 resumed> => {parent_tid=[5247]}, 88) = 5247 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5247] set_robust_list(0x7f96081d89a0, 24 [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5245] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] mkdir("./11", 0777 [pid 5247] <... set_robust_list resumed>) = 0 [pid 5246] <... mmap resumed>) = 0x7f96081b8000 [pid 5245] <... mprotect resumed>) = 0 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] getdents64(3, [pid 5247] rt_sigprocmask(SIG_SETMASK, [], [pid 5246] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5244] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5247] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] <... mprotect resumed>) = 0 [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5244] <... futex resumed>) = 0 [pid 5247] memfd_create("syzkaller", 0 [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5244] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] close(3 [pid 5247] <... memfd_create resumed>) = 3 [pid 5246] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] <... mkdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5248 attached [pid 5247] <... mmap resumed>) = 0x7f95ffc00000 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] rmdir("./9"./strace-static-x86_64: Process 5249 attached [pid 5248] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5246] <... clone3 resumed> => {parent_tid=[5249]}, 88) = 5249 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5246] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5246] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] mkdir("./10", 0777 [pid 5249] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5248] <... rseq resumed>) = 0 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5245] <... clone3 resumed> => {parent_tid=[5248]}, 88) = 5248 [pid 5082] <... openat resumed>) = 3 [pid 5249] <... rseq resumed>) = 0 [pid 5248] set_robust_list(0x7f96081d89a0, 24 [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] <... mkdir resumed>) = 0 [pid 5249] set_robust_list(0x7f96081d89a0, 24 [pid 5248] <... set_robust_list resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5249] <... set_robust_list resumed>) = 0 [pid 5248] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] rt_sigprocmask(SIG_SETMASK, [], [pid 5248] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5249] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] memfd_create("syzkaller", 0 [pid 5081] <... openat resumed>) = 3 [pid 5249] <... memfd_create resumed>) = 3 [pid 5248] memfd_create("syzkaller", 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5248] <... memfd_create resumed>) = 3 [pid 5249] <... mmap resumed>) = 0x7f95ffc00000 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5247] <... write resumed>) = 524288 [pid 5248] <... mmap resumed>) = 0x7f95ffc00000 [pid 5247] munmap(0x7f95ffc00000, 138412032 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5249] <... write resumed>) = 524288 [pid 5248] <... write resumed>) = 524288 [pid 5247] <... munmap resumed>) = 0 [pid 5248] munmap(0x7f95ffc00000, 138412032 [pid 5247] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5248] <... munmap resumed>) = 0 [pid 5248] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5247] <... openat resumed>) = 4 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... ioctl resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5248] close(3 [pid 5082] close(3 [pid 5248] <... close resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5248] close(4 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5249] munmap(0x7f95ffc00000, 138412032./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x5555939db6a0, 24 [pid 5249] <... munmap resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5250 [pid 5250] <... set_robust_list resumed>) = 0 [pid 5250] chdir("./11") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0 [pid 5249] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5248] <... close resumed>) = 0 [pid 5250] <... setpgid resumed>) = 0 [pid 5249] <... openat resumed>) = 4 [pid 5248] mkdir("./file1", 0777 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... ioctl resumed>) = 0 [pid 5250] <... openat resumed>) = 3 [pid 5250] write(3, "1000", 4 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... mkdir resumed>) = 0 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5250] <... write resumed>) = 4 [pid 5248] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5247] <... ioctl resumed>) = 0 [pid 5250] close(3 [pid 5247] close(3 [pid 5250] <... close resumed>) = 0 [pid 5247] <... close resumed>) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5247] close(4 [pid 5250] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... close resumed>) = 0 [pid 5250] <... futex resumed>) = 0 [pid 5247] mkdir("./file1", 0777 [pid 5250] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5247] <... mkdir resumed>) = 0 [pid 5250] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5250] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5250] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5252 attached => {parent_tid=[5252]}, 88) = 5252 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5251 ./strace-static-x86_64: Process 5251 attached [pid 5252] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5250] rt_sigprocmask(SIG_SETMASK, [], [pid 5252] <... rseq resumed>) = 0 [pid 5251] set_robust_list(0x5555939db6a0, 24 [pid 5250] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5249] <... ioctl resumed>) = 0 [pid 5248] <... mount resumed>) = 0 [pid 5252] set_robust_list(0x7f96081d89a0, 24 [pid 5251] <... set_robust_list resumed>) = 0 [pid 5250] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] close(3 [pid 5248] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5252] <... set_robust_list resumed>) = 0 [pid 5251] chdir("./10" [pid 5250] <... futex resumed>) = 0 [pid 5249] <... close resumed>) = 0 [pid 5248] <... openat resumed>) = 3 [pid 5252] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5249] close(4 [pid 5248] chdir("./file1" [pid 5252] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] <... chdir resumed>) = 0 [pid 5249] <... close resumed>) = 0 [pid 5248] <... chdir resumed>) = 0 [pid 5249] mkdir("./file1", 0777 [pid 5248] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5252] memfd_create("syzkaller", 0 [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5248] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5247] <... mount resumed>) = 0 [ 84.875418][ T5248] loop2: detected capacity change from 0 to 1024 [ 84.876428][ T5247] loop4: detected capacity change from 0 to 1024 [ 84.914336][ T5249] loop3: detected capacity change from 0 to 1024 [pid 5251] <... prctl resumed>) = 0 [pid 5248] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5251] setpgid(0, 0 [pid 5249] <... mkdir resumed>) = 0 [pid 5248] <... futex resumed>) = 1 [pid 5247] <... openat resumed>) = 3 [pid 5245] <... futex resumed>) = 0 [pid 5252] <... memfd_create resumed>) = 3 [pid 5251] <... setpgid resumed>) = 0 [pid 5249] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5248] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5247] chdir("./file1" [pid 5245] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5245] <... futex resumed>) = 0 [pid 5248] creat("./file0", 000 [pid 5245] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5248] <... creat resumed>) = 4 [pid 5247] <... chdir resumed>) = 0 [pid 5252] <... mmap resumed>) = 0x7f95ffc00000 [pid 5251] <... openat resumed>) = 3 [pid 5247] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5251] write(3, "1000", 4 [pid 5249] <... mount resumed>) = 0 [pid 5248] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5248] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5245] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... openat resumed>) = 3 [pid 5249] chdir("./file1" [pid 5248] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5245] <... futex resumed>) = 0 [pid 5251] <... write resumed>) = 4 [pid 5247] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] close(3 [pid 5249] <... chdir resumed>) = 0 [pid 5247] <... futex resumed>) = 1 [pid 5244] <... futex resumed>) = 0 [pid 5251] <... close resumed>) = 0 [pid 5247] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] symlink("/dev/binderfs", "./binderfs" [pid 5247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... symlink resumed>) = 0 [pid 5249] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5247] creat("./file0", 000 [pid 5244] <... futex resumed>) = 0 [pid 5251] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... creat resumed>) = 4 [pid 5251] <... futex resumed>) = 0 [pid 5251] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5247] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5251] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5247] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5251] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5249] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5244] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5253]}, 88) = 5253 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5253 attached ) = 0 [pid 5253] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5251] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5253] <... rseq resumed>) = 0 [pid 5253] set_robust_list(0x7f96081d89a0, 24 [pid 5252] <... write resumed>) = 524288 [pid 5249] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... set_robust_list resumed>) = 0 [pid 5249] <... futex resumed>) = 1 [pid 5247] <... futex resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 1 [pid 5253] rt_sigprocmask(SIG_SETMASK, [], [pid 5247] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5246] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5252] munmap(0x7f95ffc00000, 138412032 [pid 5249] creat("./file0", 000 [pid 5253] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5253] memfd_create("syzkaller", 0 [pid 5252] <... munmap resumed>) = 0 [pid 5246] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... memfd_create resumed>) = 3 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [ 84.989196][ T5248] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.012975][ T5248] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.022354][ T5247] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.030713][ T5248] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5252] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5249] <... creat resumed>) = 4 [pid 5252] <... openat resumed>) = 4 [pid 5252] ioctl(4, LOOP_SET_FD, 3 [pid 5249] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5245] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = 1 [pid 5245] <... futex resumed>) = 0 [pid 5249] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5245] <... mmap resumed>) = 0x7f9608197000 [pid 5246] <... futex resumed>) = 0 [pid 5245] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5246] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] <... mprotect resumed>) = 0 [pid 5249] <... futex resumed>) = 0 [pid 5246] <... futex resumed>) = 1 [pid 5245] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5249] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5245] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5253] <... write resumed>) = 524288 [pid 5246] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5245] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5254 attached => {parent_tid=[5254]}, 88) = 5254 [pid 5254] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [ 85.032195][ T5252] loop1: detected capacity change from 0 to 1024 [pid 5254] set_robust_list(0x7f96081b79a0, 24 [pid 5245] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5253] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5254] <... set_robust_list resumed>) = 0 [pid 5245] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5244] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... ioctl resumed>) = 0 [pid 5252] close(3) = 0 [pid 5252] close(4) = 0 [pid 5252] mkdir("./file1", 0777) = 0 [pid 5252] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5244] <... futex resumed>) = 0 [pid 5254] rt_sigprocmask(SIG_SETMASK, [], [pid 5245] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5245] <... futex resumed>) = 0 [pid 5254] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5246] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5245] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5246] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5246] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5246] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5244] <... mmap resumed>) = 0x7f9608197000 [pid 5246] <... mprotect resumed>) = 0 [ 85.070017][ T5249] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.073051][ T5247] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.083552][ T5248] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.091018][ T5253] loop0: detected capacity change from 0 to 1024 [ 85.094853][ T5248] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.111488][ T5249] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5244] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5246] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5246] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5244] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5255 attached [pid 5253] <... ioctl resumed>) = 0 [pid 5246] <... clone3 resumed> => {parent_tid=[5255]}, 88) = 5255 [pid 5244] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5255] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5253] close(3 [pid 5246] rt_sigprocmask(SIG_SETMASK, [], [pid 5255] <... rseq resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5246] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5255] set_robust_list(0x7f96081b79a0, 24 [pid 5253] close(4 [pid 5246] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... set_robust_list resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5246] <... futex resumed>) = 0 [pid 5255] rt_sigprocmask(SIG_SETMASK, [], [pid 5253] mkdir("./file1", 0777 [pid 5246] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5254] <... open resumed>) = 5 [pid 5253] <... mkdir resumed>) = 0 [pid 5244] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5255] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5244] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5254] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... open resumed>) = 5 [pid 5254] <... futex resumed>) = 1 [pid 5253] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5245] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5256 attached [pid 5254] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] <... mount resumed>) = 0 [pid 5244] <... clone3 resumed> => {parent_tid=[5256]}, 88) = 5256 [ 85.128663][ T5249] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.137662][ T5248] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.139134][ T5247] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.145979][ T5249] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5256] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5248] <... write resumed>) = 53248 [pid 5244] rt_sigprocmask(SIG_SETMASK, [], [pid 5255] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5255] <... futex resumed>) = 1 [pid 5252] <... openat resumed>) = 3 [pid 5246] <... futex resumed>) = 0 [pid 5256] <... rseq resumed>) = 0 [pid 5255] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] chdir("./file1" [pid 5248] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5252] <... chdir resumed>) = 0 [pid 5252] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5252] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5244] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] set_robust_list(0x7f96081b79a0, 24 [pid 5248] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 5256] <... set_robust_list resumed>) = 0 [pid 5248] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] rt_sigprocmask(SIG_SETMASK, [], [pid 5244] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5256] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5256] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5249] <... write resumed>) = 53248 [pid 5245] exit_group(0 [pid 5254] <... futex resumed>) = ? [pid 5245] <... exit_group resumed>) = ? [pid 5248] <... futex resumed>) = ? [pid 5254] +++ exited with 0 +++ [pid 5250] <... futex resumed>) = 0 [pid 5248] +++ exited with 0 +++ [pid 5250] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = 1 [pid 5252] creat("./file0", 000 [pid 5250] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5249] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5245] +++ exited with 0 +++ [pid 5252] <... creat resumed>) = 4 [pid 5249] <... futex resumed>) = 0 [pid 5246] exit_group(0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5249] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5255] <... futex resumed>) = ? [pid 5253] <... mount resumed>) = 0 [pid 5252] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5249] <... futex resumed>) = ? [pid 5246] <... exit_group resumed>) = ? [ 85.184716][ T5249] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.186701][ T5247] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.194004][ T5249] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5256] <... open resumed>) = 5 [pid 5255] +++ exited with 0 +++ [pid 5253] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5252] <... futex resumed>) = 1 [pid 5250] <... futex resumed>) = 0 [pid 5249] +++ exited with 0 +++ [pid 5246] +++ exited with 0 +++ [pid 5083] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5256] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... openat resumed>) = 3 [pid 5252] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5250] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = 1 [pid 5253] chdir("./file1" [pid 5250] <... futex resumed>) = 0 [pid 5244] <... futex resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5253] <... chdir resumed>) = 0 [pid 5250] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5253] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] newfstatat(3, "", [pid 5084] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5253] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 85.233433][ T5247] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.240866][ T5247] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.253874][ T5252] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.261193][ T5252] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.272546][ T5252] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5253] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] <... write resumed>) = 53248 [pid 5084] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(3, [pid 5253] <... futex resumed>) = 1 [pid 5247] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5253] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] <... futex resumed>) = 0 [pid 5247] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] newfstatat(3, "", [pid 5251] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5253] <... futex resumed>) = 0 [pid 5251] <... futex resumed>) = 1 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5253] creat("./file0", 000 [pid 5251] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] exit_group(0 [pid 5256] <... futex resumed>) = ? [pid 5253] <... creat resumed>) = 4 [pid 5247] <... futex resumed>) = ? [pid 5244] <... exit_group resumed>) = ? [pid 5084] getdents64(3, [pid 5083] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5256] +++ exited with 0 +++ [pid 5253] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5247] +++ exited with 0 +++ [pid 5253] <... futex resumed>) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5253] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5251] <... futex resumed>) = 0 [pid 5253] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5251] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] unlink("./10/binderfs" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5083] <... unlink resumed>) = 0 [ 85.279981][ T5252] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.291850][ T5252] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.299319][ T5252] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.317691][ T5253] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.325212][ T5253] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5252] <... write resumed>) = 53248 [pid 5250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5244] +++ exited with 0 +++ [pid 5083] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5250] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5244, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5084] unlink("./10/binderfs" [pid 5250] <... mmap resumed>) = 0x7f9608197000 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5250] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... restart_syscall resumed>) = 0 [pid 5250] <... mprotect resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5250] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5250] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5252] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5250] <... clone3 resumed> => {parent_tid=[5257]}, 88) = 5257 [pid 5252] <... futex resumed>) = 0 [pid 5252] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5250] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5250] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5257 attached [pid 5257] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5257] set_robust_list(0x7f96081b79a0, 24 [pid 5085] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5257] <... set_robust_list resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5257] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5085] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5251] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = 0 [pid 5251] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5083] newfstatat(AT_FDCWD, "./10/file1", [pid 5251] <... futex resumed>) = 0 [pid 5251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5251] <... mmap resumed>) = 0x7f9608197000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5251] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] unlink("./10/binderfs" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] <... open resumed>) = 5 [pid 5251] <... mprotect resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5257] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 4 [pid 5257] <... futex resumed>) = 1 [pid 5253] <... write resumed>) = 53248 [pid 5251] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5250] <... futex resumed>) = 0 [pid 5084] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(4, "", [pid 5251] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5250] exit_group(0./strace-static-x86_64: Process 5258 attached [pid 5253] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = ? [pid 5250] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5258] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5257] +++ exited with 0 +++ [pid 5253] <... futex resumed>) = 0 [pid 5252] +++ exited with 0 +++ [pid 5251] <... clone3 resumed> => {parent_tid=[5258]}, 88) = 5258 [pid 5084] newfstatat(AT_FDCWD, "./10/file1", [pid 5083] getdents64(4, [pid 5258] <... rseq resumed>) = 0 [pid 5253] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5258] set_robust_list(0x7f96081b79a0, 24 [pid 5251] rt_sigprocmask(SIG_SETMASK, [], [pid 5250] +++ exited with 0 +++ [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5258] <... set_robust_list resumed>) = 0 [pid 5251] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] getdents64(4, [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5258] rt_sigprocmask(SIG_SETMASK, [], [pid 5251] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5258] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5251] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5258] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5251] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(4 [pid 5258] <... open resumed>) = 5 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... close resumed>) = 0 [pid 5258] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5251] <... futex resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./10/file1", [pid 5084] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] rmdir("./10/file1" [pid 5258] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5251] exit_group(0 [pid 5258] <... futex resumed>) = ? [pid 5253] <... futex resumed>) = ? [pid 5251] <... exit_group resumed>) = ? [pid 5082] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5258] +++ exited with 0 +++ [pid 5253] +++ exited with 0 +++ [pid 5251] +++ exited with 0 +++ [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(4, "", [pid 5082] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5082] <... openat resumed>) = 3 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5082] newfstatat(3, "", [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 85.332740][ T5253] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.346408][ T5253] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.367980][ T5253] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.375435][ T5253] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] getdents64(3, [pid 5081] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] <... openat resumed>) = 4 [pid 5084] getdents64(4, [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(4, "", [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] close(3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, [pid 5083] <... close resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] getdents64(4, [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] rmdir("./10" [pid 5082] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] close(4 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5082] unlink("./11/binderfs" [pid 5081] newfstatat(3, "", [pid 5084] rmdir("./10/file1" [pid 5085] getdents64(4, [pid 5083] mkdir("./11", 0777 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] close(4 [pid 5084] getdents64(3, [pid 5082] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] rmdir("./10/file1" [pid 5084] close(3 [pid 5083] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] <... close resumed>) = 0 [pid 5081] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] rmdir("./10" [pid 5081] newfstatat(AT_FDCWD, "./10/binderfs", [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] close(3 [pid 5081] unlink("./10/binderfs" [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./10") = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5085] mkdir("./11", 0777 [pid 5084] mkdir("./11", 0777 [pid 5082] <... umount2 resumed>) = 0 [pid 5081] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5082] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] <... openat resumed>) = 4 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5082] newfstatat(4, "", [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5081] <... umount2 resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(4, [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] close(4 [pid 5081] newfstatat(AT_FDCWD, "./10/file1", [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./11/file1" [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... rmdir resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] close(3 [pid 5082] getdents64(3, [pid 5083] <... close resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] close(3 [pid 5081] <... openat resumed>) = 4 [pid 5082] <... close resumed>) = 0 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] rmdir("./11" [pid 5081] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5259 attached [pid 5085] <... ioctl resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5259] set_robust_list(0x5555939db6a0, 24 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5259 [pid 5259] <... set_robust_list resumed>) = 0 [pid 5082] mkdir("./12", 0777 [pid 5081] close(4 [pid 5259] chdir("./11" [pid 5084] <... ioctl resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5259] <... chdir resumed>) = 0 [pid 5081] rmdir("./10/file1" [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] close(3 [pid 5084] close(3 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... rmdir resumed>) = 0 [pid 5259] <... prctl resumed>) = 0 [pid 5081] getdents64(3, [pid 5259] setpgid(0, 0 [pid 5082] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5259] <... setpgid resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] close(3 [pid 5085] <... close resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... close resumed>) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] rmdir("./10"./strace-static-x86_64: Process 5261 attached [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5260 [pid 5261] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5261] chdir("./11"./strace-static-x86_64: Process 5260 attached ) = 0 [pid 5260] set_robust_list(0x5555939db6a0, 24 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5261 [pid 5261] <... prctl resumed>) = 0 [pid 5261] setpgid(0, 0) = 0 [pid 5260] <... set_robust_list resumed>) = 0 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5260] chdir("./11" [pid 5261] <... openat resumed>) = 3 [pid 5260] <... chdir resumed>) = 0 [pid 5261] write(3, "1000", 4 [pid 5260] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5259] <... openat resumed>) = 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5259] write(3, "1000", 4 [pid 5081] mkdir("./11", 0777 [pid 5261] <... write resumed>) = 4 [pid 5260] <... prctl resumed>) = 0 [pid 5261] close(3 [pid 5260] setpgid(0, 0 [pid 5261] <... close resumed>) = 0 [pid 5260] <... setpgid resumed>) = 0 [pid 5261] symlink("/dev/binderfs", "./binderfs" [pid 5260] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5261] <... symlink resumed>) = 0 [pid 5259] <... write resumed>) = 4 [pid 5081] <... mkdir resumed>) = 0 [pid 5259] close(3 [pid 5260] <... openat resumed>) = 3 [pid 5259] <... close resumed>) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs" [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5261] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] write(3, "1000", 4 [pid 5261] <... futex resumed>) = 0 [pid 5260] <... write resumed>) = 4 [pid 5081] <... openat resumed>) = 3 [pid 5261] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5259] <... symlink resumed>) = 0 [pid 5261] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5260] close(3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5260] <... close resumed>) = 0 [pid 5261] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5260] symlink("/dev/binderfs", "./binderfs" [pid 5261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5260] <... symlink resumed>) = 0 [pid 5261] <... mmap resumed>) = 0x7f96081b8000 [pid 5261] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5260] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5261] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5260] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5260] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5260] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5261] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5260] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5261] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5262 attached [pid 5260] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5259] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5261] <... clone3 resumed> => {parent_tid=[5262]}, 88) = 5262 [pid 5260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5262] set_robust_list(0x7f96081d89a0, 24 [pid 5261] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5263 attached [pid 5262] <... set_robust_list resumed>) = 0 [pid 5261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5263] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5262] rt_sigprocmask(SIG_SETMASK, [], [pid 5261] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... rseq resumed>) = 0 [pid 5262] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5260] <... clone3 resumed> => {parent_tid=[5263]}, 88) = 5263 [pid 5263] set_robust_list(0x7f96081d89a0, 24 [pid 5262] memfd_create("syzkaller", 0 [pid 5261] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] rt_sigprocmask(SIG_SETMASK, [], [pid 5263] <... set_robust_list resumed>) = 0 [pid 5262] <... memfd_create resumed>) = 3 [pid 5260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5263] rt_sigprocmask(SIG_SETMASK, [], [pid 5260] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5260] <... futex resumed>) = 0 [pid 5263] memfd_create("syzkaller", 0 [pid 5262] <... mmap resumed>) = 0x7f95ffc00000 [pid 5260] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5259] <... futex resumed>) = 0 [pid 5259] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5263] <... memfd_create resumed>) = 3 [pid 5259] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5259] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5263] <... mmap resumed>) = 0x7f95ffc00000 [pid 5259] <... mmap resumed>) = 0x7f96081b8000 [pid 5082] <... ioctl resumed>) = 0 [pid 5259] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] close(3 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... close resumed>) = 0 [pid 5259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5264 attached [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5264] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5265 [pid 5264] <... rseq resumed>) = 0 ./strace-static-x86_64: Process 5265 attached [pid 5264] set_robust_list(0x7f96081d89a0, 24 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5265] set_robust_list(0x5555939db6a0, 24 [pid 5264] <... set_robust_list resumed>) = 0 [pid 5259] <... clone3 resumed> => {parent_tid=[5264]}, 88) = 5264 [pid 5264] rt_sigprocmask(SIG_SETMASK, [], [pid 5259] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5265] <... set_robust_list resumed>) = 0 [pid 5264] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5265] chdir("./12") = 0 [pid 5265] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5265] setpgid(0, 0) = 0 [pid 5265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5264] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5262] <... write resumed>) = 524288 [pid 5259] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5265] write(3, "1000", 4 [pid 5264] memfd_create("syzkaller", 0 [pid 5259] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5265] <... write resumed>) = 4 [pid 5264] <... memfd_create resumed>) = 3 [pid 5263] <... write resumed>) = 524288 [pid 5081] close(3 [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5265] close(3) = 0 [pid 5265] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5262] munmap(0x7f95ffc00000, 138412032 [pid 5265] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... mmap resumed>) = 0x7f95ffc00000 [pid 5262] <... munmap resumed>) = 0 [pid 5265] <... futex resumed>) = 0 [pid 5262] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5265] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5262] <... openat resumed>) = 4 [pid 5265] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5262] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5266 attached [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5262] <... ioctl resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5266 [pid 5265] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5266] set_robust_list(0x5555939db6a0, 24 [pid 5265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] <... set_robust_list resumed>) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5263] munmap(0x7f95ffc00000, 138412032 [pid 5266] chdir("./11" [pid 5265] <... mmap resumed>) = 0x7f96081b8000 [pid 5263] <... munmap resumed>) = 0 [pid 5265] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5263] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5266] <... chdir resumed>) = 0 [pid 5265] <... mprotect resumed>) = 0 [pid 5263] <... openat resumed>) = 4 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5265] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5263] ioctl(4, LOOP_SET_FD, 3 [pid 5266] <... prctl resumed>) = 0 [pid 5266] setpgid(0, 0 [pid 5264] <... write resumed>) = 524288 [pid 5262] close(3 [pid 5265] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5262] <... close resumed>) = 0 [pid 5265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5262] close(4./strace-static-x86_64: Process 5267 attached ) = 0 [pid 5267] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5265] <... clone3 resumed> => {parent_tid=[5267]}, 88) = 5267 [pid 5262] mkdir("./file1", 0777 [pid 5267] <... rseq resumed>) = 0 [pid 5266] <... setpgid resumed>) = 0 [pid 5265] rt_sigprocmask(SIG_SETMASK, [], [pid 5262] <... mkdir resumed>) = 0 [pid 5267] set_robust_list(0x7f96081d89a0, 24 [pid 5265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5262] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5267] <... set_robust_list resumed>) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5265] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] munmap(0x7f95ffc00000, 138412032 [pid 5267] rt_sigprocmask(SIG_SETMASK, [], [pid 5265] <... futex resumed>) = 0 [pid 5267] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] <... openat resumed>) = 3 [pid 5265] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5267] memfd_create("syzkaller", 0 [pid 5264] <... munmap resumed>) = 0 [pid 5267] <... memfd_create resumed>) = 3 [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [ 85.604061][ T5262] loop4: detected capacity change from 0 to 1024 [ 85.626655][ T5263] loop3: detected capacity change from 0 to 1024 [pid 5263] <... ioctl resumed>) = 0 [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5266] write(3, "1000", 4 [pid 5264] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5263] close(3 [pid 5266] <... write resumed>) = 4 [pid 5264] <... openat resumed>) = 4 [pid 5266] close(3 [pid 5264] ioctl(4, LOOP_SET_FD, 3 [pid 5266] <... close resumed>) = 0 [pid 5263] <... close resumed>) = 0 [pid 5262] <... mount resumed>) = 0 [pid 5262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5262] chdir("./file1") = 0 [pid 5262] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5263] close(4 [pid 5262] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5263] <... close resumed>) = 0 [pid 5263] mkdir("./file1", 0777 [pid 5262] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... mkdir resumed>) = 0 [pid 5263] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5262] <... futex resumed>) = 1 [pid 5262] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] <... futex resumed>) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5261] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5266] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... mount resumed>) = 0 [pid 5262] <... futex resumed>) = 0 [pid 5261] <... futex resumed>) = 1 [pid 5263] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5262] creat("./file0", 000 [pid 5266] <... futex resumed>) = 0 [pid 5263] <... openat resumed>) = 3 [pid 5262] <... creat resumed>) = 4 [pid 5267] <... write resumed>) = 524288 [pid 5266] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5263] chdir("./file1" [pid 5261] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5266] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5266] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5263] <... chdir resumed>) = 0 [pid 5262] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] <... mmap resumed>) = 0x7f96081b8000 [pid 5262] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5261] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... ioctl resumed>) = 0 [pid 5266] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5263] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5262] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5261] <... futex resumed>) = 0 [pid 5264] close(3 [pid 5266] <... mprotect resumed>) = 0 [pid 5264] <... close resumed>) = 0 [pid 5263] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5262] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5261] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] munmap(0x7f95ffc00000, 138412032 [pid 5266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5264] close(4 [pid 5263] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5264] <... close resumed>) = 0 [pid 5266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5264] mkdir("./file1", 0777 [pid 5263] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] <... mkdir resumed>) = 0 [pid 5260] <... futex resumed>) = 1 [pid 5264] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5263] <... futex resumed>) = 0 [ 85.657126][ T5264] loop2: detected capacity change from 0 to 1024 [ 85.685475][ T5262] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.692797][ T5262] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5263] creat("./file0", 000 [pid 5267] <... munmap resumed>) = 0 [pid 5263] <... creat resumed>) = 4 [pid 5260] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5268 attached [pid 5268] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5267] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5263] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... openat resumed>) = 4 [pid 5263] <... futex resumed>) = 1 [pid 5260] <... futex resumed>) = 0 [pid 5267] ioctl(4, LOOP_SET_FD, 3 [pid 5263] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5260] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5267] <... ioctl resumed>) = 0 [pid 5260] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5268] <... rseq resumed>) = 0 [pid 5266] <... clone3 resumed> => {parent_tid=[5268]}, 88) = 5268 [pid 5268] set_robust_list(0x7f96081d89a0, 24 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5264] <... mount resumed>) = 0 [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5268] <... set_robust_list resumed>) = 0 [pid 5264] <... openat resumed>) = 3 [pid 5268] rt_sigprocmask(SIG_SETMASK, [], [pid 5266] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] chdir("./file1") = 0 [pid 5268] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5267] close(3) = 0 [pid 5268] memfd_create("syzkaller", 0 [pid 5267] close(4 [pid 5266] <... futex resumed>) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5268] <... memfd_create resumed>) = 3 [pid 5264] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5268] <... mmap resumed>) = 0x7f95ffc00000 [pid 5267] <... close resumed>) = 0 [pid 5267] mkdir("./file1", 0777) = 0 [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5267] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5264] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5264] creat("./file0", 000 [pid 5259] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 85.715654][ T5267] loop1: detected capacity change from 0 to 1024 [ 85.728971][ T5263] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.745745][ T5262] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5268] <... write resumed>) = 524288 [pid 5264] <... creat resumed>) = 4 [pid 5261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5268] munmap(0x7f95ffc00000, 138412032 [pid 5261] <... mmap resumed>) = 0x7f9608197000 [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5264] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] <... mount resumed>) = 0 [pid 5264] <... futex resumed>) = 1 [pid 5260] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] <... futex resumed>) = 0 [pid 5259] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5267] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5261] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5260] <... futex resumed>) = 0 [pid 5259] <... futex resumed>) = 0 [pid 5268] <... munmap resumed>) = 0 [pid 5267] <... openat resumed>) = 3 [pid 5264] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5261] <... mprotect resumed>) = 0 [pid 5260] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5259] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5267] chdir("./file1" [pid 5260] <... mmap resumed>) = 0x7f9608197000 [pid 5260] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5267] <... chdir resumed>) = 0 [pid 5261] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5260] <... mprotect resumed>) = 0 [pid 5267] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5261] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5260] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5267] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5261] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5260] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5267] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5267] <... futex resumed>) = 1 [pid 5261] <... clone3 resumed> => {parent_tid=[5269]}, 88) = 5269 [pid 5267] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5261] rt_sigprocmask(SIG_SETMASK, [], [pid 5260] <... clone3 resumed> => {parent_tid=[5270]}, 88) = 5270 [pid 5261] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5260] rt_sigprocmask(SIG_SETMASK, [], [pid 5261] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5261] <... futex resumed>) = 0 [pid 5260] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5261] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5269 attached [pid 5265] <... futex resumed>) = 0 [pid 5269] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5265] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... rseq resumed>) = 0 [pid 5267] <... futex resumed>) = 0 [pid 5265] <... futex resumed>) = 1 [pid 5269] set_robust_list(0x7f96081b79a0, 24 [pid 5267] creat("./file0", 000 [pid 5265] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5269] <... set_robust_list resumed>) = 0 [pid 5267] <... creat resumed>) = 4 [pid 5269] rt_sigprocmask(SIG_SETMASK, [], [pid 5267] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5267] <... futex resumed>) = 1 [pid 5265] <... futex resumed>) = 0 [ 85.764363][ T5263] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.772352][ T5263] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.791783][ T5262] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5269] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5267] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5265] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5270 attached [pid 5268] ioctl(4, LOOP_SET_FD, 3 [pid 5265] <... futex resumed>) = 0 [pid 5265] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5270] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5270] <... rseq resumed>) = 0 [pid 5259] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5259] <... futex resumed>) = 0 [pid 5270] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5270] rt_sigprocmask(SIG_SETMASK, [], [ 85.814421][ T5267] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.822659][ T5264] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.824193][ T5263] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.830753][ T5268] loop0: detected capacity change from 0 to 1024 [ 85.839250][ T5267] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.852580][ T5264] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5270] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5259] <... mmap resumed>) = 0x7f9608197000 [pid 5265] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5270] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5259] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5268] close(3) = 0 [pid 5265] <... mmap resumed>) = 0x7f9608197000 [pid 5259] <... mprotect resumed>) = 0 [pid 5265] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5268] close(4) = 0 [pid 5265] <... mprotect resumed>) = 0 [pid 5259] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5268] mkdir("./file1", 0777 [pid 5265] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5259] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5268] <... mkdir resumed>) = 0 [pid 5265] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5259] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5265] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5271]}, 88) = 5271 [ 85.861686][ T5262] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.863798][ T5264] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.896866][ T5264] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.897894][ T5267] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5265] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5272 attached ./strace-static-x86_64: Process 5271 attached [pid 5270] <... open resumed>) = 5 [pid 5268] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5265] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5259] <... clone3 resumed> => {parent_tid=[5272]}, 88) = 5272 [pid 5271] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5269] <... open resumed>) = 5 [pid 5265] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5271] <... rseq resumed>) = 0 [pid 5270] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5269] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] <... futex resumed>) = 0 [pid 5259] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5270] <... futex resumed>) = 0 [pid 5272] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5270] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5259] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5272] <... rseq resumed>) = 0 [pid 5272] set_robust_list(0x7f96081b79a0, 24 [pid 5271] set_robust_list(0x7f96081b79a0, 24 [pid 5269] <... futex resumed>) = 0 [pid 5265] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5272] <... set_robust_list resumed>) = 0 [pid 5271] <... set_robust_list resumed>) = 0 [pid 5269] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5271] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5271] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 85.917029][ T5264] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.924473][ T5262] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.925392][ T5263] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.950597][ T5267] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5272] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5262] <... write resumed>) = 53248 [pid 5262] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5262] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5265] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5259] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5261] exit_group(0) = ? [pid 5269] <... futex resumed>) = ? [pid 5269] +++ exited with 0 +++ [pid 5262] <... futex resumed>) = ? [pid 5262] +++ exited with 0 +++ [pid 5261] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5271] <... open resumed>) = 5 [pid 5268] <... mount resumed>) = 0 [pid 5268] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5085] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5268] <... openat resumed>) = 3 [pid 5271] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5271] <... futex resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5271] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5268] chdir("./file1" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... chdir resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5268] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./11/binderfs" [pid 5268] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] <... unlink resumed>) = 0 [ 85.962523][ T5263] hfsplus: request for non-existent node 16777216 in B*Tree [ 85.971480][ T5264] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.000516][ T5267] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5268] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5272] <... open resumed>) = 5 [pid 5268] <... futex resumed>) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5264] <... write resumed>) = 53248 [pid 5272] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5268] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5264] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5272] <... futex resumed>) = 0 [pid 5268] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5266] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = 0 [pid 5266] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5264] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5272] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5268] creat("./file0", 000) = 4 [pid 5268] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5259] exit_group(0 [pid 5272] <... futex resumed>) = ? [pid 5268] <... futex resumed>) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5264] <... futex resumed>) = ? [pid 5263] <... write resumed>) = 53248 [pid 5259] <... exit_group resumed>) = ? [pid 5272] +++ exited with 0 +++ [pid 5264] +++ exited with 0 +++ [pid 5263] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5263] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5260] exit_group(0 [pid 5270] <... futex resumed>) = ? [pid 5263] <... futex resumed>) = ? [pid 5260] <... exit_group resumed>) = ? [pid 5266] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] +++ exited with 0 +++ [pid 5270] +++ exited with 0 +++ [pid 5260] +++ exited with 0 +++ [pid 5266] <... futex resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5260, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5268] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5266] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5259] +++ exited with 0 +++ [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5267] <... write resumed>) = 53248 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5265] exit_group(0 [pid 5271] <... futex resumed>) = ? [pid 5267] <... futex resumed>) = ? [pid 5265] <... exit_group resumed>) = ? [pid 5084] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5271] +++ exited with 0 +++ [pid 5267] +++ exited with 0 +++ [pid 5265] +++ exited with 0 +++ [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./11/binderfs") = 0 [ 86.017509][ T5267] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.049372][ T5268] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.058954][ T5268] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5084] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5265, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5083] <... restart_syscall resumed>) = 0 [pid 5083] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... umount2 resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5082] <... openat resumed>) = 3 [pid 5083] newfstatat(3, "", [pid 5082] newfstatat(3, "", [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5082] getdents64(3, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5082] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5085] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./11/binderfs" [pid 5082] unlink("./12/binderfs" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] <... unlink resumed>) = 0 [pid 5085] newfstatat(4, "", [pid 5266] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5266] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... unlink resumed>) = 0 [pid 5266] <... futex resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./11/file1") = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./11") = 0 [pid 5085] mkdir("./12", 0777 [pid 5266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5266] <... mmap resumed>) = 0x7f9608197000 [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5266] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = 0 [ 86.067766][ T5268] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.082376][ T5268] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.104180][ T5268] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5268] <... write resumed>) = 53248 [pid 5266] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5268] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5266] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5084] newfstatat(AT_FDCWD, "./11/file1", [pid 5082] newfstatat(AT_FDCWD, "./12/file1", ./strace-static-x86_64: Process 5273 attached [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5273] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5266] <... clone3 resumed> => {parent_tid=[5273]}, 88) = 5273 [pid 5084] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5273] <... rseq resumed>) = 0 [pid 5266] rt_sigprocmask(SIG_SETMASK, [], [pid 5273] set_robust_list(0x7f96081b79a0, 24 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5266] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5273] <... set_robust_list resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5266] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... openat resumed>) = 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5266] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5273] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5266] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] newfstatat(4, "", [pid 5083] newfstatat(AT_FDCWD, "./11/file1", [pid 5082] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5273] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5083] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(4, "", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] getdents64(4, [pid 5083] <... openat resumed>) = 4 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5083] getdents64(4, [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5273] <... open resumed>) = 5 [pid 5084] getdents64(4, [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] close(4) = 0 [pid 5083] getdents64(4, [pid 5082] rmdir("./12/file1" [pid 5273] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5273] <... futex resumed>) = 1 [pid 5266] <... futex resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] getdents64(4, [pid 5273] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5266] exit_group(0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5273] <... futex resumed>) = ? [pid 5268] <... futex resumed>) = ? [pid 5266] <... exit_group resumed>) = ? [pid 5084] close(4 [pid 5083] close(4 [pid 5084] <... close resumed>) = 0 [pid 5273] +++ exited with 0 +++ [pid 5084] rmdir("./11/file1" [pid 5268] +++ exited with 0 +++ [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5082] rmdir("./12" [pid 5266] +++ exited with 0 +++ [pid 5082] <... rmdir resumed>) = 0 [pid 5082] mkdir("./13", 0777 [pid 5084] getdents64(3, [pid 5082] <... mkdir resumed>) = 0 [pid 5085] close(3 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] close(3 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... close resumed>) = 0 ./strace-static-x86_64: Process 5274 attached [pid 5084] rmdir("./11" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] rmdir("./11/file1" [pid 5082] <... openat resumed>) = 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5274] set_robust_list(0x5555939db6a0, 24 [pid 5084] mkdir("./12", 0777 [pid 5083] <... rmdir resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5274] <... set_robust_list resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5274 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5274] chdir("./12" [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5274] <... chdir resumed>) = 0 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... openat resumed>) = 3 [pid 5083] getdents64(3, [pid 5081] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5274] <... prctl resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5274] setpgid(0, 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5274] <... setpgid resumed>) = 0 [pid 5083] close(3 [pid 5081] newfstatat(3, "", [pid 5083] <... close resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] rmdir("./11" [pid 5081] getdents64(3, [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] mkdir("./12", 0777 [ 86.116234][ T5268] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5274] <... openat resumed>) = 3 [pid 5274] write(3, "1000", 4 [pid 5081] newfstatat(AT_FDCWD, "./11/binderfs", [pid 5274] <... write resumed>) = 4 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5274] close(3 [pid 5081] unlink("./11/binderfs" [pid 5274] <... close resumed>) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs" [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... unlink resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5081] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5274] <... symlink resumed>) = 0 [pid 5274] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5274] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5274] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5274] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5274] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5274] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5275 attached => {parent_tid=[5275]}, 88) = 5275 [pid 5274] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5275] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5274] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] <... rseq resumed>) = 0 [pid 5274] <... futex resumed>) = 0 [pid 5274] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5275] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5275] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5275] memfd_create("syzkaller", 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5275] <... memfd_create resumed>) = 3 [pid 5081] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5275] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5275] <... mmap resumed>) = 0x7f95ffc00000 [pid 5081] newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5275] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] close(4 [pid 5275] <... write resumed>) = 524288 [pid 5084] <... ioctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5275] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5081] rmdir("./11/file1") = 0 [pid 5081] getdents64(3, [pid 5083] <... ioctl resumed>) = 0 [pid 5275] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5275] <... openat resumed>) = 4 [pid 5081] close(3 [pid 5275] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... close resumed>) = 0 [pid 5275] <... ioctl resumed>) = 0 [pid 5081] rmdir("./11" [pid 5084] close(3) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5276 attached [pid 5275] close(3 [pid 5083] close(3 [pid 5082] close(3 [pid 5081] mkdir("./12", 0777 [pid 5276] set_robust_list(0x5555939db6a0, 24 [pid 5083] <... close resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5276] <... set_robust_list resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5276 [pid 5081] <... mkdir resumed>) = 0 [pid 5275] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5278 attached ./strace-static-x86_64: Process 5277 attached [pid 5276] chdir("./12" [pid 5275] close(4 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5277 [pid 5081] <... openat resumed>) = 3 [pid 5277] set_robust_list(0x5555939db6a0, 24 [pid 5276] <... chdir resumed>) = 0 [pid 5275] <... close resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5278 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5275] mkdir("./file1", 0777 [pid 5277] <... set_robust_list resumed>) = 0 [pid 5278] set_robust_list(0x5555939db6a0, 24 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5278] <... set_robust_list resumed>) = 0 [pid 5277] chdir("./13" [pid 5276] <... prctl resumed>) = 0 [pid 5275] <... mkdir resumed>) = 0 [pid 5278] chdir("./12" [pid 5276] setpgid(0, 0 [pid 5278] <... chdir resumed>) = 0 [pid 5277] <... chdir resumed>) = 0 [pid 5276] <... setpgid resumed>) = 0 [pid 5275] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5277] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5278] <... prctl resumed>) = 0 [pid 5277] <... prctl resumed>) = 0 [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 86.224883][ T5275] loop4: detected capacity change from 0 to 1024 [pid 5277] setpgid(0, 0 [pid 5278] setpgid(0, 0 [pid 5277] <... setpgid resumed>) = 0 [pid 5276] <... openat resumed>) = 3 [pid 5278] <... setpgid resumed>) = 0 [pid 5277] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5276] write(3, "1000", 4 [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5276] <... write resumed>) = 4 [pid 5277] <... openat resumed>) = 3 [pid 5276] close(3) = 0 [pid 5276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5275] <... mount resumed>) = 0 [pid 5278] <... openat resumed>) = 3 [pid 5276] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5275] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5278] write(3, "1000", 4 [pid 5277] write(3, "1000", 4 [pid 5276] <... futex resumed>) = 0 [pid 5275] <... openat resumed>) = 3 [pid 5278] <... write resumed>) = 4 [pid 5277] <... write resumed>) = 4 [pid 5276] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5275] chdir("./file1" [pid 5278] close(3 [pid 5277] close(3 [pid 5276] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5275] <... chdir resumed>) = 0 [pid 5276] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5275] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5277] <... close resumed>) = 0 [pid 5276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5275] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5278] <... close resumed>) = 0 [pid 5277] symlink("/dev/binderfs", "./binderfs" [pid 5276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5275] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] symlink("/dev/binderfs", "./binderfs" [pid 5275] <... futex resumed>) = 1 [pid 5274] <... futex resumed>) = 0 [pid 5276] <... mmap resumed>) = 0x7f96081b8000 [pid 5275] creat("./file0", 000 [pid 5274] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... symlink resumed>) = 0 [pid 5277] <... symlink resumed>) = 0 [pid 5276] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5275] <... creat resumed>) = 4 [pid 5274] <... futex resumed>) = 0 [pid 5277] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... mprotect resumed>) = 0 [pid 5275] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... ioctl resumed>) = 0 [pid 5278] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = 0 [pid 5276] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5275] <... futex resumed>) = 0 [pid 5274] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] <... futex resumed>) = 0 [pid 5277] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5276] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5275] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5277] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5276] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5275] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5275] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5274] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... close resumed>) = 0 ./strace-static-x86_64: Process 5279 attached [pid 5278] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5277] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5279] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5278] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5276] <... clone3 resumed> => {parent_tid=[5279]}, 88) = 5279 [pid 5279] <... rseq resumed>) = 0 [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5279] set_robust_list(0x7f96081d89a0, 24 [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5276] rt_sigprocmask(SIG_SETMASK, [], [pid 5277] <... mmap resumed>) = 0x7f96081b8000 [pid 5279] <... set_robust_list resumed>) = 0 [pid 5278] <... mmap resumed>) = 0x7f96081b8000 [pid 5277] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5279] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5277] <... mprotect resumed>) = 0 [pid 5276] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... mprotect resumed>) = 0 [pid 5279] memfd_create("syzkaller", 0 [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5277] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5276] <... futex resumed>) = 0 [pid 5276] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5278] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5277] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5280 attached [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5280 [pid 5277] <... clone3 resumed> => {parent_tid=[5281]}, 88) = 5281 [pid 5280] set_robust_list(0x5555939db6a0, 24 [pid 5277] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5281 attached [pid 5280] <... set_robust_list resumed>) = 0 [pid 5278] <... clone3 resumed> => {parent_tid=[5282]}, 88) = 5282 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5282 attached [pid 5281] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5280] chdir("./12" [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5277] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5281] <... rseq resumed>) = 0 [pid 5280] <... chdir resumed>) = 0 [pid 5279] <... memfd_create resumed>) = 3 [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5282] <... rseq resumed>) = 0 [pid 5281] set_robust_list(0x7f96081d89a0, 24 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5278] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = 0 [pid 5282] set_robust_list(0x7f96081d89a0, 24 [pid 5281] <... set_robust_list resumed>) = 0 [pid 5280] <... prctl resumed>) = 0 [pid 5279] <... mmap resumed>) = 0x7f95ffc00000 [pid 5278] <... futex resumed>) = 0 [pid 5277] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5282] <... set_robust_list resumed>) = 0 [pid 5281] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] setpgid(0, 0 [pid 5278] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5282] rt_sigprocmask(SIG_SETMASK, [], [pid 5281] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5280] <... setpgid resumed>) = 0 [pid 5282] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5281] memfd_create("syzkaller", 0 [pid 5279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5282] memfd_create("syzkaller", 0 [pid 5281] <... memfd_create resumed>) = 3 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5282] <... memfd_create resumed>) = 3 [pid 5281] <... mmap resumed>) = 0x7f95ffc00000 [pid 5280] <... openat resumed>) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5280] write(3, "1000", 4) = 4 [pid 5282] <... mmap resumed>) = 0x7f95ffc00000 [pid 5280] close(3) = 0 [ 86.331232][ T5275] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.359475][ T5275] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5280] symlink("/dev/binderfs", "./binderfs" [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5274] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5280] <... symlink resumed>) = 0 [pid 5274] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5281] <... write resumed>) = 524288 [pid 5280] <... futex resumed>) = 0 [pid 5274] <... mmap resumed>) = 0x7f9608197000 [pid 5279] <... write resumed>) = 524288 [pid 5279] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5274] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5280] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5279] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5281] munmap(0x7f95ffc00000, 138412032 [pid 5280] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5279] <... openat resumed>) = 4 [pid 5280] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5279] ioctl(4, LOOP_SET_FD, 3 [pid 5274] <... mprotect resumed>) = 0 [pid 5281] <... munmap resumed>) = 0 [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5274] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5282] <... write resumed>) = 524288 [pid 5281] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5274] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5279] <... ioctl resumed>) = 0 [pid 5279] close(3) = 0 [pid 5279] close(4) = 0 [pid 5282] munmap(0x7f95ffc00000, 138412032 [pid 5279] mkdir("./file1", 0777) = 0 [pid 5282] <... munmap resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 86.376906][ T5275] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.392600][ T5275] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.404256][ T5279] loop3: detected capacity change from 0 to 1024 [ 86.407501][ T5275] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.417078][ T5281] loop1: detected capacity change from 0 to 1024 [ 86.418646][ T5275] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5280] <... mmap resumed>) = 0x7f96081b8000 [pid 5274] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5280] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5279] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5280] <... mprotect resumed>) = 0 [pid 5280] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5274] <... clone3 resumed> => {parent_tid=[5283]}, 88) = 5283 [pid 5280] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5274] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5283 attached [pid 5281] <... ioctl resumed>) = 0 [pid 5283] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5281] close(3 [pid 5283] <... rseq resumed>) = 0 [pid 5281] <... close resumed>) = 0 [pid 5274] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5283] set_robust_list(0x7f96081b79a0, 24 [pid 5281] close(4 [pid 5280] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5274] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... set_robust_list resumed>) = 0 [pid 5283] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5281] <... close resumed>) = 0 [pid 5274] <... futex resumed>) = 0 [pid 5283] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5281] mkdir("./file1", 0777) = 0 [pid 5274] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5282] <... ioctl resumed>) = 0 [pid 5282] close(3 [pid 5280] <... clone3 resumed> => {parent_tid=[5284]}, 88) = 5284 ./strace-static-x86_64: Process 5284 attached [pid 5282] <... close resumed>) = 0 [pid 5282] close(4) = 0 [pid 5284] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5283] <... open resumed>) = 5 [pid 5281] <... mount resumed>) = 0 [pid 5280] rt_sigprocmask(SIG_SETMASK, [], [pid 5279] <... mount resumed>) = 0 [pid 5275] <... write resumed>) = 53248 [pid 5284] <... rseq resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5279] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5275] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] set_robust_list(0x7f96081d89a0, 24 [pid 5283] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] mkdir("./file1", 0777 [pid 5281] <... openat resumed>) = 3 [pid 5280] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... openat resumed>) = 3 [pid 5275] <... futex resumed>) = 0 [pid 5284] <... set_robust_list resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5282] <... mkdir resumed>) = 0 [pid 5281] chdir("./file1" [pid 5280] <... futex resumed>) = 0 [pid 5279] chdir("./file1" [pid 5275] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5274] <... futex resumed>) = 0 [pid 5284] rt_sigprocmask(SIG_SETMASK, [], [pid 5283] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5281] <... chdir resumed>) = 0 [pid 5280] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5279] <... chdir resumed>) = 0 [pid 5274] exit_group(0 [pid 5284] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5281] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5283] <... futex resumed>) = ? [pid 5281] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5275] <... futex resumed>) = ? [pid 5274] <... exit_group resumed>) = ? [pid 5284] memfd_create("syzkaller", 0 [pid 5283] +++ exited with 0 +++ [pid 5282] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5279] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5275] +++ exited with 0 +++ [pid 5284] <... memfd_create resumed>) = 3 [pid 5281] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5274] +++ exited with 0 +++ [pid 5284] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5279] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5281] <... futex resumed>) = 1 [pid 5277] <... futex resumed>) = 0 [pid 5277] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5277] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] creat("./file0", 000 [pid 5284] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5279] <... futex resumed>) = 1 [pid 5276] <... futex resumed>) = 0 [ 86.430942][ T5282] loop2: detected capacity change from 0 to 1024 [pid 5282] <... mount resumed>) = 0 [pid 5281] <... creat resumed>) = 4 [pid 5279] creat("./file0", 000 [pid 5276] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5276] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5281] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5279] <... creat resumed>) = 4 [pid 5282] <... openat resumed>) = 3 [pid 5281] <... futex resumed>) = 1 [pid 5282] chdir("./file1" [pid 5281] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] <... chdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] <... write resumed>) = 524288 [pid 5282] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5279] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5277] <... futex resumed>) = 0 [pid 5284] munmap(0x7f95ffc00000, 138412032 [pid 5282] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5279] <... futex resumed>) = 1 [pid 5277] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5282] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... futex resumed>) = 0 [pid 5277] <... futex resumed>) = 1 [pid 5276] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... munmap resumed>) = 0 [pid 5282] <... futex resumed>) = 1 [pid 5281] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5279] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5278] <... futex resumed>) = 0 [pid 5277] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] <... futex resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5282] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5278] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5278] <... futex resumed>) = 0 [pid 5282] creat("./file0", 000 [pid 5278] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] <... creat resumed>) = 4 [pid 5282] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5278] <... futex resumed>) = 0 [pid 5278] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5278] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5282] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5284] <... openat resumed>) = 4 [pid 5085] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [ 86.521989][ T5281] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.522285][ T5279] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.540258][ T5279] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.548361][ T5279] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.550181][ T5282] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.556079][ T5279] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5284] ioctl(4, LOOP_SET_FD, 3 [pid 5277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5277] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5277] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5277] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5277] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5277] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5284] <... ioctl resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5284] close(3 [pid 5085] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5284] <... close resumed>) = 0 [pid 5278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5278] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] unlink("./12/binderfs" [pid 5278] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5277] <... clone3 resumed> => {parent_tid=[5285]}, 88) = 5285 [pid 5276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5278] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5277] rt_sigprocmask(SIG_SETMASK, [], [pid 5276] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... mprotect resumed>) = 0 [pid 5277] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5276] <... futex resumed>) = 0 [pid 5278] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5277] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5278] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5277] <... futex resumed>) = 0 [pid 5278] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5276] <... mmap resumed>) = 0x7f9608197000 [pid 5277] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5276] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5278] <... clone3 resumed> => {parent_tid=[5286]}, 88) = 5286 [pid 5276] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5286 attached [pid 5278] rt_sigprocmask(SIG_SETMASK, [], [pid 5276] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5286] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5278] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5276] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5286] <... rseq resumed>) = 0 [pid 5278] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5286] set_robust_list(0x7f96081b79a0, 24 [pid 5276] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5286] <... set_robust_list resumed>) = 0 [pid 5278] <... futex resumed>) = 0 [pid 5286] rt_sigprocmask(SIG_SETMASK, [], [pid 5278] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5287 attached [pid 5286] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5276] <... clone3 resumed> => {parent_tid=[5287]}, 88) = 5287 [pid 5287] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5286] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5276] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5285 attached [pid 5287] <... rseq resumed>) = 0 [pid 5284] close(4 [pid 5276] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5287] set_robust_list(0x7f96081b79a0, 24 [pid 5276] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5287] <... set_robust_list resumed>) = 0 [pid 5276] <... futex resumed>) = 0 [ 86.571384][ T5284] loop0: detected capacity change from 0 to 1024 [ 86.574474][ T5281] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.594687][ T5279] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.604892][ T5281] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.613423][ T5279] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5287] rt_sigprocmask(SIG_SETMASK, [], [pid 5276] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5287] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5285] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5284] <... close resumed>) = 0 [pid 5085] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5287] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 5287] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5276] <... futex resumed>) = 0 [pid 5284] mkdir("./file1", 0777 [pid 5285] <... rseq resumed>) = 0 [pid 5285] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5284] <... mkdir resumed>) = 0 [pid 5285] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5285] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5287] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5277] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5278] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5284] <... mount resumed>) = 0 [pid 5284] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5279] <... write resumed>) = 53248 [pid 5279] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5279] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] <... openat resumed>) = 3 [ 86.621215][ T5281] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.628942][ T5282] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.650180][ T5281] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.662046][ T5282] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5284] chdir("./file1" [pid 5276] exit_group(0 [pid 5085] <... umount2 resumed>) = 0 [pid 5287] <... futex resumed>) = ? [pid 5284] <... chdir resumed>) = 0 [pid 5279] <... futex resumed>) = ? [pid 5276] <... exit_group resumed>) = ? [pid 5287] +++ exited with 0 +++ [pid 5279] +++ exited with 0 +++ [pid 5276] +++ exited with 0 +++ [pid 5286] <... open resumed>) = 5 [pid 5284] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5286] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5286] <... futex resumed>) = 0 [pid 5286] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] newfstatat(AT_FDCWD, "./12/file1", [pid 5285] <... open resumed>) = 5 [pid 5284] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5285] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5284] <... futex resumed>) = 1 [pid 5285] <... futex resumed>) = 0 [pid 5284] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5280] <... futex resumed>) = 0 [pid 5285] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5280] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] <... futex resumed>) = 0 [pid 5280] <... futex resumed>) = 1 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... openat resumed>) = 4 [pid 5284] creat("./file0", 000 [pid 5280] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5284] <... creat resumed>) = 4 [pid 5085] newfstatat(4, "", [pid 5284] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5281] <... write resumed>) = 53248 [pid 5281] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5281] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5277] exit_group(0 [pid 5281] <... futex resumed>) = ? [pid 5277] <... exit_group resumed>) = ? [pid 5281] +++ exited with 0 +++ [pid 5285] <... futex resumed>) = ? [pid 5085] getdents64(4, [pid 5084] newfstatat(3, "", [pid 5285] +++ exited with 0 +++ [pid 5277] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5277, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5085] getdents64(4, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5284] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5284] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5280] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] getdents64(3, [pid 5082] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5280] <... futex resumed>) = 0 [pid 5085] close(4 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... openat resumed>) = 3 [pid 5085] <... close resumed>) = 0 [pid 5084] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] rmdir("./12/file1" [ 86.673226][ T5282] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.678420][ T5281] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.697014][ T5282] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.705371][ T5282] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5280] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(3, "", [pid 5085] getdents64(3, [pid 5084] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] getdents64(3, [pid 5085] <... close resumed>) = 0 [pid 5084] unlink("./12/binderfs" [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] rmdir("./12" [pid 5082] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] mkdir("./13", 0777 [pid 5082] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./13/binderfs" [pid 5085] <... mkdir resumed>) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5082] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5282] <... write resumed>) = 53248 [pid 5084] <... umount2 resumed>) = 0 [pid 5282] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5282] <... futex resumed>) = 0 [ 86.722839][ T5284] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.733517][ T5284] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.754690][ T5284] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.764545][ T5284] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5282] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5278] exit_group(0 [pid 5084] newfstatat(AT_FDCWD, "./12/file1", [pid 5082] <... umount2 resumed>) = 0 [pid 5286] <... futex resumed>) = ? [pid 5282] <... futex resumed>) = ? [pid 5280] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5278] <... exit_group resumed>) = ? [pid 5286] +++ exited with 0 +++ [pid 5282] +++ exited with 0 +++ [pid 5280] <... futex resumed>) = 0 [pid 5278] +++ exited with 0 +++ [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5280] <... mmap resumed>) = 0x7f9608197000 [pid 5085] close(3 [pid 5084] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5280] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./13/file1", [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5288 attached [pid 5280] <... mprotect resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5083] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 3 [pid 5082] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] newfstatat(3, "", [pid 5082] <... openat resumed>) = 4 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5082] getdents64(4, [pid 5084] newfstatat(4, "", [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5280] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5288 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5288] set_robust_list(0x5555939db6a0, 24 [pid 5280] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] getdents64(4, [pid 5288] <... set_robust_list resumed>) = 0 [pid 5280] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5288] chdir("./13"./strace-static-x86_64: Process 5289 attached [pid 5280] <... clone3 resumed> => {parent_tid=[5289]}, 88) = 5289 [pid 5084] getdents64(4, [pid 5288] <... chdir resumed>) = 0 [pid 5289] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5280] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5289] <... rseq resumed>) = 0 [pid 5288] <... prctl resumed>) = 0 [pid 5289] set_robust_list(0x7f96081b79a0, 24 [pid 5084] close(4 [pid 5288] setpgid(0, 0 [pid 5289] <... set_robust_list resumed>) = 0 [pid 5288] <... setpgid resumed>) = 0 [pid 5280] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] close(4 [pid 5083] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5082] <... close resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5280] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] rmdir("./12/file1" [pid 5289] rt_sigprocmask(SIG_SETMASK, [], [pid 5280] <... futex resumed>) = 0 [pid 5289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5280] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] rmdir("./13/file1" [pid 5289] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5288] <... openat resumed>) = 3 [pid 5082] <... rmdir resumed>) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3 [pid 5083] unlink("./12/binderfs" [pid 5082] <... close resumed>) = 0 [pid 5288] write(3, "1000", 4 [pid 5083] <... unlink resumed>) = 0 [pid 5082] rmdir("./13" [pid 5288] <... write resumed>) = 4 [pid 5084] getdents64(3, [pid 5082] <... rmdir resumed>) = 0 [pid 5288] close(3 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] mkdir("./14", 0777 [pid 5288] <... close resumed>) = 0 [pid 5084] close(3 [pid 5082] <... mkdir resumed>) = 0 [pid 5288] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... close resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] rmdir("./12" [pid 5082] <... openat resumed>) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5288] <... symlink resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5284] <... write resumed>) = 53248 [pid 5284] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5284] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5284] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5288] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5288] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5289] <... open resumed>) = 5 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] mkdir("./13", 0777 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5289] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5280] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 1 [pid 5280] exit_group(0 [pid 5289] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5284] <... futex resumed>) = ? [pid 5289] <... futex resumed>) = ? [pid 5284] +++ exited with 0 +++ [pid 5289] +++ exited with 0 +++ [pid 5280] <... exit_group resumed>) = ? [pid 5288] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... mkdir resumed>) = 0 [pid 5288] <... mprotect resumed>) = 0 [ 86.778383][ T5284] hfsplus: request for non-existent node 16777216 in B*Tree [ 86.817590][ T5284] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5280] +++ exited with 0 +++ [pid 5084] <... openat resumed>) = 3 [pid 5083] <... umount2 resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5083] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5288] <... clone3 resumed> => {parent_tid=[5290]}, 88) = 5290 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5288] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5288] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5290 attached [pid 5083] newfstatat(AT_FDCWD, "./12/file1", [pid 5290] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5290] set_robust_list(0x7f96081d89a0, 24 [pid 5083] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5290] <... set_robust_list resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5290] memfd_create("syzkaller", 0 [pid 5083] newfstatat(4, "", [pid 5081] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5290] <... memfd_create resumed>) = 3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5081] newfstatat(3, "", [pid 5290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5083] getdents64(4, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5290] <... mmap resumed>) = 0x7f95ffc00000 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] <... ioctl resumed>) = 0 [pid 5081] getdents64(3, [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./12/file1") = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./12" [pid 5082] close(3 [pid 5081] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5083] mkdir("./13", 0777./strace-static-x86_64: Process 5291 attached ) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5291] set_robust_list(0x5555939db6a0, 24 [pid 5290] <... write resumed>) = 524288 [pid 5291] <... set_robust_list resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5291 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] newfstatat(AT_FDCWD, "./12/binderfs", [pid 5291] chdir("./13" [pid 5083] <... openat resumed>) = 3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] unlink("./12/binderfs"./strace-static-x86_64: Process 5292 attached [pid 5291] <... chdir resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5292 [pid 5081] <... unlink resumed>) = 0 [pid 5292] set_robust_list(0x5555939db6a0, 24 [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5292] <... set_robust_list resumed>) = 0 [pid 5291] <... prctl resumed>) = 0 [pid 5290] munmap(0x7f95ffc00000, 138412032 [pid 5291] setpgid(0, 0 [pid 5292] chdir("./14" [pid 5291] <... setpgid resumed>) = 0 [pid 5290] <... munmap resumed>) = 0 [pid 5292] <... chdir resumed>) = 0 [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5290] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5291] <... openat resumed>) = 3 [pid 5081] <... umount2 resumed>) = 0 [pid 5292] <... prctl resumed>) = 0 [pid 5291] write(3, "1000", 4 [pid 5081] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5292] setpgid(0, 0 [pid 5291] <... write resumed>) = 4 [pid 5292] <... setpgid resumed>) = 0 [pid 5291] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5291] <... close resumed>) = 0 [pid 5290] <... openat resumed>) = 4 [pid 5081] newfstatat(AT_FDCWD, "./12/file1", [pid 5291] symlink("/dev/binderfs", "./binderfs" [pid 5290] ioctl(4, LOOP_SET_FD, 3 [pid 5292] <... openat resumed>) = 3 [pid 5291] <... symlink resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5292] write(3, "1000", 4 [pid 5291] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5291] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5292] <... write resumed>) = 4 [pid 5291] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5081] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5292] close(3 [pid 5291] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5292] <... close resumed>) = 0 [pid 5291] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5290] <... ioctl resumed>) = 0 [pid 5081] newfstatat(4, "", [pid 5292] symlink("/dev/binderfs", "./binderfs" [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5290] close(3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5292] <... symlink resumed>) = 0 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] getdents64(4, [pid 5291] <... mmap resumed>) = 0x7f96081b8000 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, [pid 5290] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5291] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5081] close(4 [pid 5292] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... mprotect resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5292] <... futex resumed>) = 0 [pid 5291] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5290] close(4 [pid 5081] rmdir("./12/file1" [pid 5292] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5290] <... close resumed>) = 0 [pid 5290] mkdir("./file1", 0777) = 0 [pid 5292] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5291] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] close(3 [pid 5081] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5290] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5081] getdents64(3, [pid 5292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5293 attached [pid 5292] <... mmap resumed>) = 0x7f96081b8000 [pid 5291] <... clone3 resumed> => {parent_tid=[5293]}, 88) = 5293 [pid 5081] close(3 [pid 5293] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5292] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5291] rt_sigprocmask(SIG_SETMASK, [], [pid 5293] <... rseq resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5292] <... mprotect resumed>) = 0 [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] rmdir("./12" [pid 5293] set_robust_list(0x7f96081d89a0, 24 [pid 5291] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5294 attached [pid 5293] <... set_robust_list resumed>) = 0 [pid 5292] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5291] <... futex resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5294 [pid 5081] <... rmdir resumed>) = 0 [pid 5293] rt_sigprocmask(SIG_SETMASK, [], [pid 5292] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5291] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] mkdir("./13", 0777 [pid 5294] set_robust_list(0x5555939db6a0, 24 [pid 5293] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5293] memfd_create("syzkaller", 0 [pid 5081] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5295 attached [pid 5294] <... set_robust_list resumed>) = 0 [pid 5293] <... memfd_create resumed>) = 3 [pid 5292] <... clone3 resumed> => {parent_tid=[5295]}, 88) = 5295 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5295] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... openat resumed>) = 3 [pid 5295] <... rseq resumed>) = 0 [pid 5294] chdir("./13" [pid 5293] <... mmap resumed>) = 0x7f95ffc00000 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5295] set_robust_list(0x7f96081d89a0, 24 [pid 5292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5290] <... mount resumed>) = 0 [pid 5295] <... set_robust_list resumed>) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5292] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5295] rt_sigprocmask(SIG_SETMASK, [], [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5292] <... futex resumed>) = 0 [pid 5290] chdir("./file1" [pid 5295] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL [ 86.953070][ T5290] loop4: detected capacity change from 0 to 1024 [pid 5292] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5290] <... chdir resumed>) = 0 [pid 5294] <... prctl resumed>) = 0 [pid 5295] memfd_create("syzkaller", 0 [pid 5294] setpgid(0, 0 [pid 5295] <... memfd_create resumed>) = 3 [pid 5294] <... setpgid resumed>) = 0 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5295] <... mmap resumed>) = 0x7f95ffc00000 [pid 5294] <... openat resumed>) = 3 [pid 5290] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5290] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] write(3, "1000", 4 [pid 5290] <... futex resumed>) = 1 [pid 5294] <... write resumed>) = 4 [pid 5290] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] close(3 [pid 5288] <... futex resumed>) = 0 [pid 5294] <... close resumed>) = 0 [pid 5293] <... write resumed>) = 524288 [pid 5288] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] symlink("/dev/binderfs", "./binderfs" [pid 5290] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 1 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5294] <... symlink resumed>) = 0 [pid 5290] creat("./file0", 000 [pid 5288] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5290] <... creat resumed>) = 4 [pid 5294] <... futex resumed>) = 0 [pid 5293] munmap(0x7f95ffc00000, 138412032 [pid 5294] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5290] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... write resumed>) = 524288 [pid 5294] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5293] <... munmap resumed>) = 0 [pid 5290] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 5295] munmap(0x7f95ffc00000, 138412032 [pid 5294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5288] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... munmap resumed>) = 0 [pid 5294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5293] <... openat resumed>) = 4 [pid 5288] <... futex resumed>) = 0 [pid 5294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5288] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5294] <... mmap resumed>) = 0x7f96081b8000 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5290] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5081] <... ioctl resumed>) = 0 [pid 5295] <... openat resumed>) = 4 [pid 5294] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5294] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5295] ioctl(4, LOOP_SET_FD, 3 [pid 5294] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5296]}, 88) = 5296 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5294] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555939db690) = 5297 ./strace-static-x86_64: Process 5297 attached [pid 5297] set_robust_list(0x5555939db6a0, 24 [pid 5293] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5296 attached [pid 5297] <... set_robust_list resumed>) = 0 [pid 5293] close(3 [pid 5296] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5293] <... close resumed>) = 0 [pid 5297] chdir("./13" [pid 5296] <... rseq resumed>) = 0 [pid 5293] close(4 [pid 5296] set_robust_list(0x7f96081d89a0, 24 [pid 5293] <... close resumed>) = 0 [pid 5296] <... set_robust_list resumed>) = 0 [pid 5293] mkdir("./file1", 0777 [pid 5296] rt_sigprocmask(SIG_SETMASK, [], [pid 5293] <... mkdir resumed>) = 0 [pid 5296] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] memfd_create("syzkaller", 0 [pid 5297] <... chdir resumed>) = 0 [pid 5296] <... memfd_create resumed>) = 3 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5296] <... mmap resumed>) = 0x7f95ffc00000 [pid 5297] <... prctl resumed>) = 0 [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5297] setpgid(0, 0) = 0 [pid 5293] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [ 87.050462][ T5293] loop3: detected capacity change from 0 to 1024 [ 87.054626][ T5290] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.059576][ T5295] loop1: detected capacity change from 0 to 1024 [pid 5297] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5295] <... ioctl resumed>) = 0 [pid 5295] close(3) = 0 [pid 5295] close(4 [pid 5293] <... mount resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5295] mkdir("./file1", 0777 [pid 5293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5288] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] write(3, "1000", 4 [pid 5295] <... mkdir resumed>) = 0 [pid 5293] <... openat resumed>) = 3 [pid 5288] <... futex resumed>) = 0 [pid 5297] <... write resumed>) = 4 [pid 5293] chdir("./file1" [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5297] close(3 [pid 5288] <... mmap resumed>) = 0x7f9608197000 [pid 5297] <... close resumed>) = 0 [pid 5297] symlink("/dev/binderfs", "./binderfs" [pid 5288] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5297] <... symlink resumed>) = 0 [pid 5295] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5293] <... chdir resumed>) = 0 [pid 5297] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5288] <... mprotect resumed>) = 0 [pid 5297] <... futex resumed>) = 0 [pid 5297] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5288] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5297] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5288] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5288] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5298 attached ) = 0x7f96081b8000 [pid 5296] <... write resumed>) = 524288 [pid 5295] <... mount resumed>) = 0 [pid 5293] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5293] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5293] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5291] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5291] <... futex resumed>) = 0 [pid 5298] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5295] <... openat resumed>) = 3 [pid 5293] creat("./file0", 000 [pid 5291] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5296] munmap(0x7f95ffc00000, 138412032 [pid 5295] chdir("./file1" [pid 5293] <... creat resumed>) = 4 [pid 5298] <... rseq resumed>) = 0 [pid 5297] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5296] <... munmap resumed>) = 0 [pid 5295] <... chdir resumed>) = 0 [pid 5288] <... clone3 resumed> => {parent_tid=[5298]}, 88) = 5298 [pid 5298] set_robust_list(0x7f96081b79a0, 24 [pid 5297] <... mprotect resumed>) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5293] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] rt_sigprocmask(SIG_SETMASK, [], [pid 5295] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5298] <... set_robust_list resumed>) = 0 [pid 5297] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5296] <... openat resumed>) = 4 [pid 5295] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... futex resumed>) = 1 [pid 5291] <... futex resumed>) = 0 [pid 5288] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5298] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5295] <... futex resumed>) = 1 [pid 5293] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5291] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5298] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5295] creat("./file0", 000 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 87.097468][ T5290] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.128799][ T5290] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5292] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5288] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5299 attached [pid 5298] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5295] <... creat resumed>) = 4 [pid 5293] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5292] <... futex resumed>) = 0 [pid 5299] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5298] <... open resumed>) = 5 [pid 5297] <... clone3 resumed> => {parent_tid=[5299]}, 88) = 5299 [pid 5291] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 5292] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... rseq resumed>) = 0 [pid 5298] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5295] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] set_robust_list(0x7f96081d89a0, 24 [pid 5298] <... futex resumed>) = 0 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5296] <... ioctl resumed>) = 0 [pid 5295] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 87.153284][ T5290] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.165875][ T5296] loop2: detected capacity change from 0 to 1024 [ 87.172440][ T5290] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.176267][ T785] cfg80211: failed to load regulatory.db [ 87.181439][ T5290] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.189931][ T5293] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5299] <... set_robust_list resumed>) = 0 [pid 5298] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5297] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] <... futex resumed>) = 0 [pid 5299] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5299] memfd_create("syzkaller", 0 [pid 5296] close(3 [pid 5295] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5299] <... memfd_create resumed>) = 3 [pid 5297] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5296] <... close resumed>) = 0 [pid 5292] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5295] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = 1 [pid 5296] close(4 [pid 5295] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5292] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5299] <... mmap resumed>) = 0x7f95ffc00000 [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5296] <... close resumed>) = 0 [pid 5296] mkdir("./file1", 0777 [pid 5290] <... write resumed>) = 53248 [pid 5290] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5296] <... mkdir resumed>) = 0 [pid 5290] <... futex resumed>) = 0 [pid 5290] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] exit_group(0) = ? [pid 5299] <... write resumed>) = 524288 [pid 5298] <... futex resumed>) = ? [pid 5296] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5291] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5290] <... futex resumed>) = ? [pid 5291] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5291] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5291] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5299] munmap(0x7f95ffc00000, 138412032 [pid 5298] +++ exited with 0 +++ [pid 5296] <... mount resumed>) = 0 [pid 5291] <... mprotect resumed>) = 0 [pid 5290] +++ exited with 0 +++ [pid 5288] +++ exited with 0 +++ [pid 5296] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5291] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5296] <... openat resumed>) = 3 [pid 5291] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5299] <... munmap resumed>) = 0 [pid 5296] chdir("./file1" [pid 5291] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5296] <... chdir resumed>) = 0 [pid 5296] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5291] <... clone3 resumed> => {parent_tid=[5300]}, 88) = 5300 [pid 5296] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5291] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5300 attached [pid 5296] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 87.208801][ T5295] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.223527][ T5295] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.230927][ T5293] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.252060][ T5295] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5300] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5296] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5291] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5299] <... openat resumed>) = 4 [pid 5085] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5300] <... rseq resumed>) = 0 [pid 5294] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] ioctl(4, LOOP_SET_FD, 3 [pid 5292] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5300] set_robust_list(0x7f96081b79a0, 24 [pid 5294] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = 0 [pid 5291] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] newfstatat(3, "", [pid 5294] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5300] <... set_robust_list resumed>) = 0 [pid 5296] creat("./file0", 000 [pid 5292] <... mmap resumed>) = 0x7f9608197000 [pid 5300] rt_sigprocmask(SIG_SETMASK, [], [pid 5296] <... creat resumed>) = 4 [pid 5292] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5300] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5292] <... mprotect resumed>) = 0 [pid 5300] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5296] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5296] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5296] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5294] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... clone3 resumed> => {parent_tid=[5301]}, 88) = 5301 [pid 5294] <... futex resumed>) = 0 [pid 5292] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5294] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5292] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] getdents64(3, [pid 5292] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5301 attached ) = 0 [pid 5301] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5292] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5301] <... rseq resumed>) = 0 [pid 5301] set_robust_list(0x7f96081b79a0, 24 [pid 5085] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5301] <... set_robust_list resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5301] rt_sigprocmask(SIG_SETMASK, [], [pid 5299] <... ioctl resumed>) = 0 [pid 5299] close(3 [pid 5301] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 87.262757][ T5293] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.272630][ T5299] loop0: detected capacity change from 0 to 1024 [ 87.283491][ T5295] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.286688][ T5296] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.292053][ T5293] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5301] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5299] <... close resumed>) = 0 [pid 5085] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5301] <... open resumed>) = 5 [pid 5301] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5299] close(4 [pid 5085] unlink("./13/binderfs" [pid 5299] <... close resumed>) = 0 [pid 5301] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... unlink resumed>) = 0 [pid 5299] mkdir("./file1", 0777 [pid 5300] <... open resumed>) = 5 [pid 5300] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] <... futex resumed>) = 0 [pid 5300] <... futex resumed>) = 1 [pid 5299] <... mkdir resumed>) = 0 [pid 5294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5294] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5294] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5294] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5302 attached => {parent_tid=[5302]}, 88) = 5302 [pid 5294] rt_sigprocmask(SIG_SETMASK, [], [pid 5302] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5294] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5302] <... rseq resumed>) = 0 [pid 5294] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] set_robust_list(0x7f96081b79a0, 24 [pid 5294] <... futex resumed>) = 0 [pid 5294] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... set_robust_list resumed>) = 0 [pid 5302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5299] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [ 87.316698][ T5295] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.324563][ T5295] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.332095][ T5293] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.333007][ T5296] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.349579][ T29] kauditd_printk_skb: 24 callbacks suppressed [pid 5302] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5300] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] <... mount resumed>) = 0 [pid 5299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5302] <... open resumed>) = 5 [pid 5302] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5294] <... futex resumed>) = 0 [pid 5302] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5299] chdir("./file1" [pid 5085] <... umount2 resumed>) = 0 [pid 5299] <... chdir resumed>) = 0 [pid 5295] <... write resumed>) = 53248 [pid 5293] <... write resumed>) = 53248 [pid 5299] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5295] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [ 87.349595][ T29] audit: type=1800 audit(1715660560.012:71): pid=5302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 87.378009][ T5293] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.387040][ T5296] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.403332][ T5296] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5293] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5299] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5295] <... futex resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5292] exit_group(0 [pid 5291] exit_group(0 [pid 5301] <... futex resumed>) = ? [pid 5299] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... exit_group resumed>) = ? [pid 5301] +++ exited with 0 +++ [pid 5299] <... futex resumed>) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5297] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5295] +++ exited with 0 +++ [pid 5292] +++ exited with 0 +++ [pid 5300] <... futex resumed>) = ? [pid 5299] creat("./file0", 000 [pid 5297] <... futex resumed>) = 0 [pid 5293] <... futex resumed>) = ? [pid 5291] <... exit_group resumed>) = ? [pid 5085] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5300] +++ exited with 0 +++ [pid 5297] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] +++ exited with 0 +++ [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5085] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5085] <... openat resumed>) = 4 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5299] <... creat resumed>) = 4 [pid 5085] getdents64(4, [pid 5082] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5299] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5291] +++ exited with 0 +++ [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5297] <... futex resumed>) = 0 [pid 5299] <... futex resumed>) = 1 [pid 5297] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5299] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5297] <... futex resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5297] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] getdents64(4, [pid 5082] <... openat resumed>) = 3 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] newfstatat(3, "", [pid 5085] close(4 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(3, [pid 5085] rmdir("./13/file1" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] unlink("./14/binderfs" [pid 5085] close(3 [pid 5082] <... unlink resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5082] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] rmdir("./13") = 0 [ 87.416143][ T5296] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.432728][ T5296] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.446441][ T5299] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.454798][ T5299] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] mkdir("./14", 0777 [pid 5296] <... write resumed>) = 53248 [pid 5084] <... openat resumed>) = 3 [pid 5082] <... umount2 resumed>) = 0 [pid 5296] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(3, "", [pid 5082] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5296] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5296] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] getdents64(3, [pid 5082] newfstatat(AT_FDCWD, "./14/file1", [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5082] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5294] exit_group(0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5296] <... futex resumed>) = ? [pid 5294] <... exit_group resumed>) = ? [pid 5084] unlink("./13/binderfs" [pid 5082] <... openat resumed>) = 4 [pid 5302] <... futex resumed>) = ? [pid 5296] +++ exited with 0 +++ [pid 5302] +++ exited with 0 +++ [pid 5294] +++ exited with 0 +++ [pid 5084] <... unlink resumed>) = 0 [pid 5082] newfstatat(4, "", [pid 5084] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5085] <... mkdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5297] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] getdents64(4, [pid 5297] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5297] <... futex resumed>) = 0 [pid 5297] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5085] <... openat resumed>) = 3 [pid 5083] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] getdents64(4, [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5297] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] close(4 [pid 5083] <... openat resumed>) = 3 [pid 5082] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5082] rmdir("./14/file1" [pid 5297] <... mprotect resumed>) = 0 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5297] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5297] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] getdents64(3, [pid 5082] getdents64(3, [pid 5297] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] newfstatat(AT_FDCWD, "./13/file1", [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5303 attached [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5297] <... clone3 resumed> => {parent_tid=[5303]}, 88) = 5303 [pid 5084] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5303] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5082] close(3 [pid 5303] <... rseq resumed>) = 0 [pid 5297] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... close resumed>) = 0 [pid 5303] set_robust_list(0x7f96081b79a0, 24 [pid 5297] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5082] rmdir("./14" [pid 5303] <... set_robust_list resumed>) = 0 [pid 5297] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5303] rt_sigprocmask(SIG_SETMASK, [], [pid 5297] <... futex resumed>) = 0 [pid 5084] newfstatat(4, "", [pid 5083] unlink("./13/binderfs" [pid 5082] <... rmdir resumed>) = 0 [pid 5303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5297] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5303] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... unlink resumed>) = 0 [pid 5084] getdents64(4, [pid 5299] <... write resumed>) = 53248 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5299] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 87.462473][ T5299] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.477144][ T5299] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.487057][ T5299] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.497347][ T5299] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5299] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] mkdir("./15", 0777 [pid 5303] <... open resumed>) = 5 [pid 5084] close(4 [pid 5083] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5084] rmdir("./13/file1") = 0 [pid 5084] getdents64(3, [pid 5303] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5303] <... futex resumed>) = 1 [pid 5297] <... futex resumed>) = 0 [pid 5303] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5297] exit_group(0 [pid 5084] close(3 [pid 5082] <... openat resumed>) = 3 [pid 5303] <... futex resumed>) = ? [pid 5299] <... futex resumed>) = ? [pid 5297] <... exit_group resumed>) = ? [pid 5085] <... ioctl resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5303] +++ exited with 0 +++ [pid 5299] +++ exited with 0 +++ [pid 5297] +++ exited with 0 +++ [pid 5085] close(3 [pid 5084] <... close resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] rmdir("./13" [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5297, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 5304 attached [pid 5083] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5304] set_robust_list(0x5555939db6a0, 24 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5304] <... set_robust_list resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5304] chdir("./14" [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5304 [pid 5083] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5304] <... chdir resumed>) = 0 [pid 5084] mkdir("./14", 0777 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5084] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5304] <... prctl resumed>) = 0 [pid 5304] setpgid(0, 0 [pid 5083] <... openat resumed>) = 4 [pid 5081] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5304] <... setpgid resumed>) = 0 [pid 5083] newfstatat(4, "", [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... openat resumed>) = 3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] getdents64(4, [pid 5081] <... openat resumed>) = 3 [pid 5081] newfstatat(3, "", [pid 5304] <... openat resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5304] write(3, "1000", 4 [pid 5083] getdents64(4, [pid 5081] getdents64(3, [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5304] <... write resumed>) = 4 [pid 5083] close(4 [pid 5304] close(3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5304] <... close resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5304] symlink("/dev/binderfs", "./binderfs" [pid 5083] rmdir("./13/file1" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./13/binderfs", [pid 5304] <... symlink resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 87.517557][ T29] audit: type=1800 audit(1715660560.182:72): pid=5303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [pid 5081] unlink("./13/binderfs" [pid 5304] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(3, [pid 5081] <... unlink resumed>) = 0 [pid 5304] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5081] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5304] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5083] close(3 [pid 5082] close(3 [pid 5304] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5083] <... close resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] <... ioctl resumed>) = 0 [pid 5083] rmdir("./13" [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5083] mkdir("./14", 0777./strace-static-x86_64: Process 5305 attached [pid 5304] <... mmap resumed>) = 0x7f96081b8000 [pid 5083] <... mkdir resumed>) = 0 [pid 5305] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5304] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5305 [pid 5305] chdir("./15" [pid 5304] <... mprotect resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5305] <... chdir resumed>) = 0 [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] <... openat resumed>) = 3 [pid 5305] <... prctl resumed>) = 0 [pid 5304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5306 attached [pid 5305] setpgid(0, 0 [pid 5306] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5305] <... setpgid resumed>) = 0 [pid 5304] <... clone3 resumed> => {parent_tid=[5306]}, 88) = 5306 [pid 5306] <... rseq resumed>) = 0 [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5304] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] <... umount2 resumed>) = 0 [pid 5306] set_robust_list(0x7f96081d89a0, 24 [pid 5081] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5306] <... set_robust_list resumed>) = 0 [pid 5305] <... openat resumed>) = 3 [pid 5084] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] rt_sigprocmask(SIG_SETMASK, [], [pid 5305] write(3, "1000", 4 [pid 5081] newfstatat(AT_FDCWD, "./13/file1", [pid 5306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5305] <... write resumed>) = 4 [pid 5306] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5305] close(3 [pid 5304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5305] <... close resumed>) = 0 [pid 5304] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5307 attached [pid 5306] memfd_create("syzkaller", 0 [pid 5305] symlink("/dev/binderfs", "./binderfs" [pid 5304] <... futex resumed>) = 0 [pid 5307] set_robust_list(0x5555939db6a0, 24 [pid 5304] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5307] <... set_robust_list resumed>) = 0 [pid 5306] <... memfd_create resumed>) = 3 [pid 5305] <... symlink resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5307 [pid 5081] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5305] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5307] chdir("./14" [pid 5306] <... mmap resumed>) = 0x7f95ffc00000 [pid 5305] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5081] newfstatat(4, "", [pid 5305] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5307] <... chdir resumed>) = 0 [pid 5305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5307] <... prctl resumed>) = 0 [pid 5081] getdents64(4, [pid 5307] setpgid(0, 0 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5305] <... mmap resumed>) = 0x7f96081b8000 [pid 5305] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5307] <... setpgid resumed>) = 0 [pid 5305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] getdents64(4, [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5081] close(4 [pid 5307] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5308 attached [pid 5305] <... clone3 resumed> => {parent_tid=[5308]}, 88) = 5308 [pid 5081] <... close resumed>) = 0 [pid 5308] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5307] write(3, "1000", 4 [pid 5305] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] rmdir("./13/file1" [pid 5308] <... rseq resumed>) = 0 [pid 5307] <... write resumed>) = 4 [pid 5305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5305] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] close(3 [pid 5081] <... rmdir resumed>) = 0 [pid 5308] set_robust_list(0x7f96081d89a0, 24 [pid 5307] <... close resumed>) = 0 [pid 5305] <... futex resumed>) = 0 [pid 5308] <... set_robust_list resumed>) = 0 [pid 5307] symlink("/dev/binderfs", "./binderfs" [pid 5305] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] getdents64(3, [pid 5308] rt_sigprocmask(SIG_SETMASK, [], [pid 5307] <... symlink resumed>) = 0 [pid 5308] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] <... write resumed>) = 524288 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5308] memfd_create("syzkaller", 0 [pid 5307] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] close(3) = 0 [pid 5308] <... memfd_create resumed>) = 3 [pid 5307] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5306] munmap(0x7f95ffc00000, 138412032 [pid 5081] rmdir("./13" [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5307] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5306] <... munmap resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5308] <... mmap resumed>) = 0x7f95ffc00000 [pid 5307] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5306] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] <... openat resumed>) = 4 [pid 5081] mkdir("./14", 0777) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5083] close(3 [pid 5081] <... openat resumed>) = 3 [pid 5083] <... close resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555939db690) = 5309 ./strace-static-x86_64: Process 5309 attached [pid 5309] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5309] chdir("./14" [pid 5307] <... mmap resumed>) = 0x7f96081b8000 [pid 5309] <... chdir resumed>) = 0 [pid 5309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5308] <... write resumed>) = 524288 [pid 5307] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5306] <... ioctl resumed>) = 0 [pid 5309] <... prctl resumed>) = 0 [pid 5307] <... mprotect resumed>) = 0 [pid 5306] close(3 [pid 5309] setpgid(0, 0 [pid 5307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5306] <... close resumed>) = 0 [pid 5306] close(4 [pid 5307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5309] <... setpgid resumed>) = 0 [pid 5309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5306] <... close resumed>) = 0 [pid 5306] mkdir("./file1", 0777./strace-static-x86_64: Process 5310 attached [pid 5307] <... clone3 resumed> => {parent_tid=[5310]}, 88) = 5310 [pid 5310] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], [pid 5306] <... mkdir resumed>) = 0 [pid 5310] <... rseq resumed>) = 0 [pid 5309] <... openat resumed>) = 3 [pid 5308] munmap(0x7f95ffc00000, 138412032 [pid 5307] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5310] set_robust_list(0x7f96081d89a0, 24 [pid 5309] write(3, "1000", 4 [pid 5310] <... set_robust_list resumed>) = 0 [pid 5309] <... write resumed>) = 4 [pid 5307] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] close(3 [pid 5310] rt_sigprocmask(SIG_SETMASK, [], [pid 5309] <... close resumed>) = 0 [pid 5307] <... futex resumed>) = 0 [pid 5310] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5309] symlink("/dev/binderfs", "./binderfs" [pid 5307] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5310] memfd_create("syzkaller", 0 [pid 5309] <... symlink resumed>) = 0 [pid 5308] <... munmap resumed>) = 0 [pid 5310] <... memfd_create resumed>) = 3 [pid 5308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5308] <... openat resumed>) = 4 [pid 5310] <... mmap resumed>) = 0x7f95ffc00000 [pid 5308] ioctl(4, LOOP_SET_FD, 3 [pid 5309] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5309] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5309] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [ 87.687677][ T5306] loop4: detected capacity change from 0 to 1024 [pid 5309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5309] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5309] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5311 attached [pid 5310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5308] <... ioctl resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5311] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5308] close(3 [pid 5306] <... mount resumed>) = 0 [pid 5308] <... close resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5308] close(4 [pid 5311] <... rseq resumed>) = 0 [pid 5309] <... clone3 resumed> => {parent_tid=[5311]}, 88) = 5311 [pid 5308] <... close resumed>) = 0 [pid 5306] <... openat resumed>) = 3 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], [pid 5306] chdir("./file1" [pid 5309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5306] <... chdir resumed>) = 0 [pid 5309] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5309] <... futex resumed>) = 0 [pid 5306] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5311] set_robust_list(0x7f96081d89a0, 24 [pid 5310] <... write resumed>) = 524288 [pid 5309] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5308] mkdir("./file1", 0777 [pid 5306] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5306] <... futex resumed>) = 1 [pid 5304] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5306] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5304] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5304] <... futex resumed>) = 0 [pid 5311] <... set_robust_list resumed>) = 0 [pid 5308] <... mkdir resumed>) = 0 [pid 5304] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5312 ./strace-static-x86_64: Process 5312 attached [pid 5312] set_robust_list(0x5555939db6a0, 24 [pid 5311] rt_sigprocmask(SIG_SETMASK, [], [pid 5310] munmap(0x7f95ffc00000, 138412032 [pid 5308] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5306] creat("./file0", 000 [pid 5312] <... set_robust_list resumed>) = 0 [pid 5311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5310] <... munmap resumed>) = 0 [pid 5311] memfd_create("syzkaller", 0 [pid 5308] <... mount resumed>) = 0 [pid 5312] chdir("./14" [pid 5311] <... memfd_create resumed>) = 3 [pid 5310] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5308] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5306] <... creat resumed>) = 4 [pid 5312] <... chdir resumed>) = 0 [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5308] <... openat resumed>) = 3 [pid 5312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5308] chdir("./file1" [pid 5312] <... prctl resumed>) = 0 [pid 5306] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] setpgid(0, 0) = 0 [pid 5306] <... futex resumed>) = 1 [pid 5304] <... futex resumed>) = 0 [pid 5312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5304] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5306] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5308] <... chdir resumed>) = 0 [pid 5304] <... futex resumed>) = 0 [pid 5311] <... mmap resumed>) = 0x7f95ffc00000 [pid 5304] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5312] <... openat resumed>) = 3 [pid 5308] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5310] <... openat resumed>) = 4 [ 87.728359][ T5308] loop1: detected capacity change from 0 to 1024 [pid 5310] ioctl(4, LOOP_SET_FD, 3 [pid 5312] write(3, "1000", 4 [pid 5308] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... write resumed>) = 4 [pid 5308] <... futex resumed>) = 1 [pid 5312] close(3 [pid 5308] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] <... close resumed>) = 0 [pid 5312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5305] <... futex resumed>) = 0 [pid 5305] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5305] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5308] <... futex resumed>) = 0 [pid 5308] creat("./file0", 000 [pid 5312] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5308] <... creat resumed>) = 4 [pid 5312] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5308] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] <... ioctl resumed>) = 0 [pid 5310] close(3) = 0 [pid 5310] close(4) = 0 [pid 5310] mkdir("./file1", 0777) = 0 [pid 5310] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5312] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5308] <... futex resumed>) = 1 [pid 5305] <... futex resumed>) = 0 [pid 5305] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5305] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] <... mount resumed>) = 0 [pid 5310] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5312] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5311] <... write resumed>) = 524288 [pid 5310] <... openat resumed>) = 3 [pid 5308] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5310] chdir("./file1" [pid 5304] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5310] <... chdir resumed>) = 0 [pid 5304] <... futex resumed>) = 0 [pid 5312] <... mmap resumed>) = 0x7f96081b8000 [pid 5310] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [ 87.786606][ T5310] loop3: detected capacity change from 0 to 1024 [ 87.787996][ T5306] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.805305][ T5306] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.813682][ T5306] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.821400][ T5306] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5312] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5311] munmap(0x7f95ffc00000, 138412032 [pid 5310] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5304] <... mmap resumed>) = 0x7f9608197000 [pid 5311] <... munmap resumed>) = 0 [pid 5310] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5307] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5310] creat("./file0", 000 [pid 5307] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5310] <... creat resumed>) = 4 [pid 5311] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5312] <... mprotect resumed>) = 0 [pid 5310] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5312] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5304] <... mprotect resumed>) = 0 [pid 5311] ioctl(4, LOOP_SET_FD, 3 [pid 5304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5312] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5305] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5313 attached [pid 5311] <... ioctl resumed>) = 0 [pid 5310] <... futex resumed>) = 1 [pid 5307] <... futex resumed>) = 0 [pid 5305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 87.841044][ T5308] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.849201][ T5306] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.862790][ T5308] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.873247][ T5311] loop2: detected capacity change from 0 to 1024 [ 87.881242][ T5308] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5305] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5305] <... futex resumed>) = 0 [pid 5307] <... futex resumed>) = 0 [pid 5305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5310] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5307] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5305] <... mmap resumed>) = 0x7f9608197000 [pid 5305] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5313] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5312] <... clone3 resumed> => {parent_tid=[5313]}, 88) = 5313 [pid 5311] close(3 [pid 5306] <... write resumed>) = 53248 [pid 5305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5313] <... rseq resumed>) = 0 [pid 5312] rt_sigprocmask(SIG_SETMASK, [], [pid 5311] <... close resumed>) = 0 [pid 5306] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5304] <... clone3 resumed> => {parent_tid=[5314]}, 88) = 5314 ./strace-static-x86_64: Process 5314 attached [pid 5313] set_robust_list(0x7f96081d89a0, 24 [pid 5312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5311] close(4 [pid 5306] <... futex resumed>) = 0 [pid 5304] rt_sigprocmask(SIG_SETMASK, [], [pid 5314] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5313] <... set_robust_list resumed>) = 0 [pid 5312] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5311] <... close resumed>) = 0 [pid 5306] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5313] rt_sigprocmask(SIG_SETMASK, [], [pid 5312] <... futex resumed>) = 0 [pid 5311] mkdir("./file1", 0777 [pid 5304] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5315 attached [pid 5314] <... rseq resumed>) = 0 [pid 5313] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5312] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5311] <... mkdir resumed>) = 0 [pid 5304] <... futex resumed>) = 0 [pid 5315] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5314] set_robust_list(0x7f96081b79a0, 24 [pid 5313] memfd_create("syzkaller", 0 [pid 5304] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] <... memfd_create resumed>) = 3 [pid 5313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5311] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5315] <... rseq resumed>) = 0 [pid 5314] <... set_robust_list resumed>) = 0 [pid 5313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5305] <... clone3 resumed> => {parent_tid=[5315]}, 88) = 5315 [pid 5315] set_robust_list(0x7f96081b79a0, 24 [pid 5314] rt_sigprocmask(SIG_SETMASK, [], [pid 5305] rt_sigprocmask(SIG_SETMASK, [], [pid 5315] <... set_robust_list resumed>) = 0 [pid 5314] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5315] rt_sigprocmask(SIG_SETMASK, [], [pid 5314] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5305] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [ 87.883268][ T5306] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.898256][ T5310] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.905915][ T5308] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.921687][ T5308] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.931830][ T5310] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5315] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5305] <... futex resumed>) = 0 [pid 5314] <... open resumed>) = 5 [pid 5307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5313] <... write resumed>) = 524288 [pid 5313] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5305] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5304] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5313] ioctl(4, LOOP_SET_FD, 3 [pid 5315] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5314] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = 0 [pid 5307] <... futex resumed>) = 0 [pid 5304] exit_group(0 [pid 5315] <... open resumed>) = 5 [pid 5314] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5311] <... mount resumed>) = 0 [ 87.944016][ T29] audit: type=1800 audit(1715660560.612:73): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 87.949527][ T5310] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.971831][ T5308] hfsplus: request for non-existent node 16777216 in B*Tree [ 87.979036][ T5313] loop0: detected capacity change from 0 to 1024 [pid 5307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5306] <... futex resumed>) = ? [pid 5304] <... exit_group resumed>) = ? [pid 5311] <... openat resumed>) = 3 [pid 5306] +++ exited with 0 +++ [pid 5315] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = ? [pid 5313] <... ioctl resumed>) = 0 [pid 5311] chdir("./file1" [pid 5308] <... write resumed>) = 53248 [pid 5307] <... mmap resumed>) = 0x7f9608197000 [pid 5313] close(3 [pid 5311] <... chdir resumed>) = 0 [pid 5313] <... close resumed>) = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5313] close(4 [pid 5311] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5313] <... close resumed>) = 0 [pid 5311] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] mkdir("./file1", 0777 [pid 5311] <... futex resumed>) = 1 [pid 5309] <... futex resumed>) = 0 [pid 5313] <... mkdir resumed>) = 0 [pid 5311] creat("./file0", 000 [pid 5309] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [ 87.989686][ T5310] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.002205][ T5310] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5313] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5311] <... creat resumed>) = 4 [pid 5309] <... futex resumed>) = 0 [pid 5308] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5309] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] +++ exited with 0 +++ [pid 5304] +++ exited with 0 +++ [pid 5307] <... mprotect resumed>) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5304, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5308] <... futex resumed>) = 0 [pid 5315] <... futex resumed>) = 1 [pid 5308] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5307] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5305] <... futex resumed>) = 0 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5311] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... restart_syscall resumed>) = 0 [pid 5305] exit_group(0 [pid 5308] <... futex resumed>) = ? [pid 5307] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5305] <... exit_group resumed>) = ? [pid 5308] +++ exited with 0 +++ [pid 5307] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5311] <... futex resumed>) = 1 [pid 5309] <... futex resumed>) = 0 [pid 5085] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5309] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5309] <... futex resumed>) = 0 [pid 5309] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5315] +++ exited with 0 +++ [pid 5311] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5305] +++ exited with 0 +++ [pid 5085] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5316 attached [pid 5307] <... clone3 resumed> => {parent_tid=[5316]}, 88) = 5316 [pid 5085] <... openat resumed>) = 3 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5316] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5316] <... rseq resumed>) = 0 [pid 5307] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] newfstatat(3, "", [pid 5316] set_robust_list(0x7f96081b79a0, 24 [pid 5082] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5316] <... set_robust_list resumed>) = 0 [pid 5307] <... futex resumed>) = 0 [pid 5313] <... mount resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5313] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5082] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5316] rt_sigprocmask(SIG_SETMASK, [], [pid 5313] <... openat resumed>) = 3 [pid 5307] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] getdents64(3, [pid 5313] chdir("./file1") = 0 [pid 5313] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5313] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 3 [pid 5316] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5313] <... futex resumed>) = 1 [pid 5312] <... futex resumed>) = 0 [pid 5085] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(3, "", [pid 5313] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5312] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5312] <... futex resumed>) = 0 [pid 5313] creat("./file0", 000 [pid 5312] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5316] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5313] <... creat resumed>) = 4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] newfstatat(AT_FDCWD, "./14/binderfs", [ 88.025355][ T29] audit: type=1800 audit(1715660560.662:74): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 88.032850][ T5310] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.064188][ T5311] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.071569][ T5311] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] getdents64(3, [pid 5313] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5316] <... open resumed>) = 5 [pid 5310] <... write resumed>) = 53248 [pid 5309] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5312] <... futex resumed>) = 0 [pid 5082] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5312] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] unlink("./14/binderfs" [pid 5312] <... futex resumed>) = 0 [pid 5312] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] <... futex resumed>) = 1 [pid 5316] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5310] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = 0 [pid 5307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... unlink resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5309] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5307] exit_group(0 [pid 5316] <... futex resumed>) = ? [pid 5313] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5310] <... futex resumed>) = ? [pid 5309] <... mmap resumed>) = 0x7f9608197000 [pid 5307] <... exit_group resumed>) = ? [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5316] +++ exited with 0 +++ [pid 5311] <... write resumed>) = 53248 [pid 5310] +++ exited with 0 +++ [ 88.091459][ T5311] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.098469][ T29] audit: type=1800 audit(1715660560.752:75): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 88.098972][ T5311] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.130324][ T5311] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.137728][ T5311] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5309] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] unlink("./15/binderfs" [pid 5311] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5307] +++ exited with 0 +++ [pid 5085] <... umount2 resumed>) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5311] <... futex resumed>) = 0 [pid 5085] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5311] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./14/file1", [pid 5309] <... mprotect resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5082] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(AT_FDCWD, "./15/file1", [pid 5309] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5309] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5309] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] newfstatat(4, "", [pid 5082] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 3 [pid 5082] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] getdents64(4, [pid 5084] newfstatat(3, "", [pid 5082] <... openat resumed>) = 4 [pid 5312] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] newfstatat(4, "", [pid 5085] getdents64(4, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] close(4 [pid 5084] getdents64(3, [pid 5082] getdents64(4, [pid 5085] <... close resumed>) = 0 [pid 5312] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5312] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5317 attached [pid 5312] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] rmdir("./14/file1" [pid 5084] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5312] <... mprotect resumed>) = 0 [pid 5312] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5312] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5318 attached [pid 5318] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5312] <... clone3 resumed> => {parent_tid=[5318]}, 88) = 5318 [pid 5318] <... rseq resumed>) = 0 [pid 5312] rt_sigprocmask(SIG_SETMASK, [], [pid 5318] set_robust_list(0x7f96081b79a0, 24 [pid 5312] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5318] <... set_robust_list resumed>) = 0 [pid 5312] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] rt_sigprocmask(SIG_SETMASK, [], [pid 5312] <... futex resumed>) = 0 [pid 5318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5312] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 88.152802][ T5313] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.160333][ T5313] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.170707][ T5313] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.184236][ T5313] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5318] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5317] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5309] <... clone3 resumed> => {parent_tid=[5317]}, 88) = 5317 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] getdents64(4, [pid 5317] <... rseq resumed>) = 0 [pid 5309] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] getdents64(3, [pid 5084] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5318] <... open resumed>) = 5 [pid 5317] set_robust_list(0x7f96081b79a0, 24 [pid 5309] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5318] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] <... set_robust_list resumed>) = 0 [pid 5313] <... write resumed>) = 53248 [pid 5309] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] close(4 [pid 5318] <... futex resumed>) = 1 [pid 5317] rt_sigprocmask(SIG_SETMASK, [], [pid 5313] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5312] <... futex resumed>) = 0 [pid 5309] <... futex resumed>) = 0 [pid 5085] close(3 [pid 5084] unlink("./14/binderfs" [pid 5082] <... close resumed>) = 0 [pid 5318] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5312] exit_group(0 [pid 5317] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5318] <... futex resumed>) = ? [pid 5312] <... exit_group resumed>) = ? [pid 5309] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] <... close resumed>) = 0 [pid 5082] rmdir("./15/file1" [pid 5318] +++ exited with 0 +++ [pid 5317] <... open resumed>) = 5 [ 88.191546][ T29] audit: type=1800 audit(1715660560.852:76): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 88.196070][ T5313] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.219888][ T5313] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] rmdir("./14" [pid 5082] <... rmdir resumed>) = 0 [pid 5317] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] +++ exited with 0 +++ [pid 5312] +++ exited with 0 +++ [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5312, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3 [pid 5085] mkdir("./15", 0777 [pid 5081] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... close resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5082] rmdir("./15" [pid 5309] <... futex resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5317] <... futex resumed>) = 1 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5317] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5309] exit_group(0 [pid 5081] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] mkdir("./16", 0777 [pid 5081] <... openat resumed>) = 3 [pid 5311] <... futex resumed>) = ? [pid 5081] newfstatat(3, "", [pid 5317] <... futex resumed>) = ? [pid 5311] +++ exited with 0 +++ [pid 5309] <... exit_group resumed>) = ? [pid 5085] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = 0 [pid 5082] <... mkdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5317] +++ exited with 0 +++ [pid 5309] +++ exited with 0 +++ [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... openat resumed>) = 3 [pid 5081] getdents64(3, [pid 5084] newfstatat(AT_FDCWD, "./14/file1", [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5309, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... restart_syscall resumed>) = 0 [pid 5081] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... openat resumed>) = 4 [pid 5083] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] newfstatat(AT_FDCWD, "./14/binderfs", [pid 5084] newfstatat(4, "", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] close(4 [pid 5083] <... openat resumed>) = 3 [ 88.237525][ T29] audit: type=1800 audit(1715660560.902:77): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [pid 5081] unlink("./14/binderfs" [pid 5083] newfstatat(3, "", [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./14/file1" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] getdents64(3, [pid 5081] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] close(3 [pid 5083] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] rmdir("./14" [pid 5083] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./14/binderfs" [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5084] mkdir("./15", 0777 [pid 5083] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... ioctl resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5319 attached [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5085] close(3 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5319 [pid 5081] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5319] set_robust_list(0x5555939db6a0, 24 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5081] newfstatat(AT_FDCWD, "./14/file1", [pid 5319] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5320 attached [pid 5319] chdir("./16" [pid 5084] <... openat resumed>) = 3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5320] set_robust_list(0x5555939db6a0, 24 [pid 5319] <... chdir resumed>) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5320 [pid 5083] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", [pid 5083] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] getdents64(4, [pid 5083] newfstatat(AT_FDCWD, "./14/file1", [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] getdents64(4, [pid 5083] umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(4 [pid 5083] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5320] <... set_robust_list resumed>) = 0 [pid 5319] <... prctl resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5320] chdir("./15" [pid 5319] setpgid(0, 0 [pid 5083] <... openat resumed>) = 4 [pid 5320] <... chdir resumed>) = 0 [pid 5319] <... setpgid resumed>) = 0 [pid 5081] rmdir("./14/file1" [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] newfstatat(4, "", [pid 5081] <... rmdir resumed>) = 0 [pid 5320] <... prctl resumed>) = 0 [pid 5319] <... openat resumed>) = 3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5320] setpgid(0, 0 [pid 5319] write(3, "1000", 4 [pid 5320] <... setpgid resumed>) = 0 [pid 5319] <... write resumed>) = 4 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5319] close(3 [pid 5083] getdents64(4, [pid 5081] getdents64(3, [pid 5320] <... openat resumed>) = 3 [pid 5319] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5320] write(3, "1000", 4 [pid 5319] symlink("/dev/binderfs", "./binderfs" [pid 5083] getdents64(4, [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5320] <... write resumed>) = 4 [pid 5319] <... symlink resumed>) = 0 [pid 5320] close(3 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5319] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 5083] close(4 [pid 5320] <... close resumed>) = 0 [pid 5319] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5319] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... close resumed>) = 0 ./strace-static-x86_64: Process 5321 attached [pid 5320] symlink("/dev/binderfs", "./binderfs" [pid 5319] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5081] rmdir("./14" [pid 5320] <... symlink resumed>) = 0 [pid 5319] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5321 [pid 5083] rmdir("./14/file1" [pid 5081] <... rmdir resumed>) = 0 [pid 5321] set_robust_list(0x5555939db6a0, 24 [pid 5320] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] <... set_robust_list resumed>) = 0 [pid 5320] <... futex resumed>) = 0 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5320] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5319] <... mmap resumed>) = 0x7f96081b8000 [pid 5081] mkdir("./15", 0777 [pid 5319] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] getdents64(3, [pid 5319] <... mprotect resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5321] chdir("./15" [pid 5320] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5321] <... chdir resumed>) = 0 [pid 5320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] close(3 [pid 5321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5319] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5321] <... prctl resumed>) = 0 [pid 5320] <... mmap resumed>) = 0x7f96081b8000 [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5322 attached [pid 5321] setpgid(0, 0 [pid 5320] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] rmdir("./14" [pid 5081] <... openat resumed>) = 3 [pid 5322] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5321] <... setpgid resumed>) = 0 [pid 5320] <... mprotect resumed>) = 0 [pid 5319] <... clone3 resumed> => {parent_tid=[5322]}, 88) = 5322 [pid 5083] <... rmdir resumed>) = 0 [pid 5322] <... rseq resumed>) = 0 [pid 5320] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5319] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5322] set_robust_list(0x7f96081d89a0, 24 [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5322] <... set_robust_list resumed>) = 0 [pid 5321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5320] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5319] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] mkdir("./15", 0777 [pid 5322] rt_sigprocmask(SIG_SETMASK, [], [pid 5320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5319] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5323 attached [pid 5322] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] <... mkdir resumed>) = 0 [pid 5323] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5321] <... openat resumed>) = 3 [pid 5322] memfd_create("syzkaller", 0 [pid 5321] write(3, "1000", 4 [pid 5320] <... clone3 resumed> => {parent_tid=[5323]}, 88) = 5323 [pid 5323] <... rseq resumed>) = 0 [pid 5322] <... memfd_create resumed>) = 3 [pid 5321] <... write resumed>) = 4 [pid 5320] rt_sigprocmask(SIG_SETMASK, [], [pid 5323] set_robust_list(0x7f96081d89a0, 24 [pid 5322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5321] close(3 [pid 5320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5323] <... set_robust_list resumed>) = 0 [pid 5322] <... mmap resumed>) = 0x7f95ffc00000 [pid 5321] <... close resumed>) = 0 [pid 5320] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] rt_sigprocmask(SIG_SETMASK, [], [pid 5321] symlink("/dev/binderfs", "./binderfs" [pid 5320] <... futex resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5323] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] <... symlink resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0 [pid 5320] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5323] <... memfd_create resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5321] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5322] <... write resumed>) = 524288 [pid 5321] <... futex resumed>) = 0 [pid 5323] <... write resumed>) = 524288 [pid 5322] munmap(0x7f95ffc00000, 138412032 [pid 5321] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5322] <... munmap resumed>) = 0 [pid 5322] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5322] <... openat resumed>) = 4 [pid 5321] <... mmap resumed>) = 0x7f96081b8000 [pid 5322] ioctl(4, LOOP_SET_FD, 3 [pid 5321] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5321] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5323] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5321] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5323] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5324 attached [pid 5322] <... ioctl resumed>) = 0 [pid 5321] <... clone3 resumed> => {parent_tid=[5324]}, 88) = 5324 [pid 5081] <... ioctl resumed>) = 0 [pid 5324] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5323] <... openat resumed>) = 4 [pid 5321] rt_sigprocmask(SIG_SETMASK, [], [pid 5324] <... rseq resumed>) = 0 [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5324] set_robust_list(0x7f96081d89a0, 24 [pid 5322] close(3 [pid 5321] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... close resumed>) = 0 [pid 5321] <... futex resumed>) = 0 [pid 5324] <... set_robust_list resumed>) = 0 [pid 5322] close(4 [pid 5321] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5322] <... close resumed>) = 0 [pid 5081] close(3 [pid 5322] mkdir("./file1", 0777 [pid 5081] <... close resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5322] <... mkdir resumed>) = 0 [pid 5322] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5324] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... ioctl resumed>) = 0 [pid 5324] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5324] memfd_create("syzkaller", 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5325 [pid 5324] <... memfd_create resumed>) = 3 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 ./strace-static-x86_64: Process 5325 attached [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5325] set_robust_list(0x5555939db6a0, 24 [pid 5322] <... mount resumed>) = 0 [pid 5325] <... set_robust_list resumed>) = 0 [pid 5322] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5325] chdir("./15") = 0 [pid 5322] <... openat resumed>) = 3 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5322] chdir("./file1" [pid 5325] setpgid(0, 0 [pid 5322] <... chdir resumed>) = 0 [pid 5083] close(3 [pid 5322] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] <... close resumed>) = 0 [pid 5325] <... setpgid resumed>) = 0 [pid 5323] <... ioctl resumed>) = 0 [pid 5322] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5323] close(3 [pid 5322] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... openat resumed>) = 3 [pid 5324] <... write resumed>) = 524288 [pid 5323] <... close resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5326 [pid 5323] close(4) = 0 [pid 5323] mkdir("./file1", 0777) = 0 [pid 5323] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5322] <... futex resumed>) = 1 ./strace-static-x86_64: Process 5326 attached [pid 5325] write(3, "1000", 4 [pid 5324] munmap(0x7f95ffc00000, 138412032 [pid 5319] <... futex resumed>) = 0 [pid 5326] set_robust_list(0x5555939db6a0, 24 [pid 5325] <... write resumed>) = 4 [pid 5324] <... munmap resumed>) = 0 [pid 5322] creat("./file0", 000 [pid 5319] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] <... set_robust_list resumed>) = 0 [pid 5325] close(3 [pid 5322] <... creat resumed>) = 4 [pid 5325] <... close resumed>) = 0 [pid 5326] chdir("./15") = 0 [pid 5325] symlink("/dev/binderfs", "./binderfs" [pid 5324] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5322] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5325] <... symlink resumed>) = 0 [pid 5324] <... openat resumed>) = 4 [pid 5322] <... futex resumed>) = 0 [ 88.444292][ T5322] loop1: detected capacity change from 0 to 1024 [ 88.464359][ T5323] loop4: detected capacity change from 0 to 1024 [pid 5319] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... prctl resumed>) = 0 [pid 5324] ioctl(4, LOOP_SET_FD, 3 [pid 5322] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5326] setpgid(0, 0 [pid 5325] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... futex resumed>) = 0 [pid 5319] <... futex resumed>) = 1 [pid 5326] <... setpgid resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5322] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5319] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5323] <... mount resumed>) = 0 [pid 5323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5323] chdir("./file1") = 0 [pid 5323] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5326] <... openat resumed>) = 3 [pid 5325] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5323] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] write(3, "1000", 4 [pid 5325] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5323] <... futex resumed>) = 1 [pid 5320] <... futex resumed>) = 0 [pid 5326] <... write resumed>) = 4 [pid 5325] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5323] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... ioctl resumed>) = 0 [pid 5326] close(3 [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] <... futex resumed>) = 0 [pid 5323] creat("./file0", 000) = 4 [pid 5320] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5323] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] <... futex resumed>) = 0 [pid 5323] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] <... futex resumed>) = 0 [pid 5323] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5320] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5326] <... close resumed>) = 0 [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5326] symlink("/dev/binderfs", "./binderfs" [pid 5324] close(3 [pid 5319] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5325] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5324] <... close resumed>) = 0 [pid 5326] <... symlink resumed>) = 0 [pid 5326] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5325] <... mprotect resumed>) = 0 [pid 5324] close(4 [pid 5319] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... close resumed>) = 0 [pid 5324] mkdir("./file1", 0777) = 0 [pid 5324] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5319] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = 0 [pid 5325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5326] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5326] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5319] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5325] <... clone3 resumed> => {parent_tid=[5327]}, 88) = 5327 [pid 5319] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5327 attached [pid 5326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5324] <... mount resumed>) = 0 [pid 5319] <... rt_sigprocmask resumed>[], 8) = 0 [ 88.531553][ T5322] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.543242][ T5324] loop3: detected capacity change from 0 to 1024 [ 88.550315][ T5322] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.558913][ T5323] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.566755][ T5322] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.571967][ T5323] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5327] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5324] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5319] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5328 attached [pid 5327] <... rseq resumed>) = 0 [pid 5326] <... mmap resumed>) = 0x7f96081b8000 [pid 5325] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... openat resumed>) = 3 [pid 5324] chdir("./file1" [pid 5320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5324] <... chdir resumed>) = 0 [pid 5320] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5326] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5327] set_robust_list(0x7f96081d89a0, 24 [pid 5325] <... futex resumed>) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5320] <... futex resumed>) = 0 [pid 5319] <... clone3 resumed> => {parent_tid=[5328]}, 88) = 5328 [pid 5328] <... rseq resumed>) = 0 [pid 5327] <... set_robust_list resumed>) = 0 [pid 5326] <... mprotect resumed>) = 0 [pid 5325] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5324] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5328] set_robust_list(0x7f96081b79a0, 24 [pid 5327] rt_sigprocmask(SIG_SETMASK, [], [pid 5326] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5324] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] <... mmap resumed>) = 0x7f9608197000 [pid 5319] rt_sigprocmask(SIG_SETMASK, [], [pid 5328] <... set_robust_list resumed>) = 0 [pid 5327] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5326] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5321] <... futex resumed>) = 0 [pid 5320] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5328] rt_sigprocmask(SIG_SETMASK, [], [pid 5327] memfd_create("syzkaller", 0 [pid 5326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5324] creat("./file0", 000 [pid 5321] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] <... mprotect resumed>) = 0 [pid 5319] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5324] <... creat resumed>) = 4 [pid 5321] <... futex resumed>) = 0 [pid 5320] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5324] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5324] <... futex resumed>) = 0 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5324] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5329 attached [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... futex resumed>) = 0 [pid 5320] <... clone3 resumed> => {parent_tid=[5329]}, 88) = 5329 [ 88.605994][ T5323] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.610857][ T5322] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.641248][ T5322] hfsplus: request for non-existent node 16777216 in B*Tree ./strace-static-x86_64: Process 5330 attached [pid 5329] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5327] <... memfd_create resumed>) = 3 [pid 5326] <... clone3 resumed> => {parent_tid=[5330]}, 88) = 5330 [pid 5324] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5321] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] rt_sigprocmask(SIG_SETMASK, [], [pid 5319] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5329] <... rseq resumed>) = 0 [pid 5328] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5326] rt_sigprocmask(SIG_SETMASK, [], [pid 5322] <... write resumed>) = 53248 [pid 5320] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5319] <... futex resumed>) = 0 [pid 5330] <... rseq resumed>) = 0 [pid 5320] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5329] set_robust_list(0x7f96081b79a0, 24 [pid 5320] <... futex resumed>) = 0 [pid 5329] <... set_robust_list resumed>) = 0 [pid 5320] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5329] rt_sigprocmask(SIG_SETMASK, [], [pid 5328] <... open resumed>) = 5 [pid 5326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5330] set_robust_list(0x7f96081d89a0, 24 [pid 5327] <... mmap resumed>) = 0x7f95ffc00000 [pid 5330] <... set_robust_list resumed>) = 0 [pid 5328] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] rt_sigprocmask(SIG_SETMASK, [], [pid 5328] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = 0 [pid 5329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5329] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5326] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5328] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 88.656363][ T5323] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.662928][ T5322] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.675675][ T5324] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5330] memfd_create("syzkaller", 0 [pid 5327] <... write resumed>) = 524288 [pid 5319] exit_group(0 [pid 5330] <... memfd_create resumed>) = 3 [pid 5328] <... futex resumed>) = ? [pid 5322] <... futex resumed>) = ? [pid 5319] <... exit_group resumed>) = ? [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5328] +++ exited with 0 +++ [pid 5327] munmap(0x7f95ffc00000, 138412032 [pid 5322] +++ exited with 0 +++ [pid 5319] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5321] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5082] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5320] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5321] <... mmap resumed>) = 0x7f9608197000 [pid 5082] getdents64(3, [pid 5321] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5330] <... mmap resumed>) = 0x7f95ffc00000 [pid 5321] <... mprotect resumed>) = 0 [pid 5082] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5327] <... munmap resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./16/binderfs") = 0 [pid 5082] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5321] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5327] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5321] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5327] <... openat resumed>) = 4 [pid 5321] <... clone3 resumed> => {parent_tid=[5331]}, 88) = 5331 [pid 5321] rt_sigprocmask(SIG_SETMASK, [], [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5321] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5327] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5331 attached [pid 5321] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 88.691692][ T29] audit: type=1800 audit(1715660561.352:78): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 88.704885][ T5323] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.714183][ T5324] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.731361][ T5323] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.748629][ T5327] loop0: detected capacity change from 0 to 1024 [pid 5321] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5331] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5330] <... write resumed>) = 524288 [pid 5329] <... open resumed>) = 5 [pid 5327] <... ioctl resumed>) = 0 [ 88.751461][ T5324] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.766368][ T5324] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.773013][ T29] audit: type=1800 audit(1715660561.352:79): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [pid 5331] <... rseq resumed>) = 0 [pid 5330] munmap(0x7f95ffc00000, 138412032 [pid 5329] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] close(3 [pid 5323] <... write resumed>) = 53248 [pid 5331] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5329] <... futex resumed>) = 0 [pid 5327] <... close resumed>) = 0 [pid 5323] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5329] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] close(4 [pid 5330] <... munmap resumed>) = 0 [pid 5323] <... futex resumed>) = 0 [pid 5331] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5327] <... close resumed>) = 0 [pid 5320] exit_group(0 [pid 5329] <... futex resumed>) = ? [pid 5320] <... exit_group resumed>) = ? [pid 5329] +++ exited with 0 +++ [pid 5321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5331] <... open resumed>) = 5 [pid 5330] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5327] mkdir("./file1", 0777 [pid 5323] +++ exited with 0 +++ [pid 5320] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5327] <... mkdir resumed>) = 0 [pid 5331] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... openat resumed>) = 4 [pid 5327] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5331] <... futex resumed>) = 0 [pid 5330] ioctl(4, LOOP_SET_FD, 3 [pid 5085] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5331] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5330] <... ioctl resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5330] close(3) = 0 [pid 5082] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./16/file1", [pid 5085] unlink("./15/binderfs" [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5082] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5330] close(4 [pid 5082] <... openat resumed>) = 4 [pid 5330] <... close resumed>) = 0 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./16/file1") = 0 [pid 5330] mkdir("./file1", 0777) = 0 [pid 5327] <... mount resumed>) = 0 [pid 5082] getdents64(3, [pid 5330] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] <... umount2 resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [ 88.807533][ T5324] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.807554][ T29] audit: type=1800 audit(1715660561.462:80): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 88.822386][ T5324] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.835270][ T5330] loop2: detected capacity change from 0 to 1024 [pid 5330] <... mount resumed>) = 0 [pid 5324] <... write resumed>) = 53248 [pid 5085] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] close(3 [pid 5327] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... close resumed>) = 0 [pid 5327] <... openat resumed>) = 3 [pid 5085] newfstatat(AT_FDCWD, "./15/file1", [pid 5082] rmdir("./16") = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5085] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5327] chdir("./file1" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] mkdir("./17", 0777 [pid 5330] <... openat resumed>) = 3 [pid 5330] chdir("./file1" [pid 5327] <... chdir resumed>) = 0 [pid 5324] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... mkdir resumed>) = 0 [pid 5327] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5321] exit_group(0 [pid 5085] <... openat resumed>) = 4 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5331] <... futex resumed>) = ? [pid 5330] <... chdir resumed>) = 0 [pid 5327] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5321] <... exit_group resumed>) = ? [pid 5085] newfstatat(4, "", [pid 5082] <... openat resumed>) = 3 [pid 5331] +++ exited with 0 +++ [pid 5330] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5327] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = ? [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5327] <... futex resumed>) = 1 [pid 5085] getdents64(4, [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5327] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./15/file1") = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./15") = 0 [pid 5085] mkdir("./16", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5325] <... futex resumed>) = 0 [pid 5330] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5325] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... futex resumed>) = 0 [pid 5325] <... futex resumed>) = 1 [pid 5327] creat("./file0", 000 [pid 5325] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] <... creat resumed>) = 4 [pid 5327] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5325] <... futex resumed>) = 0 [pid 5327] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5325] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] +++ exited with 0 +++ [pid 5330] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] +++ exited with 0 +++ [pid 5325] <... futex resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5321, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5325] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5330] <... futex resumed>) = 1 [pid 5326] <... futex resumed>) = 0 [pid 5330] creat("./file0", 000 [pid 5326] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] <... creat resumed>) = 4 [pid 5326] <... futex resumed>) = 0 [pid 5330] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] <... futex resumed>) = 0 [pid 5326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5084] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5330] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5326] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5326] <... futex resumed>) = 0 [pid 5326] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./15/binderfs") = 0 [pid 5084] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... ioctl resumed>) = 0 [pid 5082] close(3) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3./strace-static-x86_64: Process 5332 attached ) = 0 [pid 5332] set_robust_list(0x5555939db6a0, 24 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5332] <... set_robust_list resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5332 [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5325] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] chdir("./17" [pid 5325] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5333 attached [pid 5332] <... chdir resumed>) = 0 [pid 5333] set_robust_list(0x5555939db6a0, 24 [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5325] <... mmap resumed>) = 0x7f9608197000 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5333 [pid 5333] <... set_robust_list resumed>) = 0 [pid 5332] <... prctl resumed>) = 0 [pid 5332] setpgid(0, 0 [pid 5325] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5333] chdir("./16" [pid 5332] <... setpgid resumed>) = 0 [pid 5325] <... mprotect resumed>) = 0 [pid 5325] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5333] <... chdir resumed>) = 0 [pid 5333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5332] <... openat resumed>) = 3 [pid 5325] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5325] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5334 attached [pid 5334] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5325] <... clone3 resumed> => {parent_tid=[5334]}, 88) = 5334 [pid 5325] rt_sigprocmask(SIG_SETMASK, [], [pid 5334] <... rseq resumed>) = 0 [pid 5325] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5334] set_robust_list(0x7f96081b79a0, 24 [pid 5325] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5325] <... futex resumed>) = 0 [pid 5334] rt_sigprocmask(SIG_SETMASK, [], [pid 5326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5325] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5326] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5326] <... futex resumed>) = 0 [pid 5326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5332] write(3, "1000", 4 [pid 5333] <... prctl resumed>) = 0 [pid 5326] <... mmap resumed>) = 0x7f9608197000 [pid 5084] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5326] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5333] setpgid(0, 0 [pid 5332] <... write resumed>) = 4 [pid 5326] <... mprotect resumed>) = 0 [ 88.921395][ T5327] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.930174][ T5330] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.930658][ T5327] hfsplus: request for non-existent node 16777216 in B*Tree [ 88.945664][ T5330] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] newfstatat(AT_FDCWD, "./15/file1", [pid 5333] <... setpgid resumed>) = 0 [pid 5332] close(3 [pid 5326] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5326] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5335 attached [pid 5084] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5335] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5326] <... clone3 resumed> => {parent_tid=[5335]}, 88) = 5335 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] <... rseq resumed>) = 0 [pid 5326] rt_sigprocmask(SIG_SETMASK, [], [pid 5335] set_robust_list(0x7f96081b79a0, 24 [pid 5326] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5335] <... set_robust_list resumed>) = 0 [pid 5326] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 4 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], [pid 5326] <... futex resumed>) = 0 [pid 5335] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5326] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5335] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] close(4 [pid 5333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5332] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./15/file1") = 0 [pid 5333] <... openat resumed>) = 3 [pid 5332] symlink("/dev/binderfs", "./binderfs" [pid 5333] write(3, "1000", 4) = 4 [pid 5084] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5332] <... symlink resumed>) = 0 [pid 5333] close(3 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./15" [pid 5333] <... close resumed>) = 0 [pid 5333] symlink("/dev/binderfs", "./binderfs" [pid 5332] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5333] <... symlink resumed>) = 0 [pid 5332] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] <... rmdir resumed>) = 0 [ 88.995660][ T5330] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.025301][ T5327] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.038487][ T5330] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5333] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5326] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5325] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] mkdir("./16", 0777 [pid 5332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5332] <... mmap resumed>) = 0x7f96081b8000 [pid 5084] <... openat resumed>) = 3 [pid 5332] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5332] <... mprotect resumed>) = 0 [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5333] <... futex resumed>) = 0 [pid 5332] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5333] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5333] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5333] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5335] <... open resumed>) = 5 [pid 5334] <... open resumed>) = 5 [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5336 attached [pid 5334] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5335] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5334] <... futex resumed>) = 0 [pid 5333] <... mmap resumed>) = 0x7f96081b8000 [pid 5335] <... futex resumed>) = 0 [pid 5334] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5335] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5336] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5332] <... clone3 resumed> => {parent_tid=[5336]}, 88) = 5336 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5332] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5332] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5336] <... rseq resumed>) = 0 [pid 5336] set_robust_list(0x7f96081d89a0, 24 [pid 5333] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5336] <... set_robust_list resumed>) = 0 [pid 5336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5336] memfd_create("syzkaller", 0 [pid 5333] <... mprotect resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 89.048178][ T5327] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.070595][ T5327] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.078405][ T5330] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5336] <... memfd_create resumed>) = 3 [pid 5333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5337 ./strace-static-x86_64: Process 5338 attached ./strace-static-x86_64: Process 5337 attached [pid 5336] <... mmap resumed>) = 0x7f95ffc00000 [pid 5333] <... clone3 resumed> => {parent_tid=[5338]}, 88) = 5338 [pid 5338] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5337] set_robust_list(0x5555939db6a0, 24 [pid 5336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5337] <... set_robust_list resumed>) = 0 [pid 5338] <... rseq resumed>) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5338] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5337] chdir("./16" [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5330] <... write resumed>) = 53248 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], [pid 5337] <... chdir resumed>) = 0 [pid 5333] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5333] <... futex resumed>) = 0 [pid 5330] <... futex resumed>) = 0 [pid 5338] memfd_create("syzkaller", 0 [pid 5337] <... prctl resumed>) = 0 [pid 5333] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5330] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5327] <... write resumed>) = 53248 [pid 5338] <... memfd_create resumed>) = 3 [pid 5337] setpgid(0, 0 [pid 5327] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5326] exit_group(0 [pid 5325] exit_group(0 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5337] <... setpgid resumed>) = 0 [pid 5335] <... futex resumed>) = ? [pid 5334] <... futex resumed>) = ? [pid 5330] <... futex resumed>) = ? [pid 5327] <... futex resumed>) = ? [pid 5326] <... exit_group resumed>) = ? [pid 5325] <... exit_group resumed>) = ? [pid 5338] <... mmap resumed>) = 0x7f95ffc00000 [pid 5337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5335] +++ exited with 0 +++ [pid 5334] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5327] +++ exited with 0 +++ [pid 5326] +++ exited with 0 +++ [pid 5337] <... openat resumed>) = 3 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5326, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5337] write(3, "1000", 4 [pid 5083] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5337] <... write resumed>) = 4 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5337] close(3 [pid 5083] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5337] <... close resumed>) = 0 [pid 5337] symlink("/dev/binderfs", "./binderfs" [pid 5336] <... write resumed>) = 524288 [pid 5325] +++ exited with 0 +++ [pid 5083] <... openat resumed>) = 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5337] <... symlink resumed>) = 0 [pid 5083] newfstatat(3, "", [pid 5081] <... restart_syscall resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5337] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] munmap(0x7f95ffc00000, 138412032 [pid 5083] getdents64(3, [pid 5337] <... futex resumed>) = 0 [pid 5338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5337] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5336] <... munmap resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5338] <... write resumed>) = 524288 [pid 5337] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5083] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [ 89.103827][ T5330] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.123812][ T5327] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5337] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5336] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5336] <... openat resumed>) = 4 [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5336] ioctl(4, LOOP_SET_FD, 3 [pid 5081] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5337] <... mmap resumed>) = 0x7f96081b8000 [pid 5336] <... ioctl resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5337] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(3, "", [pid 5337] <... mprotect resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./15/binderfs", [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] getdents64(3, [pid 5337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] unlink("./15/binderfs" [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5083] <... unlink resumed>) = 0 [pid 5081] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5339 attached [pid 5081] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./15/binderfs" [pid 5339] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5337] <... clone3 resumed> => {parent_tid=[5339]}, 88) = 5339 [pid 5081] <... unlink resumed>) = 0 [pid 5339] <... rseq resumed>) = 0 [pid 5338] munmap(0x7f95ffc00000, 138412032 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5338] <... munmap resumed>) = 0 [pid 5337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5337] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5337] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5338] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5339] set_robust_list(0x7f96081d89a0, 24 [pid 5338] <... openat resumed>) = 4 [pid 5338] ioctl(4, LOOP_SET_FD, 3 [pid 5339] <... set_robust_list resumed>) = 0 [pid 5336] close(3 [pid 5339] rt_sigprocmask(SIG_SETMASK, [], [pid 5336] <... close resumed>) = 0 [pid 5339] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5336] close(4) = 0 [pid 5336] mkdir("./file1", 0777 [pid 5339] memfd_create("syzkaller", 0 [pid 5336] <... mkdir resumed>) = 0 [pid 5336] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5338] <... ioctl resumed>) = 0 [pid 5339] <... memfd_create resumed>) = 3 [pid 5336] <... mount resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5338] close(3 [pid 5336] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5339] <... mmap resumed>) = 0x7f95ffc00000 [pid 5338] <... close resumed>) = 0 [pid 5336] <... openat resumed>) = 3 [pid 5083] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5338] close(4) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5338] mkdir("./file1", 0777 [pid 5336] chdir("./file1" [pid 5083] newfstatat(AT_FDCWD, "./15/file1", [pid 5081] newfstatat(AT_FDCWD, "./15/file1", [pid 5338] <... mkdir resumed>) = 0 [pid 5336] <... chdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5336] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5338] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5336] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5336] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5336] creat("./file0", 000 [pid 5332] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5336] <... creat resumed>) = 4 [pid 5332] <... futex resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5332] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... openat resumed>) = 4 [pid 5081] <... openat resumed>) = 4 [pid 5336] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] newfstatat(4, "", [pid 5336] <... futex resumed>) = 1 [pid 5332] <... futex resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] newfstatat(4, "", [pid 5336] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5332] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] getdents64(4, [pid 5332] <... futex resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5332] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] getdents64(4, [pid 5081] getdents64(4, [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] close(4 [ 89.176281][ T5336] loop1: detected capacity change from 0 to 1024 [ 89.199490][ T5338] loop4: detected capacity change from 0 to 1024 [pid 5081] getdents64(4, [pid 5083] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] rmdir("./15/file1" [pid 5081] close(4 [pid 5339] <... write resumed>) = 524288 [pid 5339] munmap(0x7f95ffc00000, 138412032 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5083] getdents64(3, [pid 5081] rmdir("./15/file1" [pid 5339] <... munmap resumed>) = 0 [pid 5338] <... mount resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5339] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5338] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5339] <... openat resumed>) = 4 [pid 5338] <... openat resumed>) = 3 [pid 5083] close(3 [pid 5081] getdents64(3, [pid 5338] chdir("./file1" [pid 5083] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] rmdir("./15" [pid 5081] close(3 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5083] mkdir("./16", 0777 [pid 5081] rmdir("./15" [pid 5083] <... mkdir resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] mkdir("./16", 0777 [pid 5083] <... openat resumed>) = 3 [pid 5081] <... mkdir resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5339] ioctl(4, LOOP_SET_FD, 3 [pid 5338] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5339] <... ioctl resumed>) = 0 [pid 5338] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5338] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5338] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5333] <... futex resumed>) = 0 [pid 5333] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 89.255691][ T5336] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.285047][ T5339] loop3: detected capacity change from 0 to 1024 [ 89.286073][ T5336] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5339] close(3 [pid 5338] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5332] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] creat("./file0", 000) = 4 [pid 5338] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5338] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] <... close resumed>) = 0 [pid 5339] close(4 [pid 5333] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5332] <... futex resumed>) = 0 [pid 5339] <... close resumed>) = 0 [pid 5339] mkdir("./file1", 0777 [pid 5332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5339] <... mkdir resumed>) = 0 [pid 5333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5332] <... mmap resumed>) = 0x7f9608197000 [pid 5083] <... ioctl resumed>) = 0 [pid 5333] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5338] <... futex resumed>) = 0 [pid 5333] <... futex resumed>) = 1 [pid 5332] <... mprotect resumed>) = 0 [pid 5338] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5333] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... ioctl resumed>) = 0 [pid 5339] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5332] rt_sigprocmask(SIG_BLOCK, ~[], [ 89.301642][ T5336] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.309382][ T5336] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.330135][ T5338] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.338682][ T5336] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] close(3 [pid 5339] <... mount resumed>) = 0 [pid 5332] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] close(3 [pid 5339] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... close resumed>) = 0 [pid 5339] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5340 attached [pid 5339] chdir("./file1" [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5340] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5339] <... chdir resumed>) = 0 [pid 5332] <... clone3 resumed> => {parent_tid=[5340]}, 88) = 5340 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5341 [pid 5339] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5342 attached ./strace-static-x86_64: Process 5341 attached [pid 5340] <... rseq resumed>) = 0 [pid 5339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5332] rt_sigprocmask(SIG_SETMASK, [], [pid 5342] set_robust_list(0x5555939db6a0, 24 [pid 5341] set_robust_list(0x5555939db6a0, 24 [pid 5340] set_robust_list(0x7f96081b79a0, 24 [pid 5339] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5342 [pid 5342] <... set_robust_list resumed>) = 0 [pid 5341] <... set_robust_list resumed>) = 0 [pid 5340] <... set_robust_list resumed>) = 0 [pid 5339] <... futex resumed>) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5332] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] chdir("./16" [pid 5341] chdir("./16" [pid 5340] rt_sigprocmask(SIG_SETMASK, [], [pid 5339] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5332] <... futex resumed>) = 0 [pid 5340] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5337] <... futex resumed>) = 0 [pid 5339] creat("./file0", 000 [pid 5340] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5337] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] <... chdir resumed>) = 0 [pid 5333] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5333] <... futex resumed>) = 0 [pid 5339] <... creat resumed>) = 4 [pid 5341] <... prctl resumed>) = 0 [pid 5333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5341] setpgid(0, 0) = 0 [pid 5333] <... mmap resumed>) = 0x7f9608197000 [pid 5332] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5339] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5333] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5339] <... futex resumed>) = 1 [pid 5337] <... futex resumed>) = 0 [pid 5341] <... openat resumed>) = 3 [pid 5333] <... mprotect resumed>) = 0 [ 89.356089][ T5338] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.370063][ T5338] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.379924][ T5336] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5341] write(3, "1000", 4 [pid 5333] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5337] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... chdir resumed>) = 0 [pid 5341] <... write resumed>) = 4 [pid 5339] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5337] <... futex resumed>) = 0 [pid 5341] close(3 [pid 5333] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5340] <... open resumed>) = 5 [pid 5337] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5342] <... prctl resumed>) = 0 [pid 5340] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] setpgid(0, 0 [pid 5341] <... close resumed>) = 0 [pid 5340] <... futex resumed>) = 1 [pid 5333] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5332] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5343 attached [pid 5342] <... setpgid resumed>) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs" [pid 5340] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] <... symlink resumed>) = 0 [pid 5343] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5341] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5333] <... clone3 resumed> => {parent_tid=[5343]}, 88) = 5343 [pid 5343] <... rseq resumed>) = 0 [pid 5341] <... futex resumed>) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], [pid 5343] set_robust_list(0x7f96081b79a0, 24 [pid 5342] <... openat resumed>) = 3 [pid 5341] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5341] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5333] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5333] <... futex resumed>) = 0 [pid 5341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5333] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5341] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5343] <... set_robust_list resumed>) = 0 [pid 5342] write(3, "1000", 4 [pid 5341] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5336] <... write resumed>) = 53248 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], [pid 5342] <... write resumed>) = 4 [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5336] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5342] close(3 [pid 5336] <... futex resumed>) = 0 [pid 5343] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5342] <... close resumed>) = 0 [pid 5341] <... clone3 resumed> => {parent_tid=[5344]}, 88) = 5344 [pid 5336] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5332] exit_group(0./strace-static-x86_64: Process 5344 attached [pid 5342] symlink("/dev/binderfs", "./binderfs" [pid 5341] rt_sigprocmask(SIG_SETMASK, [], [pid 5344] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5344] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5344] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 89.410951][ T5338] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.427703][ T5339] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.446527][ T5338] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.447713][ T5339] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5342] <... symlink resumed>) = 0 [pid 5341] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = 0 [pid 5341] <... futex resumed>) = 1 [pid 5344] memfd_create("syzkaller", 0 [pid 5342] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5340] <... futex resumed>) = ? [pid 5336] <... futex resumed>) = ? [pid 5332] <... exit_group resumed>) = ? [pid 5344] <... memfd_create resumed>) = 3 [pid 5336] +++ exited with 0 +++ [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5340] +++ exited with 0 +++ [pid 5342] <... futex resumed>) = 0 [pid 5337] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5342] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5337] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] +++ exited with 0 +++ [pid 5342] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5337] <... futex resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5337] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] restart_syscall(<... resuming interrupted clone ...> [pid 5342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5337] <... mmap resumed>) = 0x7f9608197000 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5337] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5342] <... mmap resumed>) = 0x7f96081b8000 [pid 5337] <... mprotect resumed>) = 0 [pid 5333] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5337] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] unlink("./17/binderfs" [pid 5342] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5337] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5342] <... mprotect resumed>) = 0 [pid 5337] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5082] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5342] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5345 attached [], 8) = 0 [pid 5337] <... clone3 resumed> => {parent_tid=[5345]}, 88) = 5345 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5345] <... rseq resumed>) = 0 [pid 5337] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5346 attached [pid 5345] set_robust_list(0x7f96081b79a0, 24 [pid 5344] <... write resumed>) = 524288 [pid 5337] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [ 89.463658][ T5339] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.481938][ T5338] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.489831][ T5339] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5344] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5345] <... set_robust_list resumed>) = 0 [pid 5337] <... futex resumed>) = 0 [pid 5345] rt_sigprocmask(SIG_SETMASK, [], [pid 5342] <... clone3 resumed> => {parent_tid=[5346]}, 88) = 5346 [pid 5346] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5345] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5343] <... open resumed>) = 5 [pid 5337] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5346] <... rseq resumed>) = 0 [pid 5345] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5343] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] rt_sigprocmask(SIG_SETMASK, [], [pid 5346] set_robust_list(0x7f96081d89a0, 24 [pid 5343] <... futex resumed>) = 0 [pid 5342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5338] <... write resumed>) = 53248 [pid 5346] <... set_robust_list resumed>) = 0 [pid 5342] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5343] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5346] rt_sigprocmask(SIG_SETMASK, [], [pid 5345] <... open resumed>) = 5 [pid 5344] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5342] <... futex resumed>) = 0 [pid 5338] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5346] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5345] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... openat resumed>) = 4 [pid 5342] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5338] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5346] memfd_create("syzkaller", 0 [pid 5345] <... futex resumed>) = 1 [pid 5344] ioctl(4, LOOP_SET_FD, 3 [pid 5337] <... futex resumed>) = 0 [pid 5333] exit_group(0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5346] <... memfd_create resumed>) = 3 [pid 5345] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5339] <... write resumed>) = 53248 [pid 5338] <... futex resumed>) = ? [pid 5333] <... exit_group resumed>) = ? [pid 5339] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] +++ exited with 0 +++ [pid 5339] <... futex resumed>) = 0 [pid 5339] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5337] exit_group(0 [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5344] <... ioctl resumed>) = 0 [pid 5343] <... futex resumed>) = ? [pid 5082] newfstatat(AT_FDCWD, "./17/file1", [pid 5344] close(3 [pid 5339] <... futex resumed>) = ? [pid 5337] <... exit_group resumed>) = ? [pid 5346] <... mmap resumed>) = 0x7f95ffc00000 [pid 5345] <... futex resumed>) = ? [pid 5344] <... close resumed>) = 0 [pid 5339] +++ exited with 0 +++ [pid 5344] close(4 [pid 5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5344] <... close resumed>) = 0 [pid 5343] +++ exited with 0 +++ [pid 5333] +++ exited with 0 +++ [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5344] mkdir("./file1", 0777) = 0 [pid 5344] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5345] +++ exited with 0 +++ [pid 5337] +++ exited with 0 +++ [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5333, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5082] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5337, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5082] <... openat resumed>) = 4 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5085] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] newfstatat(4, "", [pid 5084] <... restart_syscall resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", [pid 5082] getdents64(4, [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5084] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] getdents64(4, [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5082] close(4) = 0 [pid 5085] unlink("./16/binderfs" [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] rmdir("./17/file1" [pid 5085] <... unlink resumed>) = 0 [pid 5084] getdents64(3, [pid 5082] <... rmdir resumed>) = 0 [pid 5082] getdents64(3, [pid 5085] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] close(3) = 0 [pid 5082] rmdir("./17" [pid 5084] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5344] <... mount resumed>) = 0 [pid 5344] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5084] unlink("./16/binderfs" [pid 5344] chdir("./file1") = 0 [pid 5344] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5084] <... unlink resumed>) = 0 [pid 5084] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5344] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5341] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] creat("./file0", 000 [pid 5341] <... futex resumed>) = 0 [pid 5344] <... creat resumed>) = 4 [pid 5341] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... futex resumed>) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5082] mkdir("./18", 0777 [pid 5341] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... mkdir resumed>) = 0 [pid 5344] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 89.510020][ T5339] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.518950][ T5339] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.534342][ T5344] loop2: detected capacity change from 0 to 1024 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5346] <... write resumed>) = 524288 [pid 5346] munmap(0x7f95ffc00000, 138412032 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5346] <... munmap resumed>) = 0 [pid 5085] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... openat resumed>) = 3 [pid 5084] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5346] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5084] newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] close(4 [pid 5085] newfstatat(AT_FDCWD, "./16/file1", [pid 5084] <... close resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] rmdir("./16/file1" [pid 5346] <... openat resumed>) = 4 [pid 5085] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5346] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... rmdir resumed>) = 0 [pid 5341] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5346] <... ioctl resumed>) = 0 [ 89.591428][ T5344] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.600481][ T5344] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.610066][ T5344] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.620345][ T5344] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.630802][ T5346] loop0: detected capacity change from 0 to 1024 [pid 5341] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5346] close(3 [pid 5341] <... futex resumed>) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5084] getdents64(3, [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./16/file1" [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5346] <... close resumed>) = 0 [pid 5085] getdents64(3, [pid 5346] close(4 [pid 5341] <... mmap resumed>) = 0x7f9608197000 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] close(3 [pid 5341] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... ioctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5346] <... close resumed>) = 0 [pid 5341] <... mprotect resumed>) = 0 [pid 5085] close(3 [pid 5084] rmdir("./16" [pid 5346] mkdir("./file1", 0777 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... close resumed>) = 0 [pid 5346] <... mkdir resumed>) = 0 [pid 5341] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] rmdir("./16" [pid 5084] <... rmdir resumed>) = 0 [pid 5082] close(3 [pid 5346] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... rmdir resumed>) = 0 [pid 5084] mkdir("./17", 0777 [pid 5082] <... close resumed>) = 0 ./strace-static-x86_64: Process 5347 attached [pid 5085] mkdir("./17", 0777 [pid 5084] <... mkdir resumed>) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5341] <... clone3 resumed> => {parent_tid=[5347]}, 88) = 5347 [pid 5347] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5347] <... rseq resumed>) = 0 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], [pid 5347] set_robust_list(0x7f96081b79a0, 24 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5347] <... set_robust_list resumed>) = 0 [pid 5341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5347] rt_sigprocmask(SIG_SETMASK, [], [pid 5341] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5347] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5341] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5348 attached [pid 5347] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5341] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5348] set_robust_list(0x5555939db6a0, 24 [pid 5347] <... open resumed>) = 5 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5348 [pid 5348] <... set_robust_list resumed>) = 0 [pid 5348] chdir("./18" [pid 5344] <... write resumed>) = 53248 [pid 5348] <... chdir resumed>) = 0 [pid 5347] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5347] <... futex resumed>) = 1 [pid 5344] <... futex resumed>) = 0 [pid 5341] <... futex resumed>) = 0 [pid 5348] <... prctl resumed>) = 0 [pid 5347] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5344] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] exit_group(0 [pid 5348] setpgid(0, 0 [pid 5347] <... futex resumed>) = ? [pid 5344] <... futex resumed>) = ? [pid 5341] <... exit_group resumed>) = ? [pid 5348] <... setpgid resumed>) = 0 [pid 5347] +++ exited with 0 +++ [pid 5344] +++ exited with 0 +++ [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5346] <... mount resumed>) = 0 [pid 5348] <... openat resumed>) = 3 [pid 5346] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5341] +++ exited with 0 +++ [pid 5348] write(3, "1000", 4 [pid 5346] <... openat resumed>) = 3 [pid 5348] <... write resumed>) = 4 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5348] close(3 [pid 5083] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5348] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5348] symlink("/dev/binderfs", "./binderfs" [pid 5083] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", [pid 5348] <... symlink resumed>) = 0 [pid 5346] chdir("./file1" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5348] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5346] <... chdir resumed>) = 0 [pid 5083] getdents64(3, [pid 5348] <... futex resumed>) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5348] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5083] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5348] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5346] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5346] <... futex resumed>) = 1 [ 89.641039][ T5344] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.665585][ T5344] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5342] <... futex resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./16/binderfs", [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5346] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5342] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] unlink("./16/binderfs" [pid 5348] <... mmap resumed>) = 0x7f96081b8000 [pid 5346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5342] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... unlink resumed>) = 0 [pid 5346] creat("./file0", 000 [pid 5085] close(3 [pid 5083] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5349 attached [pid 5348] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5346] <... creat resumed>) = 4 [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5349] set_robust_list(0x5555939db6a0, 24 [pid 5348] <... mprotect resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5349 [pid 5346] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5346] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] <... futex resumed>) = 0 [pid 5346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5342] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] <... set_robust_list resumed>) = 0 [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5346] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5342] <... futex resumed>) = 0 [pid 5349] chdir("./17" [pid 5342] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5350 attached [pid 5349] <... chdir resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5350 [pid 5349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5350] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5350] chdir("./17") = 0 [pid 5350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5350] setpgid(0, 0) = 0 [pid 5350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5350] write(3, "1000", 4) = 4 [pid 5350] close(3) = 0 [pid 5350] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5350] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] setpgid(0, 0 [pid 5348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5350] <... futex resumed>) = 0 [pid 5350] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5349] <... setpgid resumed>) = 0 [pid 5083] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5351 attached [pid 5350] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5348] <... clone3 resumed> => {parent_tid=[5351]}, 88) = 5351 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5350] <... mprotect resumed>) = 0 [pid 5349] <... openat resumed>) = 3 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] newfstatat(AT_FDCWD, "./16/file1", [pid 5351] <... rseq resumed>) = 0 [pid 5350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5349] write(3, "1000", 4 [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5351] set_robust_list(0x7f96081d89a0, 24 [pid 5350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5351] <... set_robust_list resumed>) = 0 [pid 5350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5352 attached [pid 5351] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5351] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5350] <... clone3 resumed> => {parent_tid=[5352]}, 88) = 5352 [pid 5352] <... rseq resumed>) = 0 [pid 5351] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] set_robust_list(0x7f96081d89a0, 24 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] <... write resumed>) = 4 [pid 5348] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5352] <... set_robust_list resumed>) = 0 [pid 5351] memfd_create("syzkaller", 0 [pid 5350] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] close(3 [pid 5348] <... futex resumed>) = 0 [pid 5352] rt_sigprocmask(SIG_SETMASK, [], [pid 5351] <... memfd_create resumed>) = 3 [pid 5350] <... futex resumed>) = 0 [pid 5349] <... close resumed>) = 0 [pid 5348] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5083] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5352] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5350] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5349] symlink("/dev/binderfs", "./binderfs" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5352] memfd_create("syzkaller", 0 [pid 5351] <... mmap resumed>) = 0x7f95ffc00000 [pid 5352] <... memfd_create resumed>) = 3 [pid 5349] <... symlink resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5349] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 4 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5349] <... futex resumed>) = 0 [pid 5083] newfstatat(4, "", [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5349] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5342] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5349] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5342] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5342] <... mmap resumed>) = 0x7f9608197000 [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5342] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5083] getdents64(4, [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5342] <... mprotect resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [ 89.748983][ T5346] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.769268][ T5346] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5349] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] getdents64(4, [pid 5349] <... mprotect resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5351] <... write resumed>) = 524288 [pid 5349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] close(4) = 0 [pid 5349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] rmdir("./16/file1" [pid 5349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5353 attached [pid 5351] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5351] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5353] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5352] <... write resumed>) = 524288 [pid 5349] <... clone3 resumed> => {parent_tid=[5353]}, 88) = 5353 [pid 5342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5083] getdents64(3, [pid 5353] <... rseq resumed>) = 0 [pid 5351] <... openat resumed>) = 4 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5354 attached [pid 5353] set_robust_list(0x7f96081d89a0, 24 [pid 5351] ioctl(4, LOOP_SET_FD, 3 [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] close(3 [pid 5354] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5353] <... set_robust_list resumed>) = 0 [pid 5352] munmap(0x7f95ffc00000, 138412032 [pid 5351] <... ioctl resumed>) = 0 [pid 5354] <... rseq resumed>) = 0 [pid 5352] <... munmap resumed>) = 0 [pid 5354] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5354] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5352] <... openat resumed>) = 4 [pid 5353] rt_sigprocmask(SIG_SETMASK, [], [pid 5352] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... close resumed>) = 0 [pid 5353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... clone3 resumed> => {parent_tid=[5354]}, 88) = 5354 [pid 5083] rmdir("./16" [ 89.805770][ T5346] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.821164][ T5346] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.833478][ T5351] loop1: detected capacity change from 0 to 1024 [ 89.834398][ T5346] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.848570][ T5352] loop4: detected capacity change from 0 to 1024 [pid 5351] close(3) = 0 [pid 5351] close(4) = 0 [pid 5351] mkdir("./file1", 0777) = 0 [pid 5351] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5349] <... futex resumed>) = 0 [pid 5342] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... rmdir resumed>) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5352] close(3) = 0 [pid 5352] close(4 [pid 5353] memfd_create("syzkaller", 0 [pid 5352] <... close resumed>) = 0 [pid 5351] <... mount resumed>) = 0 [pid 5349] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5346] <... write resumed>) = 53248 [pid 5342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] mkdir("./17", 0777 [pid 5353] <... memfd_create resumed>) = 3 [pid 5352] mkdir("./file1", 0777 [pid 5351] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5346] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] <... mkdir resumed>) = 0 [pid 5351] <... openat resumed>) = 3 [pid 5346] <... futex resumed>) = 0 [pid 5342] <... futex resumed>) = 1 [pid 5083] <... mkdir resumed>) = 0 [pid 5354] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5353] <... mmap resumed>) = 0x7f95ffc00000 [pid 5351] chdir("./file1" [pid 5346] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... open resumed>) = 5 [pid 5352] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5351] <... chdir resumed>) = 0 [pid 5351] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5354] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] <... futex resumed>) = 0 [pid 5342] exit_group(0) = ? [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5346] <... futex resumed>) = ? [pid 5346] +++ exited with 0 +++ [pid 5083] <... openat resumed>) = 3 [pid 5354] <... futex resumed>) = ? [pid 5351] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5348] <... futex resumed>) = 0 [pid 5354] +++ exited with 0 +++ [pid 5351] creat("./file0", 000 [pid 5348] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] +++ exited with 0 +++ [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5351] <... creat resumed>) = 4 [pid 5348] <... futex resumed>) = 0 [pid 5348] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5342, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5351] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 5348] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5348] <... futex resumed>) = 0 [ 89.848638][ T5346] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5348] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5353] <... write resumed>) = 524288 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./16/binderfs") = 0 [pid 5081] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5353] munmap(0x7f95ffc00000, 138412032 [pid 5352] <... mount resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5352] chdir("./file1") = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5353] <... munmap resumed>) = 0 [pid 5352] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5352] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = 0 [pid 5350] <... futex resumed>) = 1 [pid 5352] creat("./file0", 000 [pid 5350] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5352] <... creat resumed>) = 4 [pid 5083] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5353] <... openat resumed>) = 4 [pid 5352] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [ 89.918062][ T5351] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.931300][ T5351] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.939983][ T5351] hfsplus: request for non-existent node 16777216 in B*Tree [ 89.948825][ T5351] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5350] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5348] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5353] <... ioctl resumed>) = 0 [pid 5348] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5353] close(3 [pid 5348] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5353] <... close resumed>) = 0 [pid 5353] close(4 [pid 5348] <... mmap resumed>) = 0x7f9608197000 [pid 5081] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5353] <... close resumed>) = 0 [pid 5348] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5081] newfstatat(AT_FDCWD, "./16/file1", ./strace-static-x86_64: Process 5355 attached [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5355 [pid 5355] set_robust_list(0x5555939db6a0, 24 [pid 5353] mkdir("./file1", 0777 [pid 5348] <... mprotect resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5355] <... set_robust_list resumed>) = 0 [pid 5355] chdir("./17" [pid 5353] <... mkdir resumed>) = 0 [pid 5081] umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5355] <... chdir resumed>) = 0 [pid 5348] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5081] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [pid 5081] rmdir("./16/file1") = 0 [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] getdents64(3, [pid 5355] <... prctl resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5355] setpgid(0, 0 [pid 5081] close(3 [pid 5348] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5355] <... setpgid resumed>) = 0 [pid 5353] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5081] <... close resumed>) = 0 [pid 5081] rmdir("./16" [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5081] <... rmdir resumed>) = 0 [pid 5081] mkdir("./17", 0777./strace-static-x86_64: Process 5356 attached [pid 5355] <... openat resumed>) = 3 [pid 5081] <... mkdir resumed>) = 0 [pid 5356] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [ 89.972787][ T5353] loop3: detected capacity change from 0 to 1024 [ 89.974067][ T5352] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5356] set_robust_list(0x7f96081b79a0, 24 [pid 5081] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5350] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5350] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5356] <... set_robust_list resumed>) = 0 [pid 5355] write(3, "1000", 4 [pid 5350] <... mprotect resumed>) = 0 [pid 5356] rt_sigprocmask(SIG_SETMASK, [], [pid 5355] <... write resumed>) = 4 [pid 5350] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5348] <... clone3 resumed> => {parent_tid=[5356]}, 88) = 5356 [pid 5356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5355] close(3 [pid 5353] <... mount resumed>) = 0 [pid 5350] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5348] rt_sigprocmask(SIG_SETMASK, [], [pid 5356] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... close resumed>) = 0 [pid 5353] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5348] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5357 attached [pid 5357] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5350] <... clone3 resumed> => {parent_tid=[5357]}, 88) = 5357 [pid 5357] <... rseq resumed>) = 0 [pid 5356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5355] symlink("/dev/binderfs", "./binderfs" [pid 5353] <... openat resumed>) = 3 [pid 5350] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5356] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5350] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5350] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] set_robust_list(0x7f96081b79a0, 24 [pid 5353] chdir("./file1" [pid 5348] <... futex resumed>) = 0 [pid 5355] <... symlink resumed>) = 0 [pid 5353] <... chdir resumed>) = 0 [pid 5348] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5355] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5355] <... futex resumed>) = 0 [pid 5353] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5355] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5353] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5353] <... futex resumed>) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5349] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5353] creat("./file0", 000 [pid 5349] <... futex resumed>) = 0 [pid 5355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5349] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5355] <... mmap resumed>) = 0x7f96081b8000 [pid 5355] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5353] <... creat resumed>) = 4 [pid 5355] <... mprotect resumed>) = 0 [pid 5353] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5349] <... futex resumed>) = 0 [pid 5349] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5349] <... futex resumed>) = 0 [pid 5355] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5349] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5357] <... set_robust_list resumed>) = 0 [pid 5356] <... open resumed>) = 5 [pid 5355] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5351] <... write resumed>) = 53248 [pid 5081] <... ioctl resumed>) = 0 [ 90.021179][ T5351] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.037599][ T5351] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.043203][ T5352] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5357] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5356] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5356] <... futex resumed>) = 1 [pid 5355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5351] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5348] <... futex resumed>) = 0 [pid 5356] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] <... futex resumed>) = 0 [pid 5348] exit_group(0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5358 [pid 5356] <... futex resumed>) = ? [pid 5355] <... clone3 resumed> => {parent_tid=[5359]}, 88) = 5359 [pid 5348] <... exit_group resumed>) = ? [pid 5351] +++ exited with 0 +++ ./strace-static-x86_64: Process 5358 attached [pid 5356] +++ exited with 0 +++ [pid 5355] rt_sigprocmask(SIG_SETMASK, [], [pid 5348] +++ exited with 0 +++ [pid 5358] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5358] chdir("./17") = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5348, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5358] setpgid(0, 0 [pid 5350] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5358] <... setpgid resumed>) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] write(3, "1000", 4) = 4 [pid 5358] close(3) = 0 [pid 5358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5358] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5358] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5355] <... futex resumed>) = 0 [pid 5349] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5358] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5355] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5349] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5359 attached [pid 5358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] <... mmap resumed>) = 0x7f9608197000 [pid 5082] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5349] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5358] <... mmap resumed>) = 0x7f96081b8000 [pid 5349] <... mprotect resumed>) = 0 [pid 5358] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [ 90.066844][ T5353] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.075373][ T5352] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.082736][ T5352] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5349] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5359] <... rseq resumed>) = 0 [pid 5358] <... mprotect resumed>) = 0 [pid 5357] <... open resumed>) = 5 [pid 5349] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5359] set_robust_list(0x7f96081d89a0, 24 [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5357] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5082] newfstatat(3, "", ./strace-static-x86_64: Process 5360 attached [pid 5359] <... set_robust_list resumed>) = 0 [pid 5358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5357] <... futex resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5359] rt_sigprocmask(SIG_SETMASK, [], [pid 5357] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] getdents64(3, [pid 5359] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5349] <... clone3 resumed> => {parent_tid=[5360]}, 88) = 5360 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5361 attached [pid 5359] memfd_create("syzkaller", 0 [pid 5349] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5361] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5359] <... memfd_create resumed>) = 3 [pid 5358] <... clone3 resumed> => {parent_tid=[5361]}, 88) = 5361 [pid 5349] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5360] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5358] rt_sigprocmask(SIG_SETMASK, [], [pid 5349] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... rseq resumed>) = 0 [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5349] <... futex resumed>) = 0 [pid 5360] set_robust_list(0x7f96081b79a0, 24 [pid 5358] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... set_robust_list resumed>) = 0 [pid 5358] <... futex resumed>) = 0 [pid 5349] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5360] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5360] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5361] <... rseq resumed>) = 0 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5361] set_robust_list(0x7f96081d89a0, 24 [pid 5082] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5361] <... set_robust_list resumed>) = 0 [pid 5359] <... mmap resumed>) = 0x7f95ffc00000 [pid 5361] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5361] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] memfd_create("syzkaller", 0 [pid 5082] unlink("./18/binderfs" [pid 5361] <... memfd_create resumed>) = 3 [pid 5361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] <... unlink resumed>) = 0 [pid 5361] <... mmap resumed>) = 0x7f95ffc00000 [pid 5082] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5082] <... umount2 resumed>) = 0 [pid 5349] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 90.125133][ T5353] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.128891][ T5352] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.145240][ T5353] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.152815][ T5353] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.157197][ T5352] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5352] <... write resumed>) = 53248 [pid 5352] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5352] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] exit_group(0 [pid 5357] <... futex resumed>) = ? [pid 5352] <... futex resumed>) = ? [pid 5350] <... exit_group resumed>) = ? [pid 5357] +++ exited with 0 +++ [pid 5352] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5350, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5085] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, [pid 5361] <... write resumed>) = 524288 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5361] munmap(0x7f95ffc00000, 138412032 [pid 5085] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5361] <... munmap resumed>) = 0 [pid 5360] <... open resumed>) = 5 [pid 5359] <... write resumed>) = 524288 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./18/file1", [pid 5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5360] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] munmap(0x7f95ffc00000, 138412032 [pid 5353] <... write resumed>) = 53248 [pid 5085] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5361] <... openat resumed>) = 4 [pid 5353] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] ioctl(4, LOOP_SET_FD, 3 [pid 5360] <... futex resumed>) = 0 [pid 5359] <... munmap resumed>) = 0 [pid 5353] <... futex resumed>) = 0 [pid 5082] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5349] exit_group(0) = ? [pid 5361] <... ioctl resumed>) = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5085] unlink("./17/binderfs" [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5361] close(3 [pid 5360] +++ exited with 0 +++ [pid 5359] <... openat resumed>) = 4 [pid 5353] +++ exited with 0 +++ [pid 5349] +++ exited with 0 +++ [pid 5085] <... unlink resumed>) = 0 [pid 5361] <... close resumed>) = 0 [pid 5359] ioctl(4, LOOP_SET_FD, 3 [pid 5085] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5361] close(4 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5349, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5082] <... openat resumed>) = 4 [ 90.203818][ T5353] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.211353][ T5353] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.231358][ T5361] loop0: detected capacity change from 0 to 1024 [pid 5361] <... close resumed>) = 0 [pid 5359] <... ioctl resumed>) = 0 [pid 5084] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] newfstatat(4, "", [pid 5359] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5361] mkdir("./file1", 0777 [pid 5359] <... close resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5359] close(4 [pid 5082] getdents64(4, [pid 5361] <... mkdir resumed>) = 0 [pid 5359] <... close resumed>) = 0 [pid 5085] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 3 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5361] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5359] mkdir("./file1", 0777 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./17/file1", [pid 5084] newfstatat(3, "", [pid 5082] getdents64(4, [pid 5359] <... mkdir resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5359] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] close(4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./17/file1") = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [ 90.249854][ T5359] loop2: detected capacity change from 0 to 1024 [pid 5085] rmdir("./17" [pid 5359] <... mount resumed>) = 0 [pid 5084] getdents64(3, [pid 5082] <... close resumed>) = 0 [pid 5359] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5359] <... openat resumed>) = 3 [pid 5082] rmdir("./18/file1" [pid 5359] chdir("./file1" [pid 5084] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5359] <... chdir resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] getdents64(3, [pid 5359] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5359] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5359] <... futex resumed>) = 1 [pid 5082] close(3 [pid 5355] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5359] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] unlink("./17/binderfs" [pid 5082] rmdir("./18" [pid 5355] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5355] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... futex resumed>) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5359] creat("./file0", 000 [pid 5084] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5359] <... creat resumed>) = 4 [pid 5082] mkdir("./19", 0777 [pid 5085] mkdir("./18", 0777) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] <... mkdir resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5361] <... mount resumed>) = 0 [pid 5359] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5355] <... futex resumed>) = 0 [pid 5359] <... futex resumed>) = 1 [pid 5355] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5355] <... futex resumed>) = 0 [pid 5361] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5355] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5361] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5361] chdir("./file1" [pid 5084] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555939db690) = 5362 [pid 5355] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5355] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] <... chdir resumed>) = 0 [pid 5355] <... futex resumed>) = 0 [pid 5082] close(3 [pid 5361] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5362 attached [pid 5082] <... close resumed>) = 0 [pid 5362] set_robust_list(0x5555939db6a0, 24 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5355] <... mmap resumed>) = 0x7f9608197000 [pid 5362] <... set_robust_list resumed>) = 0 [pid 5355] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5363 ./strace-static-x86_64: Process 5363 attached [pid 5362] chdir("./18" [pid 5363] set_robust_list(0x5555939db6a0, 24 [pid 5362] <... chdir resumed>) = 0 [pid 5355] <... mprotect resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./17/file1", [pid 5355] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5363] <... set_robust_list resumed>) = 0 [ 90.328994][ T5359] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.339494][ T5359] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.347622][ T5359] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.355787][ T5359] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.370243][ T5359] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5355] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5363] chdir("./19" [pid 5361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5359] <... write resumed>) = 53248 [pid 5084] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5362] <... prctl resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5362] setpgid(0, 0 [pid 5363] <... chdir resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5362] <... setpgid resumed>) = 0 [pid 5361] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... clone3 resumed> => {parent_tid=[5364]}, 88) = 5364 [pid 5361] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5358] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5361] creat("./file0", 000 [pid 5355] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] <... futex resumed>) = 0 [pid 5355] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] newfstatat(4, "", ./strace-static-x86_64: Process 5364 attached [pid 5363] setpgid(0, 0 [pid 5364] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5363] <... setpgid resumed>) = 0 [pid 5361] <... creat resumed>) = 4 [pid 5355] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5355] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5364] <... rseq resumed>) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5355] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(4, [pid 5364] set_robust_list(0x7f96081b79a0, 24 [pid 5363] <... openat resumed>) = 3 [pid 5362] <... openat resumed>) = 3 [pid 5361] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5364] <... set_robust_list resumed>) = 0 [pid 5363] write(3, "1000", 4 [pid 5361] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5363] <... write resumed>) = 4 [pid 5362] write(3, "1000", 4 [pid 5361] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5358] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5364] rt_sigprocmask(SIG_SETMASK, [], [pid 5363] close(3 [pid 5364] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5364] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5363] <... close resumed>) = 0 [pid 5364] <... open resumed>) = 5 [pid 5362] <... write resumed>) = 4 [pid 5359] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... futex resumed>) = 0 [pid 5084] getdents64(4, [pid 5364] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] symlink("/dev/binderfs", "./binderfs" [pid 5362] close(3 [pid 5359] <... futex resumed>) = 0 [pid 5358] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5364] <... futex resumed>) = 1 [pid 5363] <... symlink resumed>) = 0 [pid 5362] <... close resumed>) = 0 [pid 5359] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... futex resumed>) = 0 [pid 5084] close(4 [pid 5364] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5363] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] symlink("/dev/binderfs", "./binderfs" [pid 5355] exit_group(0 [pid 5363] <... futex resumed>) = 0 [pid 5355] <... exit_group resumed>) = ? [pid 5364] <... futex resumed>) = ? [pid 5363] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5359] <... futex resumed>) = ? [pid 5364] +++ exited with 0 +++ [pid 5363] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5362] <... symlink resumed>) = 0 [pid 5363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5363] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5365]}, 88) = 5365 [pid 5359] +++ exited with 0 +++ [pid 5355] +++ exited with 0 +++ ./strace-static-x86_64: Process 5365 attached [pid 5363] rt_sigprocmask(SIG_SETMASK, [], [pid 5362] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5365] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] <... futex resumed>) = 0 [pid 5084] rmdir("./17/file1" [pid 5365] <... rseq resumed>) = 0 [pid 5363] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] set_robust_list(0x7f96081d89a0, 24 [pid 5362] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5084] <... rmdir resumed>) = 0 [pid 5365] <... set_robust_list resumed>) = 0 [pid 5363] <... futex resumed>) = 0 [pid 5365] rt_sigprocmask(SIG_SETMASK, [], [pid 5363] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5365] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5365] memfd_create("syzkaller", 0) = 3 [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5083] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5362] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5084] getdents64(3, [pid 5362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] close(3 [pid 5362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5362] <... mmap resumed>) = 0x7f96081b8000 [pid 5083] <... openat resumed>) = 3 [pid 5362] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] newfstatat(3, "", [pid 5362] <... mprotect resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./17" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5362] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] <... rmdir resumed>) = 0 [ 90.385378][ T5359] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.425654][ T5361] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5362] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5365] <... write resumed>) = 524288 [pid 5084] mkdir("./18", 0777 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5365] munmap(0x7f95ffc00000, 138412032 [pid 5362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5358] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... mkdir resumed>) = 0 [pid 5083] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5358] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5366 attached [pid 5362] <... clone3 resumed> => {parent_tid=[5366]}, 88) = 5366 [pid 5358] <... futex resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5366] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5365] <... munmap resumed>) = 0 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], [pid 5358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5365] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5365] <... openat resumed>) = 4 [pid 5362] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5365] ioctl(4, LOOP_SET_FD, 3 [pid 5362] <... futex resumed>) = 0 [pid 5083] unlink("./17/binderfs" [pid 5366] <... rseq resumed>) = 0 [pid 5362] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5358] <... mmap resumed>) = 0x7f9608197000 [pid 5083] <... unlink resumed>) = 0 [pid 5083] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5365] <... ioctl resumed>) = 0 [pid 5366] set_robust_list(0x7f96081d89a0, 24 [pid 5361] <... write resumed>) = 53248 [pid 5358] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5083] <... umount2 resumed>) = 0 [pid 5366] <... set_robust_list resumed>) = 0 [pid 5365] close(3 [pid 5361] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5358] <... mprotect resumed>) = 0 [pid 5366] rt_sigprocmask(SIG_SETMASK, [], [pid 5361] <... futex resumed>) = 0 [pid 5366] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5361] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5358] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5366] memfd_create("syzkaller", 0 [pid 5365] <... close resumed>) = 0 [pid 5083] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5365] close(4 [pid 5366] <... memfd_create resumed>) = 3 [pid 5365] <... close resumed>) = 0 [pid 5358] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5365] mkdir("./file1", 0777 [pid 5366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [ 90.454654][ T5361] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.463351][ T5361] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.471084][ T5361] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.481282][ T5361] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.486621][ T5365] loop1: detected capacity change from 0 to 1024 [ 90.490474][ T5361] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] newfstatat(AT_FDCWD, "./17/file1", ./strace-static-x86_64: Process 5367 attached [pid 5366] <... mmap resumed>) = 0x7f95ffc00000 [pid 5365] <... mkdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5367] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5083] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5367] <... rseq resumed>) = 0 [pid 5367] set_robust_list(0x7f96081b79a0, 24 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5358] <... clone3 resumed> => {parent_tid=[5367]}, 88) = 5367 [pid 5367] <... set_robust_list resumed>) = 0 [pid 5083] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5365] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5358] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5367] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5358] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] newfstatat(4, "", [pid 5358] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5367] <... futex resumed>) = 0 [pid 5358] <... futex resumed>) = 1 [pid 5083] getdents64(4, [pid 5358] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5367] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./17/file1" [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5368 ./strace-static-x86_64: Process 5368 attached [pid 5367] <... open resumed>) = 5 [pid 5083] <... rmdir resumed>) = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5368] set_robust_list(0x5555939db6a0, 24 [pid 5367] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... set_robust_list resumed>) = 0 [pid 5083] close(3 [pid 5367] <... futex resumed>) = 1 [pid 5358] <... futex resumed>) = 0 [pid 5368] chdir("./18" [pid 5358] exit_group(0 [pid 5366] <... write resumed>) = 524288 [pid 5365] <... mount resumed>) = 0 [pid 5358] <... exit_group resumed>) = ? [pid 5083] <... close resumed>) = 0 [pid 5367] +++ exited with 0 +++ [pid 5365] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5083] rmdir("./17" [pid 5368] <... chdir resumed>) = 0 [pid 5366] munmap(0x7f95ffc00000, 138412032 [pid 5365] <... openat resumed>) = 3 [pid 5083] <... rmdir resumed>) = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5366] <... munmap resumed>) = 0 [pid 5365] chdir("./file1" [pid 5361] <... futex resumed>) = ? [pid 5083] mkdir("./18", 0777 [pid 5368] <... prctl resumed>) = 0 [pid 5365] <... chdir resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5368] setpgid(0, 0 [pid 5365] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5368] <... setpgid resumed>) = 0 [pid 5366] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5365] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5361] +++ exited with 0 +++ [pid 5358] +++ exited with 0 +++ [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5366] <... openat resumed>) = 4 [pid 5365] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5368] <... openat resumed>) = 3 [pid 5366] ioctl(4, LOOP_SET_FD, 3 [pid 5365] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5368] write(3, "1000", 4 [pid 5365] creat("./file0", 000 [pid 5363] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5363] <... futex resumed>) = 0 [pid 5363] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] <... write resumed>) = 4 [pid 5365] <... creat resumed>) = 4 [pid 5368] close(3 [pid 5365] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... close resumed>) = 0 [pid 5365] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5081] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5363] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] symlink("/dev/binderfs", "./binderfs" [pid 5365] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5363] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] <... symlink resumed>) = 0 [pid 5363] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5368] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5081] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5368] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5081] <... openat resumed>) = 3 [pid 5368] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5368] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5369]}, 88) = 5369 [pid 5368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5368] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5368] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5366] <... ioctl resumed>) = 0 [pid 5081] newfstatat(3, "", ./strace-static-x86_64: Process 5369 attached [pid 5366] close(3 [pid 5369] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5366] <... close resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5366] close(4) = 0 [pid 5366] mkdir("./file1", 0777) = 0 [ 90.579660][ T5366] loop4: detected capacity change from 0 to 1024 [ 90.594420][ T5365] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.606314][ T5365] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.614930][ T5365] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5366] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5369] <... rseq resumed>) = 0 [pid 5081] getdents64(3, [pid 5369] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5369] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5369] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5369] memfd_create("syzkaller", 0 [pid 5081] newfstatat(AT_FDCWD, "./17/binderfs", [pid 5369] <... memfd_create resumed>) = 3 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] unlink("./17/binderfs" [pid 5369] <... mmap resumed>) = 0x7f95ffc00000 [pid 5081] <... unlink resumed>) = 0 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5081] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5366] <... mount resumed>) = 0 [pid 5363] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5366] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5363] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] <... openat resumed>) = 3 [pid 5363] <... futex resumed>) = 0 [pid 5366] chdir("./file1" [pid 5363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5366] <... chdir resumed>) = 0 [pid 5363] <... mmap resumed>) = 0x7f9608197000 [pid 5366] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5363] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5366] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5363] <... mprotect resumed>) = 0 [pid 5366] <... futex resumed>) = 1 [pid 5363] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5362] <... futex resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5369] <... write resumed>) = 524288 [pid 5369] munmap(0x7f95ffc00000, 138412032 [pid 5366] creat("./file0", 000 [pid 5363] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5362] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5081] <... umount2 resumed>) = 0 [pid 5369] <... munmap resumed>) = 0 [pid 5363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5362] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5370 attached [pid 5362] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... close resumed>) = 0 [ 90.630809][ T5365] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.651609][ T5365] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5370] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5369] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5363] <... clone3 resumed> => {parent_tid=[5370]}, 88) = 5370 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5370] <... rseq resumed>) = 0 [pid 5369] <... openat resumed>) = 4 [pid 5363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5363] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5366] <... creat resumed>) = 4 [pid 5363] <... futex resumed>) = 0 [pid 5081] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5370] set_robust_list(0x7f96081b79a0, 24 [pid 5363] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] <... set_robust_list resumed>) = 0 [pid 5369] ioctl(4, LOOP_SET_FD, 3 [pid 5366] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5370] rt_sigprocmask(SIG_SETMASK, [], [pid 5366] <... futex resumed>) = 1 [pid 5081] newfstatat(AT_FDCWD, "./17/file1", [pid 5366] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5362] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5370] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5362] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5371 [pid 5081] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5371 attached [pid 5370] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5366] <... futex resumed>) = 0 [pid 5365] <... write resumed>) = 53248 [pid 5362] <... futex resumed>) = 1 [pid 5081] <... openat resumed>) = 4 [pid 5371] set_robust_list(0x5555939db6a0, 24 [pid 5366] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5365] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5362] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] newfstatat(4, "", [pid 5371] <... set_robust_list resumed>) = 0 [pid 5371] chdir("./18") = 0 [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] <... open resumed>) = 5 [pid 5371] setpgid(0, 0) = 0 [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5370] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] write(3, "1000", 4) = 4 [pid 5370] <... futex resumed>) = 1 [pid 5363] <... futex resumed>) = 0 [pid 5371] close(3 [pid 5363] exit_group(0 [pid 5371] <... close resumed>) = 0 [pid 5363] <... exit_group resumed>) = ? [pid 5371] symlink("/dev/binderfs", "./binderfs" [pid 5370] +++ exited with 0 +++ [pid 5371] <... symlink resumed>) = 0 [pid 5371] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5369] <... ioctl resumed>) = 0 [pid 5371] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5369] close(3 [pid 5371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5369] <... close resumed>) = 0 [pid 5371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5369] close(4) = 0 [pid 5365] <... futex resumed>) = ? [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5371] <... mmap resumed>) = 0x7f96081b8000 [pid 5369] mkdir("./file1", 0777 [pid 5371] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5369] <... mkdir resumed>) = 0 [pid 5371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5369] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5081] getdents64(4, [pid 5371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5365] +++ exited with 0 +++ [pid 5363] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5371] <... clone3 resumed> => {parent_tid=[5372]}, 88) = 5372 [pid 5081] getdents64(4, [pid 5371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5371] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(4./strace-static-x86_64: Process 5372 attached [pid 5371] <... futex resumed>) = 0 [ 90.676156][ T5365] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.688896][ T5369] loop3: detected capacity change from 0 to 1024 [ 90.714636][ T5366] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.722260][ T5366] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5372] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5371] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5372] <... rseq resumed>) = 0 [pid 5372] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5372] memfd_create("syzkaller", 0) = 3 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] rmdir("./17/file1" [pid 5372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5362] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5362] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5082] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... rmdir resumed>) = 0 [pid 5362] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... openat resumed>) = 3 [pid 5081] getdents64(3, [pid 5082] newfstatat(3, "", [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5362] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] close(3 [pid 5362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5373]}, 88) = 5373 [pid 5362] rt_sigprocmask(SIG_SETMASK, [], [pid 5372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5362] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] <... close resumed>) = 0 [pid 5082] getdents64(3, ./strace-static-x86_64: Process 5373 attached [pid 5081] rmdir("./17" [pid 5362] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5362] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5362] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5373] <... rseq resumed>) = 0 [pid 5082] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] mkdir("./18", 0777 [pid 5373] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5373] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5081] <... openat resumed>) = 3 [pid 5373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5373] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5082] unlink("./19/binderfs") = 0 [ 90.739927][ T5366] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.747725][ T5366] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.759782][ T5366] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5372] <... write resumed>) = 524288 [pid 5369] <... mount resumed>) = 0 [pid 5082] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5372] munmap(0x7f95ffc00000, 138412032 [pid 5369] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5372] <... munmap resumed>) = 0 [pid 5369] <... openat resumed>) = 3 [pid 5369] chdir("./file1") = 0 [pid 5369] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5372] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5369] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5372] <... openat resumed>) = 4 [pid 5369] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5372] ioctl(4, LOOP_SET_FD, 3 [pid 5369] creat("./file0", 000 [pid 5368] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = 0 [pid 5368] <... futex resumed>) = 0 [pid 5368] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5369] <... creat resumed>) = 4 [pid 5082] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5369] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5368] <... futex resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./19/file1", [pid 5369] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5368] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... open resumed>) = 5 [pid 5372] <... ioctl resumed>) = 0 [pid 5368] <... futex resumed>) = 0 [pid 5366] <... write resumed>) = 53248 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5373] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] close(3 [pid 5366] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5373] <... futex resumed>) = 1 [pid 5372] <... close resumed>) = 0 [pid 5366] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5372] close(4 [pid 5366] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5372] <... close resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5372] mkdir("./file1", 0777 [pid 5082] newfstatat(4, "", [pid 5372] <... mkdir resumed>) = 0 [pid 5368] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5362] <... futex resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5372] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5362] exit_group(0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5362] <... exit_group resumed>) = ? [pid 5082] getdents64(4, [pid 5373] <... futex resumed>) = ? [pid 5366] <... futex resumed>) = ? [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5372] <... mount resumed>) = 0 [pid 5082] close(4 [pid 5372] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5082] <... close resumed>) = 0 [pid 5372] chdir("./file1") = 0 [ 90.790362][ T5366] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.800268][ T5372] loop2: detected capacity change from 0 to 1024 [ 90.817698][ T5369] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] rmdir("./19/file1" [pid 5372] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5372] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... rmdir resumed>) = 0 [pid 5372] <... futex resumed>) = 1 [pid 5366] +++ exited with 0 +++ [pid 5372] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3) = 0 [pid 5373] +++ exited with 0 +++ [pid 5371] <... futex resumed>) = 0 [pid 5362] +++ exited with 0 +++ [pid 5081] <... ioctl resumed>) = 0 [pid 5082] rmdir("./19" [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5362, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5081] close(3 [pid 5082] <... rmdir resumed>) = 0 [pid 5371] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 1 [pid 5368] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] mkdir("./20", 0777 [pid 5368] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5371] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... mkdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5372] creat("./file0", 000) = 4 [pid 5372] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5371] <... futex resumed>) = 0 [pid 5372] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5371] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 90.834546][ T5369] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.846181][ T5369] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.854161][ T5369] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.875706][ T5369] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5371] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5374 attached [pid 5369] <... write resumed>) = 53248 [pid 5368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5374 [pid 5374] set_robust_list(0x5555939db6a0, 24 [pid 5368] <... mmap resumed>) = 0x7f9608197000 [pid 5374] <... set_robust_list resumed>) = 0 [pid 5369] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... openat resumed>) = 3 [pid 5368] <... mprotect resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5368] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5374] chdir("./18" [pid 5369] <... futex resumed>) = 0 [pid 5368] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] getdents64(3, [pid 5374] <... chdir resumed>) = 0 [pid 5369] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5374] <... prctl resumed>) = 0 [pid 5085] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5375 attached [pid 5374] setpgid(0, 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] <... ioctl resumed>) = 0 [pid 5375] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5374] <... setpgid resumed>) = 0 [pid 5368] <... clone3 resumed> => {parent_tid=[5375]}, 88) = 5375 [ 90.900686][ T5369] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.911670][ T5372] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.924625][ T5372] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5375] <... rseq resumed>) = 0 [pid 5374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5375] set_robust_list(0x7f96081b79a0, 24 [pid 5368] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] close(3 [pid 5375] <... set_robust_list resumed>) = 0 [pid 5374] <... openat resumed>) = 3 [pid 5371] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5368] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] unlink("./18/binderfs" [pid 5375] rt_sigprocmask(SIG_SETMASK, [], [pid 5371] <... futex resumed>) = 0 [pid 5368] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5375] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5374] write(3, "1000", 4 [pid 5371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5368] <... futex resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5375] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5374] <... write resumed>) = 4 [pid 5371] <... mmap resumed>) = 0x7f9608197000 [pid 5368] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5376 attached [pid 5374] close(3 [pid 5371] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5376] set_robust_list(0x5555939db6a0, 24 [pid 5375] <... open resumed>) = 5 [pid 5374] <... close resumed>) = 0 [pid 5371] <... mprotect resumed>) = 0 [pid 5376] <... set_robust_list resumed>) = 0 [pid 5374] symlink("/dev/binderfs", "./binderfs" [pid 5371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5376 [pid 5376] chdir("./20" [pid 5375] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... symlink resumed>) = 0 [pid 5371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5376] <... chdir resumed>) = 0 [pid 5375] <... futex resumed>) = 1 [pid 5374] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5368] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5377 attached [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5375] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] <... futex resumed>) = 0 [pid 5368] exit_group(0 [pid 5377] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5376] <... prctl resumed>) = 0 [pid 5375] <... futex resumed>) = ? [pid 5374] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5371] <... clone3 resumed> => {parent_tid=[5377]}, 88) = 5377 [pid 5369] <... futex resumed>) = ? [pid 5368] <... exit_group resumed>) = ? [ 90.948620][ T5372] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5377] <... rseq resumed>) = 0 [pid 5376] setpgid(0, 0 [pid 5375] +++ exited with 0 +++ [pid 5374] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5371] rt_sigprocmask(SIG_SETMASK, [], [pid 5369] +++ exited with 0 +++ [pid 5368] +++ exited with 0 +++ [pid 5374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5371] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5374] <... mmap resumed>) = 0x7f96081b8000 [pid 5374] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5371] <... futex resumed>) = 0 [pid 5371] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5376] <... setpgid resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5085] <... umount2 resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, [pid 5374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5085] newfstatat(AT_FDCWD, "./18/file1", [pid 5084] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5377] set_robust_list(0x7f96081b79a0, 24 [pid 5376] <... openat resumed>) = 3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5378 attached [pid 5377] <... set_robust_list resumed>) = 0 [pid 5376] write(3, "1000", 4 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5378] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5377] rt_sigprocmask(SIG_SETMASK, [], [pid 5376] <... write resumed>) = 4 [pid 5374] <... clone3 resumed> => {parent_tid=[5378]}, 88) = 5378 [pid 5085] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5378] <... rseq resumed>) = 0 [pid 5377] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5376] close(3 [pid 5374] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] unlink("./18/binderfs" [pid 5378] set_robust_list(0x7f96081d89a0, 24 [pid 5377] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5376] <... close resumed>) = 0 [pid 5374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... unlink resumed>) = 0 [pid 5378] <... set_robust_list resumed>) = 0 [pid 5376] symlink("/dev/binderfs", "./binderfs" [pid 5374] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... openat resumed>) = 4 [pid 5084] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5378] rt_sigprocmask(SIG_SETMASK, [], [pid 5376] <... symlink resumed>) = 0 [pid 5374] <... futex resumed>) = 0 [pid 5085] newfstatat(4, "", [pid 5378] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5374] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5378] memfd_create("syzkaller", 0 [pid 5377] <... open resumed>) = 5 [pid 5376] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... write resumed>) = 53248 [pid 5084] <... umount2 resumed>) = 0 [pid 5378] <... memfd_create resumed>) = 3 [pid 5377] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 0 [pid 5372] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] getdents64(4, [pid 5084] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5377] <... futex resumed>) = 0 [pid 5376] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5378] <... mmap resumed>) = 0x7f95ffc00000 [pid 5377] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5371] exit_group(0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5377] <... futex resumed>) = ? [pid 5376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5371] <... exit_group resumed>) = ? [pid 5378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5377] +++ exited with 0 +++ [pid 5376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5372] +++ exited with 0 +++ [pid 5371] +++ exited with 0 +++ [pid 5085] getdents64(4, [pid 5084] newfstatat(AT_FDCWD, "./18/file1", [pid 5376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5376] <... mmap resumed>) = 0x7f96081b8000 [pid 5085] close(4 [pid 5084] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5376] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... close resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5376] <... mprotect resumed>) = 0 [pid 5085] rmdir("./18/file1" [pid 5084] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5376] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5376] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5379 attached [pid 5083] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5379] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5376] <... clone3 resumed> => {parent_tid=[5379]}, 88) = 5379 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... openat resumed>) = 4 [pid 5379] <... rseq resumed>) = 0 [pid 5376] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... openat resumed>) = 3 [pid 5379] set_robust_list(0x7f96081d89a0, 24 [pid 5376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] getdents64(3, [pid 5084] newfstatat(4, "", [pid 5083] newfstatat(3, "", [pid 5379] <... set_robust_list resumed>) = 0 [ 90.975472][ T5372] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.005030][ T5372] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.012391][ T5372] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5376] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5379] rt_sigprocmask(SIG_SETMASK, [], [pid 5378] <... write resumed>) = 524288 [pid 5376] <... futex resumed>) = 0 [pid 5085] close(3 [pid 5084] getdents64(4, [pid 5083] getdents64(3, [pid 5379] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5378] munmap(0x7f95ffc00000, 138412032 [pid 5376] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... close resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5379] memfd_create("syzkaller", 0) = 3 [pid 5378] <... munmap resumed>) = 0 [pid 5085] rmdir("./18" [pid 5084] getdents64(4, [pid 5083] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5378] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5379] <... mmap resumed>) = 0x7f95ffc00000 [pid 5378] <... openat resumed>) = 4 [pid 5379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5085] mkdir("./19", 0777 [pid 5084] close(4 [pid 5083] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5378] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./18/file1" [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] unlink("./18/binderfs" [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] getdents64(3, [pid 5378] <... ioctl resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5378] close(3) = 0 [pid 5378] close(4 [pid 5084] close(3 [pid 5083] <... umount2 resumed>) = 0 [pid 5378] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", [pid 5379] <... write resumed>) = 524288 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5379] munmap(0x7f95ffc00000, 138412032 [pid 5378] mkdir("./file1", 0777 [pid 5084] rmdir("./18" [pid 5083] getdents64(4, [pid 5379] <... munmap resumed>) = 0 [pid 5378] <... mkdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5378] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5084] mkdir("./19", 0777 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5379] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... openat resumed>) = 3 [pid 5083] close(4 [pid 5379] <... openat resumed>) = 4 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... close resumed>) = 0 [ 91.078159][ T5378] loop0: detected capacity change from 0 to 1024 [pid 5379] ioctl(4, LOOP_SET_FD, 3 [pid 5083] rmdir("./18/file1") = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5378] <... mount resumed>) = 0 [pid 5083] close(3 [pid 5378] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5083] <... close resumed>) = 0 [pid 5378] chdir("./file1" [pid 5083] rmdir("./18" [pid 5378] <... chdir resumed>) = 0 [pid 5378] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] <... rmdir resumed>) = 0 [pid 5378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5378] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] mkdir("./19", 0777 [pid 5378] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5378] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5374] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5374] <... futex resumed>) = 0 [pid 5378] creat("./file0", 000 [pid 5374] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5378] <... creat resumed>) = 4 [pid 5083] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5378] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5379] <... ioctl resumed>) = 0 [pid 5378] <... futex resumed>) = 1 [pid 5374] <... futex resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5379] close(3 [pid 5374] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] <... close resumed>) = 0 [pid 5379] close(4 [pid 5378] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5374] <... futex resumed>) = 0 [pid 5379] <... close resumed>) = 0 [pid 5379] mkdir("./file1", 0777) = 0 [pid 5374] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] close(3 [pid 5379] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] <... close resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(3./strace-static-x86_64: Process 5380 attached [pid 5380] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5380] chdir("./19" [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5380 [pid 5084] <... close resumed>) = 0 [ 91.118813][ T5379] loop1: detected capacity change from 0 to 1024 [ 91.156323][ T5378] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5380] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5381 attached [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] <... ioctl resumed>) = 0 [pid 5381] set_robust_list(0x5555939db6a0, 24 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5381 [pid 5380] <... prctl resumed>) = 0 [pid 5380] setpgid(0, 0) = 0 [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5379] <... mount resumed>) = 0 [pid 5379] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5379] chdir("./file1") = 0 [pid 5379] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5379] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] write(3, "1000", 4 [pid 5379] <... futex resumed>) = 1 [pid 5376] <... futex resumed>) = 0 [pid 5381] <... set_robust_list resumed>) = 0 [pid 5380] <... write resumed>) = 4 [pid 5376] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] close(3 [pid 5379] creat("./file0", 000 [pid 5376] <... futex resumed>) = 0 [pid 5381] chdir("./19" [pid 5380] <... close resumed>) = 0 [pid 5379] <... creat resumed>) = 4 [pid 5381] <... chdir resumed>) = 0 [pid 5380] symlink("/dev/binderfs", "./binderfs" [pid 5379] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] close(3 [pid 5380] <... symlink resumed>) = 0 [pid 5379] <... futex resumed>) = 0 [pid 5376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5083] <... close resumed>) = 0 [pid 5380] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5376] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5380] <... futex resumed>) = 0 [pid 5376] <... futex resumed>) = 0 [pid 5380] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5376] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... rt_sigaction resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5382 attached [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5374] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5382 [ 91.190482][ T5378] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.212259][ T5378] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5382] set_robust_list(0x5555939db6a0, 24 [pid 5381] <... prctl resumed>) = 0 [pid 5380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5374] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] setpgid(0, 0) = 0 [pid 5374] <... futex resumed>) = 0 [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5381] <... openat resumed>) = 3 [pid 5374] <... mmap resumed>) = 0x7f9608197000 [pid 5374] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5381] write(3, "1000", 4 [pid 5374] <... mprotect resumed>) = 0 [pid 5381] <... write resumed>) = 4 [pid 5374] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5381] close(3 [pid 5380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5380] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5381] <... close resumed>) = 0 [pid 5381] symlink("/dev/binderfs", "./binderfs" [pid 5382] <... set_robust_list resumed>) = 0 [pid 5380] <... mprotect resumed>) = 0 [pid 5381] <... symlink resumed>) = 0 [pid 5382] chdir("./19") = 0 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5380] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5382] setpgid(0, 0 [pid 5380] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5382] <... setpgid resumed>) = 0 [pid 5380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5380] <... clone3 resumed> => {parent_tid=[5383]}, 88) = 5383 [pid 5380] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5383 attached [pid 5382] write(3, "1000", 4 [pid 5380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5383] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5380] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... rseq resumed>) = 0 [pid 5382] <... write resumed>) = 4 [pid 5380] <... futex resumed>) = 0 [pid 5383] set_robust_list(0x7f96081d89a0, 24 [pid 5382] close(3 [pid 5380] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5374] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5383] <... set_robust_list resumed>) = 0 [pid 5382] <... close resumed>) = 0 [pid 5374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5382] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5384 attached ) = 0 [pid 5383] rt_sigprocmask(SIG_SETMASK, [], [pid 5382] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5382] <... futex resumed>) = 0 [pid 5376] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5382] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5381] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... futex resumed>) = 0 [pid 5374] <... clone3 resumed> => {parent_tid=[5384]}, 88) = 5384 [pid 5384] set_robust_list(0x7f96081b79a0, 24 [pid 5382] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5381] <... futex resumed>) = 0 [pid 5376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5384] <... set_robust_list resumed>) = 0 [pid 5383] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5381] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5376] <... mmap resumed>) = 0x7f9608197000 [pid 5374] rt_sigprocmask(SIG_SETMASK, [], [pid 5384] rt_sigprocmask(SIG_SETMASK, [], [pid 5383] memfd_create("syzkaller", 0 [pid 5382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5376] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5374] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5383] <... memfd_create resumed>) = 3 [pid 5382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5381] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5376] <... mprotect resumed>) = 0 [pid 5374] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5382] <... mmap resumed>) = 0x7f96081b8000 [pid 5381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5376] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5374] <... futex resumed>) = 0 [pid 5383] <... mmap resumed>) = 0x7f95ffc00000 [ 91.235371][ T5379] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.242738][ T5379] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.263307][ T5378] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5382] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5376] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5374] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5384] <... open resumed>) = 5 [pid 5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5382] <... mprotect resumed>) = 0 [pid 5376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5382] rt_sigprocmask(SIG_BLOCK, ~[], ./strace-static-x86_64: Process 5385 attached [pid 5384] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5381] <... mmap resumed>) = 0x7f96081b8000 [pid 5376] <... clone3 resumed> => {parent_tid=[5385]}, 88) = 5385 [pid 5374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5383] <... write resumed>) = 524288 [pid 5385] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5384] <... futex resumed>) = 0 [pid 5383] munmap(0x7f95ffc00000, 138412032 [pid 5382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5381] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5378] <... write resumed>) = 53248 [pid 5376] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5386 attached [pid 5385] <... rseq resumed>) = 0 [pid 5384] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] <... munmap resumed>) = 0 [pid 5381] <... mprotect resumed>) = 0 [pid 5378] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5376] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5386] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5385] set_robust_list(0x7f96081b79a0, 24 [pid 5383] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5382] <... clone3 resumed> => {parent_tid=[5386]}, 88) = 5386 [pid 5378] <... futex resumed>) = 0 [pid 5376] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5386] <... rseq resumed>) = 0 [pid 5385] <... set_robust_list resumed>) = 0 [pid 5383] <... openat resumed>) = 4 [pid 5382] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5378] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5376] <... futex resumed>) = 0 [pid 5374] exit_group(0 [pid 5386] set_robust_list(0x7f96081d89a0, 24 [pid 5385] rt_sigprocmask(SIG_SETMASK, [], [ 91.290750][ T5378] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.294395][ T5379] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.299436][ T5378] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.313635][ T5379] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.332118][ T5383] loop4: detected capacity change from 0 to 1024 [pid 5383] ioctl(4, LOOP_SET_FD, 3 [pid 5382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5378] <... futex resumed>) = ? [pid 5384] <... futex resumed>) = ? [pid 5376] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5374] <... exit_group resumed>) = ? [pid 5386] <... set_robust_list resumed>) = 0 [pid 5385] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5384] +++ exited with 0 +++ [pid 5383] <... ioctl resumed>) = 0 [pid 5382] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5378] +++ exited with 0 +++ ./strace-static-x86_64: Process 5387 attached [pid 5385] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5382] <... futex resumed>) = 0 [pid 5374] +++ exited with 0 +++ [pid 5387] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5386] rt_sigprocmask(SIG_SETMASK, [], [pid 5385] <... open resumed>) = 5 [pid 5383] close(3 [pid 5382] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5381] <... clone3 resumed> => {parent_tid=[5387]}, 88) = 5387 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5374, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5387] <... rseq resumed>) = 0 [pid 5386] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5385] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5383] <... close resumed>) = 0 [pid 5381] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5387] set_robust_list(0x7f96081d89a0, 24 [pid 5386] memfd_create("syzkaller", 0 [pid 5385] <... futex resumed>) = 1 [pid 5383] close(4 [pid 5381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5376] <... futex resumed>) = 0 [pid 5379] <... write resumed>) = 53248 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5387] <... set_robust_list resumed>) = 0 [pid 5385] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5383] <... close resumed>) = 0 [pid 5381] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5379] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... futex resumed>) = 0 [pid 5379] <... futex resumed>) = 0 [pid 5387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5383] mkdir("./file1", 0777 [pid 5381] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5379] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5387] memfd_create("syzkaller", 0 [pid 5376] exit_group(0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5387] <... memfd_create resumed>) = 3 [pid 5385] <... futex resumed>) = ? [pid 5379] <... futex resumed>) = ? [pid 5376] <... exit_group resumed>) = ? [pid 5081] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5386] <... memfd_create resumed>) = 3 [pid 5385] +++ exited with 0 +++ [pid 5383] <... mkdir resumed>) = 0 [pid 5379] +++ exited with 0 +++ [pid 5376] +++ exited with 0 +++ [pid 5081] <... openat resumed>) = 3 [pid 5387] <... mmap resumed>) = 0x7f95ffc00000 [pid 5386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5383] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5376, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] newfstatat(3, "", [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5386] <... mmap resumed>) = 0x7f95ffc00000 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5387] <... write resumed>) = 524288 [pid 5082] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5081] getdents64(3, [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5081] newfstatat(AT_FDCWD, "./18/binderfs", [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./20/binderfs") = 0 [pid 5081] unlink("./18/binderfs" [pid 5082] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... unlink resumed>) = 0 [pid 5081] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5387] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5383] <... mount resumed>) = 0 [ 91.338769][ T5379] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.346493][ T5379] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5387] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5383] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5387] <... openat resumed>) = 4 [pid 5383] <... openat resumed>) = 3 [pid 5383] chdir("./file1" [pid 5387] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5383] <... chdir resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5383] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5081] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5383] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] newfstatat(AT_FDCWD, "./18/file1", [pid 5383] <... futex resumed>) = 1 [pid 5380] <... futex resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5383] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5380] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] <... futex resumed>) = 0 [pid 5380] <... futex resumed>) = 1 [pid 5082] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5383] creat("./file0", 000) = 4 [pid 5380] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 4 [pid 5383] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5081] newfstatat(4, "", [pid 5383] <... futex resumed>) = 0 [pid 5380] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] newfstatat(AT_FDCWD, "./20/file1", [pid 5383] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5380] <... futex resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5380] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] getdents64(4, [pid 5082] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", [pid 5386] <... write resumed>) = 524288 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5386] munmap(0x7f95ffc00000, 138412032 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5387] close(3 [pid 5082] getdents64(4, [pid 5387] <... close resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5387] close(4 [pid 5082] getdents64(4, [pid 5387] <... close resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5387] mkdir("./file1", 0777 [pid 5082] close(4 [pid 5387] <... mkdir resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./20/file1") = 0 [pid 5082] getdents64(3, [pid 5387] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5082] close(3 [ 91.405038][ T5387] loop3: detected capacity change from 0 to 1024 [ 91.425594][ T5383] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.435309][ T5383] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.445776][ T5383] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] getdents64(4, [pid 5386] <... munmap resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5386] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] close(4 [pid 5082] rmdir("./20" [pid 5081] <... close resumed>) = 0 [pid 5386] <... openat resumed>) = 4 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] rmdir("./18/file1" [pid 5386] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... rmdir resumed>) = 0 [pid 5082] mkdir("./21", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] getdents64(3, [pid 5387] <... mount resumed>) = 0 [pid 5386] <... ioctl resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] close(3 [pid 5387] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5081] <... close resumed>) = 0 [pid 5387] <... openat resumed>) = 3 [pid 5387] chdir("./file1" [pid 5081] rmdir("./18" [pid 5387] <... chdir resumed>) = 0 [pid 5387] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5387] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5387] <... futex resumed>) = 1 [pid 5381] <... futex resumed>) = 0 [pid 5387] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] mkdir("./19", 0777 [pid 5381] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] <... futex resumed>) = 0 [pid 5387] creat("./file0", 000) = 4 [pid 5387] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5387] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5381] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... mkdir resumed>) = 0 [pid 5380] <... futex resumed>) = 0 [pid 5380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5380] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5380] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5380] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5387] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5388]}, 88) = 5388 ./strace-static-x86_64: Process 5388 attached [pid 5380] rt_sigprocmask(SIG_SETMASK, [], [pid 5388] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5380] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5388] <... rseq resumed>) = 0 [pid 5380] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] set_robust_list(0x7f96081b79a0, 24 [pid 5380] <... futex resumed>) = 0 [pid 5388] <... set_robust_list resumed>) = 0 [pid 5380] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] rt_sigprocmask(SIG_SETMASK, [], [pid 5381] <... futex resumed>) = 0 [pid 5388] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5386] close(3 [pid 5381] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5388] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5386] <... close resumed>) = 0 [pid 5383] <... write resumed>) = 53248 [pid 5386] close(4 [pid 5383] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5388] <... open resumed>) = 5 [pid 5386] <... close resumed>) = 0 [pid 5383] <... futex resumed>) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5388] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] mkdir("./file1", 0777 [pid 5383] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5388] <... futex resumed>) = 1 [pid 5388] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5380] <... futex resumed>) = 0 [pid 5082] close(3 [pid 5380] exit_group(0 [pid 5082] <... close resumed>) = 0 [pid 5388] <... futex resumed>) = ? [pid 5380] <... exit_group resumed>) = ? [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5388] +++ exited with 0 +++ [pid 5386] <... mkdir resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5389 [pid 5386] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, ""./strace-static-x86_64: Process 5389 attached [pid 5383] <... futex resumed>) = ? [ 91.456651][ T5383] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.464496][ T5386] loop2: detected capacity change from 0 to 1024 [ 91.477273][ T5383] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.487234][ T5383] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.498666][ T5387] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5389] set_robust_list(0x5555939db6a0, 24 [pid 5386] <... mount resumed>) = 0 [pid 5383] +++ exited with 0 +++ [pid 5380] +++ exited with 0 +++ [pid 5389] <... set_robust_list resumed>) = 0 [pid 5386] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5389] chdir("./21" [pid 5386] <... openat resumed>) = 3 [pid 5386] chdir("./file1" [pid 5085] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5386] <... chdir resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5386] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5389] <... chdir resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5386] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5386] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5382] <... futex resumed>) = 0 [pid 5085] getdents64(3, [pid 5389] setpgid(0, 0) = 0 [pid 5386] creat("./file0", 000 [pid 5382] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5382] <... futex resumed>) = 0 [pid 5382] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5386] <... creat resumed>) = 4 [pid 5381] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5389] <... openat resumed>) = 3 [pid 5386] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5389] write(3, "1000", 4 [pid 5382] <... futex resumed>) = 0 [pid 5386] <... futex resumed>) = 1 [pid 5381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5389] <... write resumed>) = 4 [pid 5386] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5382] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5382] <... futex resumed>) = 0 [pid 5381] <... mmap resumed>) = 0x7f9608197000 [pid 5085] unlink("./19/binderfs" [pid 5382] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5381] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... unlink resumed>) = 0 [ 91.532774][ T5387] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.568865][ T5387] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5381] <... mprotect resumed>) = 0 [pid 5085] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5381] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5389] close(3) = 0 [pid 5381] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5389] symlink("/dev/binderfs", "./binderfs" [pid 5381] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5389] <... symlink resumed>) = 0 [pid 5381] <... clone3 resumed> => {parent_tid=[5390]}, 88) = 5390 [pid 5389] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] close(3 [pid 5389] <... futex resumed>) = 0 [pid 5381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5389] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5381] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5389] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5381] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5391 attached [pid 5389] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5381] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5391 [pid 5391] set_robust_list(0x5555939db6a0, 24 [pid 5389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5391] <... set_robust_list resumed>) = 0 [pid 5389] <... mmap resumed>) = 0x7f96081b8000 ./strace-static-x86_64: Process 5390 attached [pid 5391] chdir("./19" [pid 5389] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5390] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5389] <... mprotect resumed>) = 0 [pid 5391] <... chdir resumed>) = 0 [pid 5390] <... rseq resumed>) = 0 [pid 5389] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5390] set_robust_list(0x7f96081b79a0, 24 [pid 5389] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5391] <... prctl resumed>) = 0 [pid 5390] <... set_robust_list resumed>) = 0 [pid 5389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5390] rt_sigprocmask(SIG_SETMASK, [], [pid 5391] setpgid(0, 0 [pid 5390] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5390] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000./strace-static-x86_64: Process 5392 attached [pid 5391] <... setpgid resumed>) = 0 [pid 5389] <... clone3 resumed> => {parent_tid=[5392]}, 88) = 5392 [pid 5085] <... umount2 resumed>) = 0 [ 91.571498][ T5386] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.599092][ T5387] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5389] rt_sigprocmask(SIG_SETMASK, [], [pid 5392] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5390] <... open resumed>) = 5 [pid 5390] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5381] <... futex resumed>) = 0 [pid 5390] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5389] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5389] <... futex resumed>) = 0 [pid 5382] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] <... rseq resumed>) = 0 [pid 5382] <... futex resumed>) = 0 [pid 5392] set_robust_list(0x7f96081d89a0, 24 [pid 5391] <... openat resumed>) = 3 [pid 5389] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] newfstatat(AT_FDCWD, "./19/file1", [pid 5392] <... set_robust_list resumed>) = 0 [pid 5391] write(3, "1000", 4 [pid 5382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5392] rt_sigprocmask(SIG_SETMASK, [], [pid 5391] <... write resumed>) = 4 [pid 5382] <... mmap resumed>) = 0x7f9608197000 [pid 5392] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5391] close(3 [pid 5382] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5391] <... close resumed>) = 0 [pid 5382] <... mprotect resumed>) = 0 [ 91.634712][ T5386] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.646522][ T5386] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.653148][ T5387] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.655294][ T5386] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.661131][ T5387] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5392] memfd_create("syzkaller", 0 [pid 5391] symlink("/dev/binderfs", "./binderfs" [pid 5387] <... write resumed>) = 53248 [pid 5382] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5392] <... memfd_create resumed>) = 3 [pid 5391] <... symlink resumed>) = 0 [pid 5382] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5391] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5393 attached [pid 5391] <... futex resumed>) = 0 [pid 5387] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... openat resumed>) = 4 [pid 5391] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5382] <... clone3 resumed> => {parent_tid=[5393]}, 88) = 5393 [pid 5085] newfstatat(4, "", [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5391] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5382] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5392] <... mmap resumed>) = 0x7f95ffc00000 [pid 5391] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5382] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5381] exit_group(0 [pid 5393] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5387] <... futex resumed>) = ? [pid 5382] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... exit_group resumed>) = ? [pid 5085] getdents64(4, [pid 5393] <... rseq resumed>) = 0 [pid 5391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5390] <... futex resumed>) = ? [pid 5387] +++ exited with 0 +++ [pid 5382] <... futex resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5393] set_robust_list(0x7f96081b79a0, 24 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5390] +++ exited with 0 +++ [pid 5382] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5381] +++ exited with 0 +++ [pid 5085] getdents64(4, [pid 5393] <... set_robust_list resumed>) = 0 [pid 5391] <... mmap resumed>) = 0x7f96081b8000 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5391] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5085] close(4 [pid 5393] rt_sigprocmask(SIG_SETMASK, [], [pid 5391] <... mprotect resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5393] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5391] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5386] <... write resumed>) = 53248 [pid 5085] rmdir("./19/file1" [pid 5393] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5392] <... write resumed>) = 524288 [pid 5391] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5386] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... rmdir resumed>) = 0 [pid 5391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5394 attached [pid 5393] <... open resumed>) = 5 [pid 5392] munmap(0x7f95ffc00000, 138412032 [pid 5386] <... futex resumed>) = 0 [pid 5085] getdents64(3, [pid 5394] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5393] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... munmap resumed>) = 0 [pid 5391] <... clone3 resumed> => {parent_tid=[5394]}, 88) = 5394 [pid 5394] <... rseq resumed>) = 0 [pid 5393] <... futex resumed>) = 1 [pid 5391] rt_sigprocmask(SIG_SETMASK, [], [pid 5386] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5382] <... futex resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5394] set_robust_list(0x7f96081d89a0, 24 [pid 5393] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5382] exit_group(0 [pid 5085] close(3 [pid 5084] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5394] <... set_robust_list resumed>) = 0 [pid 5392] <... openat resumed>) = 4 [pid 5085] <... close resumed>) = 0 [pid 5394] rt_sigprocmask(SIG_SETMASK, [], [pid 5392] ioctl(4, LOOP_SET_FD, 3 [ 91.690363][ T5386] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.698617][ T5386] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] rmdir("./19" [pid 5394] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5393] <... futex resumed>) = ? [pid 5391] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5386] <... futex resumed>) = ? [pid 5382] <... exit_group resumed>) = ? [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5393] +++ exited with 0 +++ [pid 5394] memfd_create("syzkaller", 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5394] <... memfd_create resumed>) = 3 [pid 5391] <... futex resumed>) = 0 [pid 5394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5392] close(3 [pid 5391] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5386] +++ exited with 0 +++ [pid 5382] +++ exited with 0 +++ [pid 5085] <... rmdir resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5394] <... mmap resumed>) = 0x7f95ffc00000 [pid 5392] <... close resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5085] mkdir("./20", 0777 [pid 5392] close(4 [pid 5083] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5083] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5083] newfstatat(3, "", [pid 5085] <... mkdir resumed>) = 0 [pid 5084] newfstatat(3, "", [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5392] <... close resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] getdents64(3, [pid 5083] getdents64(3, [pid 5392] mkdir("./file1", 0777 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5392] <... mkdir resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5392] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5083] unlink("./19/binderfs") = 0 [pid 5083] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./19/binderfs" [pid 5394] <... write resumed>) = 524288 [pid 5084] <... unlink resumed>) = 0 [pid 5394] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5084] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 91.739439][ T5392] loop1: detected capacity change from 0 to 1024 [pid 5394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5394] close(3 [pid 5083] <... umount2 resumed>) = 0 [pid 5394] <... close resumed>) = 0 [pid 5394] close(4 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5394] <... close resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... openat resumed>) = 4 [pid 5084] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(4, "", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(4, [pid 5084] <... openat resumed>) = 4 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5394] mkdir("./file1", 0777 [pid 5392] <... mount resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] newfstatat(4, "", [pid 5083] getdents64(4, [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] getdents64(4, [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] close(4 [pid 5394] <... mkdir resumed>) = 0 [pid 5392] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] close(4 [pid 5083] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] rmdir("./19/file1") = 0 [pid 5084] rmdir("./19/file1" [pid 5083] getdents64(3, [pid 5394] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5392] <... openat resumed>) = 3 [pid 5085] close(3 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5392] chdir("./file1") = 0 [pid 5084] getdents64(3, [pid 5083] close(3 [pid 5085] <... close resumed>) = 0 [pid 5392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... close resumed>) = 0 [pid 5392] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] close(3 [pid 5083] rmdir("./19" [pid 5392] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5084] rmdir("./19" [pid 5083] mkdir("./20", 0777 [pid 5392] creat("./file0", 000 [pid 5389] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5392] <... creat resumed>) = 4 [pid 5389] <... futex resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5395 [pid 5084] mkdir("./20", 0777 [pid 5389] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5395 attached [pid 5392] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5395] set_robust_list(0x5555939db6a0, 24 [pid 5392] <... futex resumed>) = 1 [pid 5389] <... futex resumed>) = 0 [ 91.797017][ T5394] loop0: detected capacity change from 0 to 1024 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] <... openat resumed>) = 3 [pid 5395] <... set_robust_list resumed>) = 0 [pid 5394] <... mount resumed>) = 0 [pid 5392] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5389] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... openat resumed>) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5389] <... futex resumed>) = 0 [pid 5392] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5389] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5395] chdir("./20" [pid 5394] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5394] <... openat resumed>) = 3 [pid 5395] <... chdir resumed>) = 0 [pid 5394] chdir("./file1" [pid 5395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5394] <... chdir resumed>) = 0 [pid 5394] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5395] <... prctl resumed>) = 0 [pid 5394] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] setpgid(0, 0 [pid 5394] <... futex resumed>) = 1 [pid 5394] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5391] <... futex resumed>) = 0 [pid 5395] <... setpgid resumed>) = 0 [pid 5391] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5394] <... futex resumed>) = 0 [pid 5391] <... futex resumed>) = 1 [pid 5395] <... openat resumed>) = 3 [pid 5394] creat("./file0", 000) = 4 [pid 5395] write(3, "1000", 4) = 4 [pid 5395] close(3) = 0 [pid 5394] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] symlink("/dev/binderfs", "./binderfs" [pid 5394] <... futex resumed>) = 0 [pid 5395] <... symlink resumed>) = 0 [pid 5394] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5395] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5395] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5391] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5083] <... ioctl resumed>) = 0 [pid 5391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5395] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5391] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5391] <... futex resumed>) = 1 [pid 5395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5394] <... futex resumed>) = 0 [pid 5394] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683./strace-static-x86_64: Process 5396 attached [pid 5395] <... clone3 resumed> => {parent_tid=[5396]}, 88) = 5396 [pid 5391] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5083] close(3) = 0 [ 91.882373][ T5392] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.891160][ T5392] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.908455][ T5394] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.919248][ T5392] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5397 attached [pid 5396] <... rseq resumed>) = 0 [pid 5395] rt_sigprocmask(SIG_SETMASK, [], [pid 5389] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... ioctl resumed>) = 0 [pid 5397] set_robust_list(0x5555939db6a0, 24 [pid 5396] set_robust_list(0x7f96081d89a0, 24 [pid 5395] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5389] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5397 [pid 5397] <... set_robust_list resumed>) = 0 [pid 5396] <... set_robust_list resumed>) = 0 [pid 5395] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] chdir("./20" [pid 5396] rt_sigprocmask(SIG_SETMASK, [], [pid 5395] <... futex resumed>) = 0 [pid 5389] <... futex resumed>) = 0 [pid 5396] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5395] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5397] <... chdir resumed>) = 0 [pid 5396] memfd_create("syzkaller", 0 [pid 5084] close(3 [pid 5397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5396] <... memfd_create resumed>) = 3 [pid 5397] <... prctl resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5397] setpgid(0, 0 [pid 5396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5397] <... setpgid resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5396] <... mmap resumed>) = 0x7f95ffc00000 [pid 5397] <... openat resumed>) = 3 [pid 5396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5397] write(3, "1000", 4) = 4 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5398 [pid 5397] close(3) = 0 [pid 5397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5397] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5397] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 5398 attached NULL, 8) = 0 [pid 5398] set_robust_list(0x5555939db6a0, 24 [pid 5397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5397] <... mmap resumed>) = 0x7f96081b8000 [pid 5389] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5398] <... set_robust_list resumed>) = 0 [pid 5397] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5389] <... mprotect resumed>) = 0 [pid 5398] chdir("./20" [pid 5397] <... mprotect resumed>) = 0 [pid 5397] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5389] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5397] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5389] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5398] <... chdir resumed>) = 0 [pid 5397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5399 attached [pid 5398] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5391] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5399] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5398] <... prctl resumed>) = 0 [pid 5397] <... clone3 resumed> => {parent_tid=[5399]}, 88) = 5399 ./strace-static-x86_64: Process 5400 attached [pid 5399] set_robust_list(0x7f96081d89a0, 24 [pid 5391] <... futex resumed>) = 0 [pid 5391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5389] <... clone3 resumed> => {parent_tid=[5400]}, 88) = 5400 [pid 5400] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5399] <... set_robust_list resumed>) = 0 [pid 5396] <... write resumed>) = 524288 [pid 5391] <... mmap resumed>) = 0x7f9608197000 [pid 5389] rt_sigprocmask(SIG_SETMASK, [], [pid 5399] rt_sigprocmask(SIG_SETMASK, [], [pid 5398] setpgid(0, 0 [pid 5397] rt_sigprocmask(SIG_SETMASK, [], [pid 5400] <... rseq resumed>) = 0 [pid 5391] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5389] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5398] <... setpgid resumed>) = 0 [pid 5397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5389] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] set_robust_list(0x7f96081b79a0, 24 [pid 5391] <... mprotect resumed>) = 0 [pid 5389] <... futex resumed>) = 0 [pid 5400] <... set_robust_list resumed>) = 0 [pid 5399] memfd_create("syzkaller", 0 [pid 5398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5397] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] munmap(0x7f95ffc00000, 138412032 [pid 5391] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5389] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] <... futex resumed>) = 0 [pid 5396] <... munmap resumed>) = 0 [pid 5400] rt_sigprocmask(SIG_SETMASK, [], [pid 5397] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5391] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5400] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5391] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5399] <... memfd_create resumed>) = 3 [pid 5398] <... openat resumed>) = 3 [pid 5396] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5401 attached [pid 5400] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5398] write(3, "1000", 4 [pid 5396] <... openat resumed>) = 4 [pid 5399] <... mmap resumed>) = 0x7f95ffc00000 [pid 5398] <... write resumed>) = 4 [ 91.933742][ T5392] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.944614][ T5394] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.952245][ T5394] hfsplus: request for non-existent node 16777216 in B*Tree [ 91.971726][ T5392] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5396] ioctl(4, LOOP_SET_FD, 3 [pid 5401] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5391] <... clone3 resumed> => {parent_tid=[5401]}, 88) = 5401 [pid 5401] <... rseq resumed>) = 0 [pid 5398] close(3 [pid 5391] rt_sigprocmask(SIG_SETMASK, [], [pid 5398] <... close resumed>) = 0 [pid 5398] symlink("/dev/binderfs", "./binderfs" [pid 5401] set_robust_list(0x7f96081b79a0, 24 [pid 5398] <... symlink resumed>) = 0 [pid 5391] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5391] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... set_robust_list resumed>) = 0 [pid 5398] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5391] <... futex resumed>) = 0 [pid 5401] rt_sigprocmask(SIG_SETMASK, [], [pid 5391] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5398] <... futex resumed>) = 0 [pid 5401] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5398] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5401] <... open resumed>) = 5 [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5396] <... ioctl resumed>) = 0 [pid 5401] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5396] close(3 [pid 5398] <... mmap resumed>) = 0x7f96081b8000 [pid 5396] <... close resumed>) = 0 [pid 5398] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5396] close(4 [pid 5401] <... futex resumed>) = 1 [pid 5398] <... mprotect resumed>) = 0 [pid 5396] <... close resumed>) = 0 [pid 5391] <... futex resumed>) = 0 [pid 5401] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5399] <... write resumed>) = 524288 [pid 5398] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5396] mkdir("./file1", 0777 [pid 5398] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5396] <... mkdir resumed>) = 0 [pid 5398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5396] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, ""./strace-static-x86_64: Process 5402 attached [pid 5398] <... clone3 resumed> => {parent_tid=[5402]}, 88) = 5402 [pid 5402] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5399] munmap(0x7f95ffc00000, 138412032 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5389] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5402] <... rseq resumed>) = 0 [pid 5399] <... munmap resumed>) = 0 [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5402] set_robust_list(0x7f96081d89a0, 24 [pid 5398] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] <... set_robust_list resumed>) = 0 [pid 5399] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5398] <... futex resumed>) = 0 [pid 5396] <... mount resumed>) = 0 [pid 5400] <... open resumed>) = 5 [pid 5402] rt_sigprocmask(SIG_SETMASK, [], [pid 5399] <... openat resumed>) = 4 [pid 5398] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5392] <... write resumed>) = 53248 [pid 5400] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5400] <... futex resumed>) = 0 [pid 5399] ioctl(4, LOOP_SET_FD, 3 [pid 5396] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 91.993455][ T5396] loop4: detected capacity change from 0 to 1024 [ 92.001925][ T5394] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.011681][ T5392] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.031603][ T5394] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5392] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] memfd_create("syzkaller", 0 [pid 5400] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5396] <... openat resumed>) = 3 [pid 5392] <... futex resumed>) = 0 [pid 5402] <... memfd_create resumed>) = 3 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5392] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5402] <... mmap resumed>) = 0x7f95ffc00000 [pid 5396] chdir("./file1") = 0 [pid 5396] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5396] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5395] <... futex resumed>) = 0 [pid 5395] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5396] creat("./file0", 000 [pid 5395] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5389] exit_group(0 [pid 5400] <... futex resumed>) = ? [pid 5396] <... creat resumed>) = 4 [pid 5392] <... futex resumed>) = ? [pid 5389] <... exit_group resumed>) = ? [pid 5392] +++ exited with 0 +++ [pid 5396] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5395] <... futex resumed>) = 0 [pid 5395] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5395] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5400] +++ exited with 0 +++ [pid 5389] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5402] <... write resumed>) = 524288 [pid 5399] <... ioctl resumed>) = 0 [pid 5082] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5399] close(3 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5399] <... close resumed>) = 0 [pid 5082] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5399] close(4 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] <... close resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5399] mkdir("./file1", 0777 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5399] <... mkdir resumed>) = 0 [pid 5082] unlink("./21/binderfs" [pid 5399] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] <... unlink resumed>) = 0 [ 92.050317][ T5399] loop2: detected capacity change from 0 to 1024 [ 92.052938][ T5394] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.077189][ T5396] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5394] <... write resumed>) = 53248 [pid 5394] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] munmap(0x7f95ffc00000, 138412032 [pid 5394] <... futex resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5402] <... munmap resumed>) = 0 [pid 5391] exit_group(0) = ? [pid 5401] <... futex resumed>) = ? [pid 5401] +++ exited with 0 +++ [pid 5402] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5402] ioctl(4, LOOP_SET_FD, 3 [pid 5082] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5402] <... ioctl resumed>) = 0 [pid 5394] +++ exited with 0 +++ [pid 5391] +++ exited with 0 +++ [pid 5395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5395] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5395] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, [pid 5395] <... mmap resumed>) = 0x7f9608197000 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5391, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5395] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] getdents64(4, [pid 5081] restart_syscall(<... resuming interrupted clone ...> [pid 5395] <... mprotect resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] <... restart_syscall resumed>) = 0 [pid 5395] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] close(4 [pid 5395] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... close resumed>) = 0 [pid 5395] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5082] rmdir("./21/file1" [pid 5081] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5403 attached [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] <... clone3 resumed> => {parent_tid=[5403]}, 88) = 5403 [pid 5081] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5395] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 [pid 5395] <... futex resumed>) = 0 [pid 5081] newfstatat(3, "", [pid 5403] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5395] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5403] <... rseq resumed>) = 0 [pid 5402] close(3 [pid 5082] getdents64(3, [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5403] set_robust_list(0x7f96081b79a0, 24 [pid 5402] <... close resumed>) = 0 [pid 5403] <... set_robust_list resumed>) = 0 [pid 5402] close(4 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(3, [pid 5403] rt_sigprocmask(SIG_SETMASK, [], [pid 5402] <... close resumed>) = 0 [pid 5082] close(3 [pid 5403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5402] mkdir("./file1", 0777 [pid 5399] <... mount resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5403] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5402] <... mkdir resumed>) = 0 [pid 5399] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5081] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5402] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5399] <... openat resumed>) = 3 [pid 5082] rmdir("./21" [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] chdir("./file1" [pid 5081] newfstatat(AT_FDCWD, "./19/binderfs", [pid 5399] <... chdir resumed>) = 0 [pid 5082] <... rmdir resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./19/binderfs" [pid 5399] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] mkdir("./22", 0777 [pid 5399] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] <... mkdir resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5399] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 3 [pid 5081] <... unlink resumed>) = 0 [pid 5399] <... futex resumed>) = 1 [pid 5397] <... futex resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5397] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5399] creat("./file0", 000) = 4 [pid 5081] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5399] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5397] <... futex resumed>) = 0 [pid 5397] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5397] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 92.113578][ T5402] loop3: detected capacity change from 0 to 1024 [ 92.121368][ T5396] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.145981][ T5396] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5399] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5395] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5402] <... mount resumed>) = 0 [pid 5402] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5402] chdir("./file1") = 0 [pid 5402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5402] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5398] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5402] creat("./file0", 000 [pid 5398] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5402] <... creat resumed>) = 4 [pid 5403] <... open resumed>) = 5 [pid 5081] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] close(3) = 0 [pid 5402] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5403] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5402] <... futex resumed>) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5403] <... futex resumed>) = 0 [pid 5397] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 92.171779][ T5396] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.180866][ T5399] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.209615][ T5399] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5403] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5397] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5081] newfstatat(AT_FDCWD, "./19/file1", [pid 5397] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5398] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5397] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5404 [pid 5081] umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5398] <... futex resumed>) = 0 [pid 5397] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5402] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5398] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5397] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... openat resumed>) = 4 [pid 5397] <... mmap resumed>) = 0x7f9608197000 [pid 5397] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5081] newfstatat(4, "", [pid 5397] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5404 attached [pid 5397] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5405]}, 88) = 5405 [pid 5404] set_robust_list(0x5555939db6a0, 24 [pid 5397] rt_sigprocmask(SIG_SETMASK, [], [pid 5404] <... set_robust_list resumed>) = 0 [pid 5397] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5404] chdir("./22" [pid 5397] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... chdir resumed>) = 0 [pid 5397] <... futex resumed>) = 0 [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5397] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] <... prctl resumed>) = 0 [pid 5404] setpgid(0, 0) = 0 [ 92.217990][ T5396] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.238887][ T5402] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.253771][ T5399] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.261150][ T5399] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5405 attached ) = 3 [pid 5081] getdents64(4, [pid 5405] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5404] write(3, "1000", 4 [pid 5081] getdents64(4, [pid 5405] set_robust_list(0x7f96081b79a0, 24 [pid 5404] <... write resumed>) = 4 [pid 5404] close(3) = 0 [pid 5404] symlink("/dev/binderfs", "./binderfs" [pid 5405] <... set_robust_list resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5405] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] close(4 [pid 5405] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5405] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5404] <... symlink resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5404] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5404] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5081] rmdir("./19/file1" [pid 5404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5398] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(3, [pid 5404] <... mmap resumed>) = 0x7f96081b8000 [pid 5398] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5404] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5398] <... futex resumed>) = 0 [pid 5081] close(3 [pid 5404] <... mprotect resumed>) = 0 [pid 5398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... close resumed>) = 0 [pid 5404] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5398] <... mmap resumed>) = 0x7f9608197000 [pid 5404] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5398] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5081] rmdir("./19" [pid 5404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5398] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5406 attached [pid 5398] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] <... rmdir resumed>) = 0 [pid 5406] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5404] <... clone3 resumed> => {parent_tid=[5406]}, 88) = 5406 [pid 5398] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] mkdir("./20", 0777 [pid 5406] <... rseq resumed>) = 0 [pid 5404] rt_sigprocmask(SIG_SETMASK, [], [pid 5398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5406] set_robust_list(0x7f96081d89a0, 24 [pid 5404] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5407 attached [pid 5406] <... set_robust_list resumed>) = 0 [pid 5405] <... open resumed>) = 5 [pid 5404] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5398] <... clone3 resumed> => {parent_tid=[5407]}, 88) = 5407 [pid 5396] <... write resumed>) = 53248 [pid 5081] <... mkdir resumed>) = 0 [pid 5407] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5406] rt_sigprocmask(SIG_SETMASK, [], [pid 5405] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] <... futex resumed>) = 0 [pid 5398] rt_sigprocmask(SIG_SETMASK, [], [pid 5396] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5407] <... rseq resumed>) = 0 [pid 5406] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5405] <... futex resumed>) = 1 [pid 5404] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5398] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5397] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = 0 [pid 5407] set_robust_list(0x7f96081b79a0, 24 [pid 5406] memfd_create("syzkaller", 0 [pid 5405] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5398] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5396] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5395] exit_group(0 [pid 5081] <... openat resumed>) = 3 [pid 5407] <... set_robust_list resumed>) = 0 [pid 5406] <... memfd_create resumed>) = 3 [ 92.268720][ T5396] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.282306][ T5402] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.304537][ T5402] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.305904][ T5399] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5403] <... futex resumed>) = ? [pid 5398] <... futex resumed>) = 0 [pid 5396] <... futex resumed>) = ? [pid 5395] <... exit_group resumed>) = ? [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5407] rt_sigprocmask(SIG_SETMASK, [], [pid 5406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5403] +++ exited with 0 +++ [pid 5398] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5396] +++ exited with 0 +++ [pid 5395] +++ exited with 0 +++ [pid 5406] <... mmap resumed>) = 0x7f95ffc00000 [pid 5406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5407] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5395, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5407] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5398] <... futex resumed>) = 0 [pid 5407] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5406] <... write resumed>) = 524288 [pid 5085] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5399] <... write resumed>) = 53248 [pid 5406] munmap(0x7f95ffc00000, 138412032 [pid 5085] <... openat resumed>) = 3 [pid 5406] <... munmap resumed>) = 0 [pid 5399] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] newfstatat(3, "", [pid 5397] exit_group(0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5397] <... exit_group resumed>) = ? [pid 5406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5406] ioctl(4, LOOP_SET_FD, 3 [pid 5405] <... futex resumed>) = ? [pid 5085] getdents64(3, [pid 5081] <... ioctl resumed>) = 0 [pid 5405] +++ exited with 0 +++ [pid 5399] <... futex resumed>) = ? [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] close(3 [pid 5085] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] <... close resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5406] <... ioctl resumed>) = 0 [pid 5406] close(3) = 0 [pid 5406] close(4) = 0 [pid 5406] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 5408 attached [pid 5402] <... write resumed>) = 53248 [pid 5399] +++ exited with 0 +++ [pid 5397] +++ exited with 0 +++ [pid 5085] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5408 [pid 5408] set_robust_list(0x5555939db6a0, 24 [pid 5406] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5408] <... set_robust_list resumed>) = 0 [pid 5402] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] unlink("./20/binderfs" [pid 5408] chdir("./20" [pid 5402] <... futex resumed>) = 0 [pid 5398] exit_group(0 [pid 5085] <... unlink resumed>) = 0 [pid 5083] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5408] <... chdir resumed>) = 0 [pid 5407] <... futex resumed>) = ? [pid 5398] <... exit_group resumed>) = ? [pid 5085] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5407] +++ exited with 0 +++ [pid 5402] +++ exited with 0 +++ [pid 5398] +++ exited with 0 +++ [pid 5083] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5408] <... prctl resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5408] setpgid(0, 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5398, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 92.311854][ T5402] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.330710][ T5402] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.331064][ T5399] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.355332][ T5406] loop1: detected capacity change from 0 to 1024 [ 92.362617][ T5402] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] newfstatat(3, "", [pid 5408] <... setpgid resumed>) = 0 [pid 5084] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, [pid 5084] <... restart_syscall resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] unlink("./20/binderfs" [pid 5408] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5083] <... unlink resumed>) = 0 [pid 5083] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5408] write(3, "1000", 4 [pid 5406] <... mount resumed>) = 0 [pid 5084] newfstatat(3, "", [pid 5408] <... write resumed>) = 4 [pid 5406] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5406] <... openat resumed>) = 3 [pid 5406] chdir("./file1") = 0 [pid 5406] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5406] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5404] <... futex resumed>) = 0 [pid 5408] close(3 [pid 5406] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5404] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(3, [pid 5408] <... close resumed>) = 0 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5404] <... futex resumed>) = 0 [pid 5408] symlink("/dev/binderfs", "./binderfs" [pid 5406] creat("./file0", 000 [pid 5404] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5406] <... creat resumed>) = 4 [pid 5084] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5408] <... symlink resumed>) = 0 [pid 5406] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... umount2 resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5406] <... futex resumed>) = 1 [pid 5404] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] newfstatat(AT_FDCWD, "./20/binderfs", [pid 5408] <... futex resumed>) = 0 [pid 5406] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5404] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5404] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] newfstatat(AT_FDCWD, "./20/file1", [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5408] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] unlink("./20/binderfs" [pid 5083] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... unlink resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./20/file1", [pid 5408] <... mmap resumed>) = 0x7f96081b8000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5408] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5408] <... mprotect resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5408] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] <... openat resumed>) = 4 [pid 5408] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5083] newfstatat(4, "", [pid 5408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5085] newfstatat(4, "", [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5409 attached [pid 5408] <... clone3 resumed> => {parent_tid=[5409]}, 88) = 5409 [pid 5085] getdents64(4, [pid 5083] getdents64(4, [pid 5409] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5408] rt_sigprocmask(SIG_SETMASK, [], [pid 5409] <... rseq resumed>) = 0 [pid 5408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5409] set_robust_list(0x7f96081d89a0, 24 [pid 5408] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] getdents64(4, [pid 5083] getdents64(4, [pid 5409] <... set_robust_list resumed>) = 0 [pid 5408] <... futex resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5408] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] close(4) = 0 [pid 5085] rmdir("./20/file1") = 0 [ 92.438010][ T5406] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.446572][ T5406] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.454521][ T5406] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.467122][ T5406] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.479471][ T5406] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5409] rt_sigprocmask(SIG_SETMASK, [], [pid 5406] <... write resumed>) = 53248 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5404] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5083] close(4 [pid 5085] <... close resumed>) = 0 [pid 5084] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5409] memfd_create("syzkaller", 0 [pid 5406] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5404] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] rmdir("./20" [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... close resumed>) = 0 [pid 5409] <... memfd_create resumed>) = 3 [pid 5404] <... futex resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./20/file1", [pid 5409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5406] <... futex resumed>) = 0 [pid 5404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] rmdir("./20/file1" [pid 5409] <... mmap resumed>) = 0x7f95ffc00000 [pid 5404] <... mmap resumed>) = 0x7f9608197000 [pid 5084] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5084] <... openat resumed>) = 4 [pid 5083] <... rmdir resumed>) = 0 [pid 5084] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(4, [pid 5409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5406] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5404] <... mprotect resumed>) = 0 [pid 5085] mkdir("./21", 0777 [pid 5083] getdents64(3, [pid 5404] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5085] <... mkdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5404] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5083] close(3 [pid 5404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5085] <... openat resumed>) = 3 [pid 5084] getdents64(4, [pid 5083] <... close resumed>) = 0 ./strace-static-x86_64: Process 5410 attached [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] rmdir("./20" [pid 5410] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5409] <... write resumed>) = 524288 [pid 5404] <... clone3 resumed> => {parent_tid=[5410]}, 88) = 5410 [pid 5084] close(4) = 0 [pid 5084] rmdir("./20/file1" [pid 5083] <... rmdir resumed>) = 0 [pid 5410] <... rseq resumed>) = 0 [pid 5409] munmap(0x7f95ffc00000, 138412032 [pid 5404] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... rmdir resumed>) = 0 [pid 5083] mkdir("./21", 0777 [pid 5410] set_robust_list(0x7f96081b79a0, 24 [pid 5409] <... munmap resumed>) = 0 [pid 5404] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] getdents64(3, [pid 5083] <... mkdir resumed>) = 0 [pid 5410] <... set_robust_list resumed>) = 0 [pid 5409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5404] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5410] rt_sigprocmask(SIG_SETMASK, [], [pid 5409] <... openat resumed>) = 4 [pid 5404] <... futex resumed>) = 0 [pid 5084] close(3 [pid 5083] <... openat resumed>) = 3 [pid 5410] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5409] ioctl(4, LOOP_SET_FD, 3 [pid 5404] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... close resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5410] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 5410] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5404] <... futex resumed>) = 0 [pid 5410] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5404] exit_group(0 [pid 5410] <... futex resumed>) = ? [pid 5406] <... futex resumed>) = ? [pid 5404] <... exit_group resumed>) = ? [pid 5410] +++ exited with 0 +++ [pid 5406] +++ exited with 0 +++ [pid 5404] +++ exited with 0 +++ [pid 5409] <... ioctl resumed>) = 0 [pid 5409] close(3) = 0 [ 92.487877][ T5406] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.525426][ T5409] loop0: detected capacity change from 0 to 1024 [ 92.532558][ T29] kauditd_printk_skb: 26 callbacks suppressed [pid 5409] close(4 [pid 5084] rmdir("./20" [pid 5409] <... close resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5404, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5085] close(3) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5411 attached [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5411 [pid 5082] getdents64(3, [pid 5411] set_robust_list(0x5555939db6a0, 24 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5411] <... set_robust_list resumed>) = 0 [pid 5082] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5409] mkdir("./file1", 0777 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] mkdir("./21", 0777 [pid 5411] chdir("./21" [pid 5082] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5411] <... chdir resumed>) = 0 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5409] <... mkdir resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5411] <... prctl resumed>) = 0 [pid 5082] unlink("./22/binderfs" [pid 5411] setpgid(0, 0) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5409] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5411] <... openat resumed>) = 3 [pid 5084] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5411] write(3, "1000", 4 [pid 5082] <... umount2 resumed>) = 0 [pid 5411] <... write resumed>) = 4 [pid 5083] <... ioctl resumed>) = 0 [pid 5082] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5411] close(3 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5411] <... close resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./22/file1", [pid 5411] symlink("/dev/binderfs", "./binderfs" [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5411] <... symlink resumed>) = 0 [pid 5082] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5411] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5411] <... futex resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5411] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5409] <... mount resumed>) = 0 [pid 5083] close(3 [pid 5082] <... openat resumed>) = 4 [pid 5411] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5409] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5082] newfstatat(4, "", [pid 5411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5409] <... openat resumed>) = 3 [ 92.532575][ T29] audit: type=1800 audit(1715660565.192:107): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [pid 5083] <... close resumed>) = 0 [pid 5411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5409] chdir("./file1" [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5411] <... mmap resumed>) = 0x7f96081b8000 [pid 5082] getdents64(4, [pid 5411] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5411] <... mprotect resumed>) = 0 [pid 5082] getdents64(4, [pid 5411] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5411] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] close(4 [pid 5411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./22/file1" [pid 5409] <... chdir resumed>) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] <... rmdir resumed>) = 0 [pid 5409] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5082] getdents64(3, [pid 5409] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5409] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] close(3 [pid 5409] <... futex resumed>) = 1 [pid 5408] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 ./strace-static-x86_64: Process 5413 attached ./strace-static-x86_64: Process 5412 attached [pid 5409] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5408] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5413 [pid 5413] set_robust_list(0x5555939db6a0, 24 [pid 5412] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5408] <... futex resumed>) = 0 [pid 5082] rmdir("./22" [pid 5413] <... set_robust_list resumed>) = 0 [pid 5412] <... rseq resumed>) = 0 [pid 5411] <... clone3 resumed> => {parent_tid=[5412]}, 88) = 5412 [pid 5409] creat("./file0", 000 [pid 5408] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] close(3 [pid 5082] <... rmdir resumed>) = 0 [pid 5413] chdir("./21" [pid 5412] set_robust_list(0x7f96081d89a0, 24 [pid 5411] rt_sigprocmask(SIG_SETMASK, [], [pid 5409] <... creat resumed>) = 4 [pid 5084] <... close resumed>) = 0 [pid 5082] mkdir("./23", 0777 [pid 5413] <... chdir resumed>) = 0 [pid 5412] <... set_robust_list resumed>) = 0 [pid 5411] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5409] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... mkdir resumed>) = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5412] rt_sigprocmask(SIG_SETMASK, [], [pid 5411] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5409] <... futex resumed>) = 1 [pid 5408] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5414 attached [pid 5413] <... prctl resumed>) = 0 [pid 5412] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5411] <... futex resumed>) = 0 [pid 5409] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5408] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 3 [pid 5414] set_robust_list(0x5555939db6a0, 24 [pid 5413] setpgid(0, 0 [pid 5412] memfd_create("syzkaller", 0 [pid 5411] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5408] <... futex resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5414] <... set_robust_list resumed>) = 0 [pid 5413] <... setpgid resumed>) = 0 [pid 5412] <... memfd_create resumed>) = 3 [pid 5409] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5408] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5414 [pid 5414] chdir("./21" [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5414] <... chdir resumed>) = 0 [pid 5413] <... openat resumed>) = 3 [pid 5414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5413] write(3, "1000", 4 [pid 5412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5414] <... prctl resumed>) = 0 [pid 5413] <... write resumed>) = 4 [pid 5414] setpgid(0, 0 [pid 5413] close(3) = 0 [pid 5414] <... setpgid resumed>) = 0 [pid 5413] symlink("/dev/binderfs", "./binderfs" [pid 5414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5413] <... symlink resumed>) = 0 [pid 5414] <... openat resumed>) = 3 [pid 5414] write(3, "1000", 4) = 4 [pid 5414] close(3) = 0 [pid 5414] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5414] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] <... write resumed>) = 524288 [pid 5414] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5413] <... futex resumed>) = 0 [ 92.640577][ T5409] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.656725][ T5409] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.678374][ T5409] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5414] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5413] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5082] <... ioctl resumed>) = 0 [pid 5413] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5414] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5414] <... mmap resumed>) = 0x7f96081b8000 [pid 5413] <... mmap resumed>) = 0x7f96081b8000 [pid 5414] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5413] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5414] <... mprotect resumed>) = 0 [pid 5413] <... mprotect resumed>) = 0 [pid 5414] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5413] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5414] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5413] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5415 attached => {parent_tid=[5415]}, 88) = 5415 [pid 5415] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5413] rt_sigprocmask(SIG_SETMASK, [], [pid 5415] <... rseq resumed>) = 0 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5413] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5416 attached [pid 5414] <... clone3 resumed> => {parent_tid=[5416]}, 88) = 5416 [pid 5412] munmap(0x7f95ffc00000, 138412032 [pid 5416] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5414] rt_sigprocmask(SIG_SETMASK, [], [pid 5412] <... munmap resumed>) = 0 [pid 5416] <... rseq resumed>) = 0 [pid 5414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5416] set_robust_list(0x7f96081d89a0, 24 [pid 5414] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5416] <... set_robust_list resumed>) = 0 [pid 5414] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5416] memfd_create("syzkaller", 0 [pid 5412] <... openat resumed>) = 4 [pid 5416] <... memfd_create resumed>) = 3 [pid 5412] ioctl(4, LOOP_SET_FD, 3 [pid 5416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5415] set_robust_list(0x7f96081d89a0, 24 [pid 5408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] close(3 [pid 5408] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... set_robust_list resumed>) = 0 [pid 5408] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5416] <... mmap resumed>) = 0x7f95ffc00000 [pid 5415] rt_sigprocmask(SIG_SETMASK, [], [pid 5408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5408] <... mmap resumed>) = 0x7f9608197000 [pid 5415] memfd_create("syzkaller", 0 [pid 5408] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5417 attached [pid 5416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5415] <... memfd_create resumed>) = 3 [pid 5408] <... mprotect resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5417 [pid 5417] set_robust_list(0x5555939db6a0, 24 [pid 5408] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5417] <... set_robust_list resumed>) = 0 [pid 5417] chdir("./23" [pid 5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5417] <... chdir resumed>) = 0 [pid 5412] <... ioctl resumed>) = 0 [pid 5408] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5415] <... mmap resumed>) = 0x7f95ffc00000 [pid 5408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5416] <... write resumed>) = 524288 [pid 5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5412] close(3 [pid 5417] <... prctl resumed>) = 0 [pid 5412] <... close resumed>) = 0 [pid 5417] setpgid(0, 0 [pid 5412] close(4 [pid 5408] <... clone3 resumed> => {parent_tid=[5418]}, 88) = 5418 [pid 5417] <... setpgid resumed>) = 0 [pid 5412] <... close resumed>) = 0 [pid 5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 92.699664][ T5412] loop4: detected capacity change from 0 to 1024 [ 92.707600][ T5409] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5412] mkdir("./file1", 0777 [pid 5408] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5418 attached [pid 5417] <... openat resumed>) = 3 [pid 5412] <... mkdir resumed>) = 0 [pid 5408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5418] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5417] write(3, "1000", 4 [pid 5418] <... rseq resumed>) = 0 [pid 5417] <... write resumed>) = 4 [pid 5415] <... write resumed>) = 524288 [pid 5408] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5418] set_robust_list(0x7f96081b79a0, 24 [pid 5408] <... futex resumed>) = 0 [pid 5408] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5418] <... set_robust_list resumed>) = 0 [pid 5412] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5418] rt_sigprocmask(SIG_SETMASK, [], [pid 5415] munmap(0x7f95ffc00000, 138412032 [pid 5417] close(3 [pid 5416] munmap(0x7f95ffc00000, 138412032 [pid 5418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5417] <... close resumed>) = 0 [pid 5416] <... munmap resumed>) = 0 [pid 5415] <... munmap resumed>) = 0 [pid 5418] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5417] symlink("/dev/binderfs", "./binderfs" [pid 5416] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5417] <... symlink resumed>) = 0 [pid 5416] <... openat resumed>) = 4 [pid 5415] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5417] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5416] ioctl(4, LOOP_SET_FD, 3 [pid 5415] <... openat resumed>) = 4 [ 92.745364][ T5409] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.752807][ T5409] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.771916][ T5416] loop3: detected capacity change from 0 to 1024 [pid 5417] <... futex resumed>) = 0 [pid 5415] ioctl(4, LOOP_SET_FD, 3 [pid 5417] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5417] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5417] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5416] <... ioctl resumed>) = 0 [pid 5417] <... mprotect resumed>) = 0 [pid 5416] close(3 [pid 5417] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5416] <... close resumed>) = 0 [pid 5417] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5416] close(4 [pid 5417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5416] <... close resumed>) = 0 [pid 5412] <... mount resumed>) = 0 [pid 5408] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5416] mkdir("./file1", 0777 [pid 5412] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5417] <... clone3 resumed> => {parent_tid=[5419]}, 88) = 5419 [pid 5416] <... mkdir resumed>) = 0 [pid 5412] <... openat resumed>) = 3 [pid 5418] <... open resumed>) = 5 [pid 5416] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5412] chdir("./file1"./strace-static-x86_64: Process 5419 attached [pid 5418] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5418] <... futex resumed>) = 0 [pid 5417] rt_sigprocmask(SIG_SETMASK, [], [pid 5412] <... chdir resumed>) = 0 [pid 5409] <... write resumed>) = 53248 [pid 5419] <... rseq resumed>) = 0 [pid 5418] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5409] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 92.784416][ T29] audit: type=1800 audit(1715660565.432:108): pid=5418 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 92.805873][ T5415] loop2: detected capacity change from 0 to 1024 [pid 5409] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5419] set_robust_list(0x7f96081d89a0, 24 [pid 5417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5417] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... set_robust_list resumed>) = 0 [pid 5412] <... futex resumed>) = 1 [pid 5408] exit_group(0 [pid 5419] rt_sigprocmask(SIG_SETMASK, [], [pid 5418] <... futex resumed>) = ? [pid 5412] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5409] <... futex resumed>) = ? [pid 5408] <... exit_group resumed>) = ? [pid 5417] <... futex resumed>) = 0 [pid 5409] +++ exited with 0 +++ [pid 5417] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5419] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5418] +++ exited with 0 +++ [pid 5408] +++ exited with 0 +++ [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5408, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5419] memfd_create("syzkaller", 0 [pid 5081] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5419] <... memfd_create resumed>) = 3 [pid 5081] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5081] <... openat resumed>) = 3 [pid 5419] <... mmap resumed>) = 0x7f95ffc00000 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./20/binderfs") = 0 [pid 5415] <... ioctl resumed>) = 0 [pid 5415] close(3) = 0 [pid 5415] close(4) = 0 [pid 5415] mkdir("./file1", 0777) = 0 [pid 5415] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5411] <... futex resumed>) = 0 [pid 5081] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5411] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5412] <... futex resumed>) = 0 [pid 5411] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] creat("./file0", 000 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5412] <... creat resumed>) = 4 [pid 5412] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5411] <... futex resumed>) = 0 [pid 5412] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5411] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... mount resumed>) = 0 [pid 5416] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5416] chdir("./file1") = 0 [pid 5416] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5416] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5416] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... futex resumed>) = 0 [pid 5414] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5414] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5416] creat("./file0", 000 [pid 5419] <... write resumed>) = 524288 [pid 5416] <... creat resumed>) = 4 [pid 5416] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5414] <... futex resumed>) = 0 [pid 5414] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5414] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... futex resumed>) = 1 [pid 5416] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5419] munmap(0x7f95ffc00000, 138412032) = 0 [ 92.860289][ T5412] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.892387][ T5412] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.902276][ T5416] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5411] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5415] <... mount resumed>) = 0 [pid 5411] <... mmap resumed>) = 0x7f9608197000 [pid 5419] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5415] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5411] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5081] <... umount2 resumed>) = 0 [pid 5081] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./20/file1", [pid 5411] <... mprotect resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5419] <... openat resumed>) = 4 [pid 5415] <... openat resumed>) = 3 [pid 5081] umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5411] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] chdir("./file1" [pid 5411] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5419] ioctl(4, LOOP_SET_FD, 3 [pid 5081] <... openat resumed>) = 4 [pid 5419] <... ioctl resumed>) = 0 [pid 5415] <... chdir resumed>) = 0 [pid 5414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5411] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5081] newfstatat(4, "", [pid 5419] close(3 [pid 5415] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 5420 attached [pid 5419] <... close resumed>) = 0 [pid 5415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5414] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5411] <... clone3 resumed> => {parent_tid=[5420]}, 88) = 5420 [pid 5081] getdents64(4, [pid 5420] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5419] close(4 [pid 5415] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5411] rt_sigprocmask(SIG_SETMASK, [], [pid 5419] <... close resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5414] <... futex resumed>) = 0 [pid 5414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5420] <... rseq resumed>) = 0 [pid 5419] mkdir("./file1", 0777 [pid 5415] <... futex resumed>) = 1 [pid 5414] <... mmap resumed>) = 0x7f9608197000 [pid 5411] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 92.911746][ T5412] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.920189][ T5416] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.930865][ T5419] loop1: detected capacity change from 0 to 1024 [ 92.931035][ T5412] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.948796][ T5416] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] getdents64(4, [pid 5420] set_robust_list(0x7f96081b79a0, 24 [pid 5419] <... mkdir resumed>) = 0 [pid 5415] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5411] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5420] <... set_robust_list resumed>) = 0 [pid 5419] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5411] <... futex resumed>) = 0 [pid 5081] close(4 [pid 5420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5414] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5413] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5414] <... mprotect resumed>) = 0 [pid 5413] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5420] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5415] <... futex resumed>) = 0 [pid 5414] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5413] <... futex resumed>) = 1 [pid 5081] rmdir("./20/file1" [pid 5415] creat("./file0", 000 [pid 5414] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5413] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5421 attached [pid 5421] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5414] <... clone3 resumed> => {parent_tid=[5421]}, 88) = 5421 [pid 5421] <... rseq resumed>) = 0 [pid 5414] rt_sigprocmask(SIG_SETMASK, [], [pid 5421] set_robust_list(0x7f96081b79a0, 24 [pid 5414] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5421] <... set_robust_list resumed>) = 0 [pid 5414] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5421] rt_sigprocmask(SIG_SETMASK, [], [pid 5414] <... futex resumed>) = 0 [pid 5421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5414] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5415] <... creat resumed>) = 4 [pid 5421] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5081] getdents64(3, [pid 5415] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5419] <... mount resumed>) = 0 [pid 5415] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5411] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5419] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5415] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... close resumed>) = 0 [pid 5419] <... openat resumed>) = 3 [pid 5413] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] rmdir("./20" [pid 5413] <... futex resumed>) = 1 [pid 5413] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] chdir("./file1" [pid 5415] <... futex resumed>) = 0 [pid 5414] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... rmdir resumed>) = 0 [ 92.969871][ T29] audit: type=1800 audit(1715660565.632:109): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 92.991267][ T5416] hfsplus: request for non-existent node 16777216 in B*Tree [ 92.993201][ T29] audit: type=1800 audit(1715660565.632:110): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [pid 5419] <... chdir resumed>) = 0 [pid 5415] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5081] mkdir("./21", 0777 [pid 5421] <... open resumed>) = 5 [pid 5419] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] <... mkdir resumed>) = 0 [pid 5421] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5421] <... futex resumed>) = 0 [pid 5419] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5411] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... openat resumed>) = 3 [pid 5419] <... futex resumed>) = 1 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5419] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5417] <... futex resumed>) = 0 [pid 5413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5421] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5417] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5417] <... futex resumed>) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5417] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5419] <... futex resumed>) = 0 [pid 5419] creat("./file0", 000 [pid 5413] <... mmap resumed>) = 0x7f9608197000 [pid 5413] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5419] <... creat resumed>) = 4 [pid 5413] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5419] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5419] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5417] <... futex resumed>) = 0 [pid 5417] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5417] <... futex resumed>) = 0 [pid 5417] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5422]}, 88) = 5422 ./strace-static-x86_64: Process 5422 attached [pid 5413] rt_sigprocmask(SIG_SETMASK, [], [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5413] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5422] <... rseq resumed>) = 0 [pid 5419] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5422] set_robust_list(0x7f96081b79a0, 24) = 0 [ 93.008372][ T5412] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.034367][ T5416] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.043417][ T5415] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.060390][ T5416] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5422] rt_sigprocmask(SIG_SETMASK, [], [pid 5413] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... ioctl resumed>) = 0 [pid 5422] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5416] <... write resumed>) = 53248 [pid 5416] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5414] exit_group(0 [pid 5421] <... futex resumed>) = ? [pid 5414] <... exit_group resumed>) = ? [pid 5422] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5421] +++ exited with 0 +++ [pid 5416] +++ exited with 0 +++ [pid 5414] +++ exited with 0 +++ [pid 5081] close(3 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5414, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5084] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5417] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./21/binderfs") = 0 [ 93.062996][ T5415] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.070364][ T5419] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.079552][ T5412] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.084374][ T5419] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.090763][ T5415] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5084] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5417] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5417] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5423 attached ) = 0x7f9608197000 [pid 5417] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [ 93.118234][ T29] audit: type=1800 audit(1715660565.772:111): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 93.127064][ T5419] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.153303][ T5415] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5423] set_robust_list(0x5555939db6a0, 24 [pid 5417] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] <... umount2 resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5423 [pid 5417] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5417] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5423] <... set_robust_list resumed>) = 0 [pid 5417] <... clone3 resumed> => {parent_tid=[5424]}, 88) = 5424 [pid 5084] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5417] rt_sigprocmask(SIG_SETMASK, [], [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5424 attached [pid 5417] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] newfstatat(AT_FDCWD, "./21/file1", [pid 5424] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5417] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5412] <... write resumed>) = 53248 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5417] <... futex resumed>) = 0 [pid 5412] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5423] chdir("./21" [pid 5417] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5412] <... futex resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5423] <... chdir resumed>) = 0 [pid 5420] <... open resumed>) = 5 [pid 5412] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5420] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5420] <... futex resumed>) = 0 [pid 5411] exit_group(0 [pid 5423] <... prctl resumed>) = 0 [pid 5084] newfstatat(4, "", [pid 5423] setpgid(0, 0 [pid 5412] <... futex resumed>) = ? [pid 5411] <... exit_group resumed>) = ? [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5423] <... setpgid resumed>) = 0 [pid 5420] +++ exited with 0 +++ [pid 5412] +++ exited with 0 +++ [pid 5411] +++ exited with 0 +++ [pid 5084] getdents64(4, [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5422] <... open resumed>) = 5 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5084] getdents64(4, [pid 5085] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5422] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5424] <... rseq resumed>) = 0 [pid 5084] close(4 [pid 5424] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5422] <... futex resumed>) = 0 [pid 5085] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... close resumed>) = 0 [pid 5424] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5424] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] rmdir("./21/file1" [pid 5424] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5085] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5085] newfstatat(3, "", [pid 5084] getdents64(3, [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] getdents64(3, [pid 5084] close(3 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] <... close resumed>) = 0 [pid 5085] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] rmdir("./21" [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... rmdir resumed>) = 0 [pid 5422] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5084] mkdir("./22", 0777 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5085] unlink("./21/binderfs" [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5085] <... unlink resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5085] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5423] <... openat resumed>) = 3 [pid 5423] write(3, "1000", 4 [pid 5085] <... umount2 resumed>) = 0 [pid 5423] <... write resumed>) = 4 [pid 5417] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5415] <... write resumed>) = 53248 [pid 5085] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5423] close(3 [pid 5415] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] <... close resumed>) = 0 [pid 5415] <... futex resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5424] <... open resumed>) = 5 [pid 5423] symlink("/dev/binderfs", "./binderfs" [pid 5415] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5413] exit_group(0 [pid 5085] newfstatat(AT_FDCWD, "./21/file1", [pid 5424] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] <... symlink resumed>) = 0 [pid 5422] <... futex resumed>) = ? [pid 5413] <... exit_group resumed>) = ? [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5422] +++ exited with 0 +++ [pid 5423] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5415] <... futex resumed>) = ? [pid 5085] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... ioctl resumed>) = 0 [pid 5423] <... futex resumed>) = 0 [ 93.170893][ T5415] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.183480][ T29] audit: type=1800 audit(1715660565.842:112): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 93.202940][ T5415] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.206040][ T5419] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5424] <... futex resumed>) = 0 [pid 5423] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5415] +++ exited with 0 +++ [pid 5413] +++ exited with 0 +++ [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] close(3 [pid 5424] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5085] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... close resumed>) = 0 [pid 5085] <... openat resumed>) = 4 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5423] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5083] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5423] <... mmap resumed>) = 0x7f96081b8000 [pid 5083] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5423] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5083] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5423] <... mprotect resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./21/binderfs", [pid 5423] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5423] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] unlink("./21/binderfs" [pid 5423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5085] newfstatat(4, "", [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... unlink resumed>) = 0 [pid 5083] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5426 attached [pid 5426] set_robust_list(0x5555939db6a0, 24) = 0 ./strace-static-x86_64: Process 5425 attached [pid 5423] <... clone3 resumed> => {parent_tid=[5425]}, 88) = 5425 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5426 [pid 5425] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5423] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] getdents64(4, [pid 5425] <... rseq resumed>) = 0 [pid 5423] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5423] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] set_robust_list(0x7f96081d89a0, 24 [pid 5423] <... futex resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5425] <... set_robust_list resumed>) = 0 [pid 5423] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] getdents64(4, [pid 5425] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5425] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] close(4) = 0 [pid 5426] chdir("./22" [pid 5085] rmdir("./21/file1") = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5425] memfd_create("syzkaller", 0 [pid 5085] <... close resumed>) = 0 [pid 5425] <... memfd_create resumed>) = 3 [pid 5085] rmdir("./21" [pid 5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5425] <... mmap resumed>) = 0x7f95ffc00000 [pid 5083] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] mkdir("./22", 0777 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5083] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] close(4) = 0 [pid 5083] rmdir("./21/file1" [pid 5426] <... chdir resumed>) = 0 [pid 5083] <... rmdir resumed>) = 0 [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5083] getdents64(3, [pid 5426] <... prctl resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5426] setpgid(0, 0 [pid 5083] close(3 [pid 5426] <... setpgid resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] rmdir("./21" [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5426] <... openat resumed>) = 3 [pid 5083] <... rmdir resumed>) = 0 [pid 5426] write(3, "1000", 4 [pid 5083] mkdir("./22", 0777 [pid 5426] <... write resumed>) = 4 [pid 5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5085] <... openat resumed>) = 3 [pid 5083] <... mkdir resumed>) = 0 [pid 5426] close(3 [pid 5425] <... write resumed>) = 524288 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5426] <... close resumed>) = 0 [pid 5426] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5083] <... openat resumed>) = 3 [pid 5426] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5426] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5426] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5426] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5426] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5426] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5425] munmap(0x7f95ffc00000, 138412032 [pid 5419] <... write resumed>) = 53248 ./strace-static-x86_64: Process 5427 attached [pid 5426] <... clone3 resumed> => {parent_tid=[5427]}, 88) = 5427 [pid 5425] <... munmap resumed>) = 0 [pid 5419] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5426] rt_sigprocmask(SIG_SETMASK, [], [pid 5427] <... rseq resumed>) = 0 [pid 5426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5427] set_robust_list(0x7f96081d89a0, 24 [pid 5426] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... set_robust_list resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 5419] <... futex resumed>) = 0 [pid 5427] rt_sigprocmask(SIG_SETMASK, [], [pid 5426] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5425] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5419] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5425] <... openat resumed>) = 4 [pid 5425] ioctl(4, LOOP_SET_FD, 3 [pid 5427] memfd_create("syzkaller", 0 [ 93.252687][ T5419] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.285702][ T5419] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5417] exit_group(0 [pid 5427] <... memfd_create resumed>) = 3 [pid 5424] <... futex resumed>) = ? [pid 5419] <... futex resumed>) = ? [pid 5417] <... exit_group resumed>) = ? [pid 5424] +++ exited with 0 +++ [pid 5427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5419] +++ exited with 0 +++ [pid 5417] +++ exited with 0 +++ [pid 5083] <... ioctl resumed>) = 0 [pid 5427] <... mmap resumed>) = 0x7f95ffc00000 [pid 5425] <... ioctl resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5417, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5425] close(3) = 0 [pid 5425] close(4 [pid 5427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5425] <... close resumed>) = 0 [pid 5085] close(3 [pid 5082] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5428 attached [pid 5085] <... close resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] set_robust_list(0x5555939db6a0, 24 [pid 5425] mkdir("./file1", 0777 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5428 [pid 5082] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5428] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5429 attached [pid 5428] chdir("./22" [pid 5427] <... write resumed>) = 524288 [pid 5425] <... mkdir resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5429] set_robust_list(0x5555939db6a0, 24 [pid 5428] <... chdir resumed>) = 0 [pid 5082] newfstatat(3, "", [pid 5429] <... set_robust_list resumed>) = 0 [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL [ 93.329230][ T5425] loop0: detected capacity change from 0 to 1024 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5429] chdir("./22" [pid 5428] <... prctl resumed>) = 0 [pid 5427] munmap(0x7f95ffc00000, 138412032 [pid 5425] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5429 [pid 5082] getdents64(3, [pid 5429] <... chdir resumed>) = 0 [pid 5428] setpgid(0, 0 [pid 5427] <... munmap resumed>) = 0 [pid 5429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5428] <... setpgid resumed>) = 0 [pid 5427] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5429] <... prctl resumed>) = 0 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5427] <... openat resumed>) = 4 [pid 5425] <... mount resumed>) = 0 [pid 5429] setpgid(0, 0 [pid 5425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5429] <... setpgid resumed>) = 0 [pid 5428] <... openat resumed>) = 3 [pid 5427] ioctl(4, LOOP_SET_FD, 3 [pid 5425] <... openat resumed>) = 3 [pid 5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5425] chdir("./file1") = 0 [pid 5425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5425] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5425] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5429] <... openat resumed>) = 3 [pid 5428] write(3, "1000", 4 [pid 5427] <... ioctl resumed>) = 0 [pid 5423] <... futex resumed>) = 0 [pid 5429] write(3, "1000", 4 [pid 5428] <... write resumed>) = 4 [pid 5427] close(3 [pid 5423] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5429] <... write resumed>) = 4 [pid 5428] close(3 [pid 5427] <... close resumed>) = 0 [pid 5425] <... futex resumed>) = 0 [pid 5423] <... futex resumed>) = 1 [pid 5082] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5429] close(3 [pid 5428] <... close resumed>) = 0 [pid 5427] close(4 [pid 5425] creat("./file0", 000 [pid 5423] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5428] symlink("/dev/binderfs", "./binderfs" [pid 5427] <... close resumed>) = 0 [pid 5428] <... symlink resumed>) = 0 [pid 5427] mkdir("./file1", 0777 [pid 5425] <... creat resumed>) = 4 [pid 5082] unlink("./23/binderfs" [pid 5428] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] <... futex resumed>) = 0 [pid 5427] <... mkdir resumed>) = 0 [pid 5425] <... futex resumed>) = 1 [pid 5423] <... futex resumed>) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5429] <... close resumed>) = 0 [pid 5428] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5427] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5425] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5429] symlink("/dev/binderfs", "./binderfs" [pid 5428] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5423] <... futex resumed>) = 0 [pid 5429] <... symlink resumed>) = 0 [pid 5428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5425] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5423] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5429] <... futex resumed>) = 0 [pid 5428] <... mmap resumed>) = 0x7f96081b8000 [pid 5428] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [ 93.406132][ T5427] loop3: detected capacity change from 0 to 1024 [pid 5429] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5428] <... mprotect resumed>) = 0 [pid 5082] <... umount2 resumed>) = 0 [pid 5429] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5429] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5428] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5429] <... mmap resumed>) = 0x7f96081b8000 [pid 5428] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5429] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5082] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5430 attached [pid 5429] <... mprotect resumed>) = 0 [pid 5428] <... clone3 resumed> => {parent_tid=[5430]}, 88) = 5430 [pid 5082] <... openat resumed>) = 4 [pid 5430] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5429] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5427] <... mount resumed>) = 0 [pid 5428] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] newfstatat(4, "", [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5427] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5428] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5428] <... futex resumed>) = 0 [pid 5082] getdents64(4, [pid 5428] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5430] <... rseq resumed>) = 0 [pid 5429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5430] set_robust_list(0x7f96081d89a0, 24 [pid 5429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5431 attached [pid 5430] <... set_robust_list resumed>) = 0 [pid 5082] getdents64(4, [pid 5431] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5430] rt_sigprocmask(SIG_SETMASK, [], [pid 5429] <... clone3 resumed> => {parent_tid=[5431]}, 88) = 5431 [pid 5427] <... openat resumed>) = 3 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5431] <... rseq resumed>) = 0 [pid 5430] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5429] rt_sigprocmask(SIG_SETMASK, [], [pid 5427] chdir("./file1" [pid 5431] set_robust_list(0x7f96081d89a0, 24 [pid 5430] memfd_create("syzkaller", 0 [pid 5429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5431] <... set_robust_list resumed>) = 0 [pid 5430] <... memfd_create resumed>) = 3 [pid 5429] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] rt_sigprocmask(SIG_SETMASK, [], [pid 5430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5429] <... futex resumed>) = 0 [pid 5431] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5430] <... mmap resumed>) = 0x7f95ffc00000 [pid 5429] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] close(4 [pid 5431] memfd_create("syzkaller", 0 [pid 5427] <... chdir resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./23/file1" [pid 5431] <... memfd_create resumed>) = 3 [pid 5427] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] <... rmdir resumed>) = 0 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5427] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] getdents64(3, [pid 5431] <... mmap resumed>) = 0x7f95ffc00000 [pid 5423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5423] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [ 93.452477][ T5425] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.460387][ T5425] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.482511][ T5425] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5427] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] <... futex resumed>) = 0 [pid 5423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5423] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5423] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5423] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5432]}, 88) = 5432 [pid 5423] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5432 attached NULL, 8) = 0 [pid 5427] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5082] close(3 [pid 5432] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5427] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5423] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... rseq resumed>) = 0 [pid 5426] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5423] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5423] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] creat("./file0", 000 [pid 5082] rmdir("./23" [pid 5432] set_robust_list(0x7f96081b79a0, 24 [pid 5426] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... set_robust_list resumed>) = 0 [pid 5431] <... write resumed>) = 524288 [pid 5427] <... creat resumed>) = 4 [pid 5082] <... rmdir resumed>) = 0 [pid 5432] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] mkdir("./24", 0777 [pid 5427] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5432] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5430] <... write resumed>) = 524288 [pid 5430] munmap(0x7f95ffc00000, 138412032) = 0 [pid 5430] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5427] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5430] <... openat resumed>) = 4 [ 93.501740][ T5425] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.518721][ T5425] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.526461][ T5425] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5430] ioctl(4, LOOP_SET_FD, 3 [pid 5427] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5426] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... mkdir resumed>) = 0 [pid 5432] <... open resumed>) = 5 [pid 5431] munmap(0x7f95ffc00000, 138412032 [pid 5430] <... ioctl resumed>) = 0 [pid 5425] <... write resumed>) = 53248 [pid 5423] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5432] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5432] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] close(3 [pid 5431] <... munmap resumed>) = 0 [pid 5425] <... futex resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5430] <... close resumed>) = 0 [pid 5430] close(4 [pid 5423] exit_group(0 [pid 5432] <... futex resumed>) = ? [pid 5430] <... close resumed>) = 0 [pid 5423] <... exit_group resumed>) = ? [pid 5432] +++ exited with 0 +++ [pid 5426] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... openat resumed>) = 3 [pid 5430] mkdir("./file1", 0777) = 0 [pid 5430] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5431] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5431] <... openat resumed>) = 4 [pid 5425] +++ exited with 0 +++ [pid 5423] +++ exited with 0 +++ [pid 5431] ioctl(4, LOOP_SET_FD, 3 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [ 93.535193][ T29] audit: type=1800 audit(1715660566.202:113): pid=5432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 93.536723][ T5430] loop2: detected capacity change from 0 to 1024 [ 93.560205][ T5427] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.569383][ T5427] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.578617][ T5427] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5081] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] getdents64(3, [pid 5431] <... ioctl resumed>) = 0 [pid 5431] close(3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5431] <... close resumed>) = 0 [pid 5431] close(4 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./21/binderfs") = 0 [pid 5081] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5431] <... close resumed>) = 0 [pid 5431] mkdir("./file1", 0777) = 0 [pid 5426] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5426] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5426] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [ 93.604804][ T5431] loop4: detected capacity change from 0 to 1024 [pid 5430] <... mount resumed>) = 0 [pid 5426] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5426] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5431] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5433 attached [pid 5431] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5430] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5081] <... umount2 resumed>) = 0 [pid 5426] <... clone3 resumed> => {parent_tid=[5433]}, 88) = 5433 [pid 5431] <... openat resumed>) = 3 [pid 5430] <... openat resumed>) = 3 [pid 5426] rt_sigprocmask(SIG_SETMASK, [], [pid 5433] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5431] chdir("./file1" [pid 5430] chdir("./file1" [pid 5426] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5426] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... chdir resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 5430] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5433] <... rseq resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5431] <... chdir resumed>) = 0 [pid 5426] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5433] set_robust_list(0x7f96081b79a0, 24 [pid 5430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5081] newfstatat(AT_FDCWD, "./21/file1", [pid 5431] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5433] <... set_robust_list resumed>) = 0 [pid 5430] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 93.648176][ T5427] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.674223][ T5427] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5430] <... futex resumed>) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] <... ioctl resumed>) = 0 [pid 5428] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] close(3 [pid 5081] umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5431] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5431] <... futex resumed>) = 1 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5434 attached [pid 5433] rt_sigprocmask(SIG_SETMASK, [], [pid 5431] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5430] creat("./file0", 000 [pid 5429] <... futex resumed>) = 0 [pid 5428] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5434] set_robust_list(0x5555939db6a0, 24 [pid 5433] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5429] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5431] <... futex resumed>) = 0 [pid 5429] <... futex resumed>) = 1 [pid 5431] creat("./file0", 000 [pid 5429] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5433] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5430] <... creat resumed>) = 4 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5434 [pid 5081] <... openat resumed>) = 4 [pid 5431] <... creat resumed>) = 4 [pid 5431] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] <... open resumed>) = 5 [pid 5081] newfstatat(4, "", [pid 5431] <... futex resumed>) = 1 [pid 5429] <... futex resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5434] <... set_robust_list resumed>) = 0 [pid 5433] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(4, [pid 5429] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5431] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5429] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] chdir("./24" [pid 5433] <... futex resumed>) = 1 [pid 5434] <... chdir resumed>) = 0 [pid 5433] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5434] setpgid(0, 0 [pid 5430] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... setpgid resumed>) = 0 [pid 5430] <... futex resumed>) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5430] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5428] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] <... openat resumed>) = 3 [pid 5434] write(3, "1000", 4 [pid 5428] <... futex resumed>) = 0 [pid 5434] <... write resumed>) = 4 [pid 5428] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] close(3) = 0 [pid 5434] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5426] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5434] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5434] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5434] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5435]}, 88) = 5435 [pid 5434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5434] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5435 attached ) = 0 [pid 5435] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5434] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5081] getdents64(4, [pid 5435] <... rseq resumed>) = 0 [pid 5435] set_robust_list(0x7f96081d89a0, 24 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] close(4) = 0 [ 93.694525][ T5427] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.707070][ T29] audit: type=1800 audit(1715660566.372:114): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 93.732241][ T5430] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5427] <... write resumed>) = 53248 [pid 5081] rmdir("./21/file1" [pid 5427] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... rmdir resumed>) = 0 [pid 5427] <... futex resumed>) = 0 [pid 5427] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] close(3) = 0 [pid 5426] exit_group(0 [pid 5081] rmdir("./21" [pid 5433] <... futex resumed>) = ? [pid 5427] <... futex resumed>) = ? [pid 5426] <... exit_group resumed>) = ? [pid 5081] <... rmdir resumed>) = 0 [pid 5435] <... set_robust_list resumed>) = 0 [pid 5433] +++ exited with 0 +++ [pid 5427] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 5081] mkdir("./22", 0777 [pid 5435] rt_sigprocmask(SIG_SETMASK, [], [pid 5429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] <... mkdir resumed>) = 0 [pid 5435] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5429] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5435] memfd_create("syzkaller", 0 [pid 5429] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5435] <... memfd_create resumed>) = 3 [pid 5429] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5429] <... mmap resumed>) = 0x7f9608197000 [pid 5428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5426, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5435] <... mmap resumed>) = 0x7f95ffc00000 [pid 5429] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5428] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5429] <... mprotect resumed>) = 0 [pid 5428] <... futex resumed>) = 0 [pid 5429] rt_sigprocmask(SIG_BLOCK, ~[], [ 93.742659][ T5431] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.750345][ T5431] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.758319][ T5431] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.765886][ T5431] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.774461][ T5430] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.776905][ T5431] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.782182][ T5430] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5429] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5428] <... mmap resumed>) = 0x7f9608197000 [pid 5429] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5428] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5429] <... clone3 resumed> => {parent_tid=[5436]}, 88) = 5436 [pid 5428] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5429] rt_sigprocmask(SIG_SETMASK, [], [pid 5428] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5429] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5429] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5084] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5437 attached ./strace-static-x86_64: Process 5436 attached [pid 5429] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5428] <... clone3 resumed> => {parent_tid=[5437]}, 88) = 5437 [pid 5081] <... ioctl resumed>) = 0 [pid 5437] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5436] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5428] rt_sigprocmask(SIG_SETMASK, [], [pid 5437] <... rseq resumed>) = 0 [pid 5436] <... rseq resumed>) = 0 [pid 5428] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5437] set_robust_list(0x7f96081b79a0, 24 [pid 5436] set_robust_list(0x7f96081b79a0, 24 [pid 5428] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5436] <... set_robust_list resumed>) = 0 [pid 5428] <... futex resumed>) = 0 [pid 5437] rt_sigprocmask(SIG_SETMASK, [], [pid 5436] rt_sigprocmask(SIG_SETMASK, [], [pid 5428] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5436] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5437] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5436] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5437] <... open resumed>) = 5 [pid 5430] <... write resumed>) = 53248 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(3 [pid 5437] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... close resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5437] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5438 [ 93.796938][ T5430] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.808635][ T5430] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.816069][ T5430] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.824916][ T29] audit: type=1800 audit(1715660566.492:115): pid=5437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop2" ino=20 res=0 errno=0 ./strace-static-x86_64: Process 5438 attached [pid 5435] <... write resumed>) = 524288 [pid 5430] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5435] munmap(0x7f95ffc00000, 138412032 [pid 5428] exit_group(0) = ? [pid 5437] <... futex resumed>) = ? [pid 5437] +++ exited with 0 +++ [pid 5435] <... munmap resumed>) = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5429] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5435] <... openat resumed>) = 4 [pid 5435] ioctl(4, LOOP_SET_FD, 3 [pid 5438] set_robust_list(0x5555939db6a0, 24 [pid 5430] <... futex resumed>) = ? [pid 5084] <... openat resumed>) = 3 [pid 5438] <... set_robust_list resumed>) = 0 [pid 5438] chdir("./22" [pid 5084] newfstatat(3, "", [pid 5438] <... chdir resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5430] +++ exited with 0 +++ [pid 5428] +++ exited with 0 +++ [pid 5084] getdents64(3, [pid 5438] <... prctl resumed>) = 0 [pid 5438] setpgid(0, 0 [pid 5431] <... write resumed>) = 53248 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5428, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5438] <... setpgid resumed>) = 0 [pid 5084] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] restart_syscall(<... resuming interrupted clone ...> [pid 5431] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5083] <... restart_syscall resumed>) = 0 [pid 5431] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5438] <... openat resumed>) = 3 [pid 5436] <... open resumed>) = 5 [pid 5084] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5438] write(3, "1000", 4 [pid 5436] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5438] <... write resumed>) = 4 [pid 5436] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5438] close(3 [pid 5436] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5084] unlink("./22/binderfs" [pid 5083] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5438] <... close resumed>) = 0 [pid 5429] exit_group(0 [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5438] symlink("/dev/binderfs", "./binderfs" [pid 5436] <... futex resumed>) = ? [pid 5431] <... futex resumed>) = ? [pid 5429] <... exit_group resumed>) = ? [pid 5084] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(3, "", [pid 5438] <... symlink resumed>) = 0 [pid 5436] +++ exited with 0 +++ [pid 5431] +++ exited with 0 +++ [pid 5429] +++ exited with 0 +++ [pid 5438] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5435] <... ioctl resumed>) = 0 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5438] <... futex resumed>) = 0 [pid 5435] close(3 [pid 5438] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5435] <... close resumed>) = 0 [pid 5438] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5435] close(4) = 0 [pid 5435] mkdir("./file1", 0777 [pid 5438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5435] <... mkdir resumed>) = 0 [pid 5085] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] getdents64(3, [pid 5438] <... mmap resumed>) = 0x7f96081b8000 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./22/file1", [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5438] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5085] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5438] <... mprotect resumed>) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5084] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(3, "", [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5435] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5438] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5085] getdents64(3, [pid 5084] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5439 attached [pid 5085] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... openat resumed>) = 4 [pid 5083] unlink("./22/binderfs" [ 93.838996][ T5431] hfsplus: request for non-existent node 16777216 in B*Tree [ 93.852723][ T29] audit: type=1800 audit(1715660566.492:116): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor331" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 93.871211][ T5435] loop1: detected capacity change from 0 to 1024 [pid 5439] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5438] <... clone3 resumed> => {parent_tid=[5439]}, 88) = 5439 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(4, "", [pid 5439] <... rseq resumed>) = 0 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5439] set_robust_list(0x7f96081d89a0, 24 [pid 5438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] getdents64(4, [pid 5083] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5439] <... set_robust_list resumed>) = 0 [pid 5438] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] unlink("./22/binderfs" [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5439] rt_sigprocmask(SIG_SETMASK, [], [pid 5438] <... futex resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5439] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5438] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(4, [pid 5083] <... umount2 resumed>) = 0 [pid 5439] memfd_create("syzkaller", 0 [pid 5435] <... mount resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5439] <... memfd_create resumed>) = 3 [pid 5085] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] close(4 [pid 5439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5435] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... close resumed>) = 0 [pid 5083] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5439] <... mmap resumed>) = 0x7f95ffc00000 [pid 5435] <... openat resumed>) = 3 [pid 5085] newfstatat(AT_FDCWD, "./22/file1", [pid 5439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5435] chdir("./file1" [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5435] <... chdir resumed>) = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5084] rmdir("./22/file1" [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] newfstatat(AT_FDCWD, "./22/file1", [pid 5435] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] <... futex resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5434] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] getdents64(3, [pid 5083] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5435] <... futex resumed>) = 0 [pid 5434] <... futex resumed>) = 1 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] creat("./file0", 000 [pid 5434] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5435] <... creat resumed>) = 4 [pid 5085] <... openat resumed>) = 4 [pid 5084] close(3 [pid 5083] <... openat resumed>) = 4 [pid 5439] <... write resumed>) = 524288 [pid 5435] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] newfstatat(4, "", [pid 5084] <... close resumed>) = 0 [pid 5439] munmap(0x7f95ffc00000, 138412032 [pid 5435] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] newfstatat(4, "", [pid 5084] rmdir("./22" [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5435] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5434] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] getdents64(4, [pid 5435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5434] <... futex resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] getdents64(4, [pid 5084] mkdir("./23", 0777 [pid 5435] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5434] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] close(4 [pid 5084] <... mkdir resumed>) = 0 [pid 5439] <... munmap resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] getdents64(4, [pid 5439] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] rmdir("./22/file1" [pid 5084] <... openat resumed>) = 3 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5439] <... openat resumed>) = 4 [pid 5083] close(4 [pid 5439] ioctl(4, LOOP_SET_FD, 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5083] <... close resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5083] rmdir("./22/file1") = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] close(3) = 0 [pid 5083] rmdir("./22") = 0 [pid 5083] mkdir("./23", 0777) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] getdents64(3, [pid 5439] <... ioctl resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3) = 0 [pid 5085] rmdir("./22" [pid 5439] close(3) = 0 [pid 5439] close(4 [pid 5085] <... rmdir resumed>) = 0 [pid 5439] <... close resumed>) = 0 [pid 5085] mkdir("./23", 0777 [pid 5439] mkdir("./file1", 0777) = 0 [pid 5085] <... mkdir resumed>) = 0 [pid 5439] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5434] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5434] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5085] ioctl(3, LOOP_CLR_FD [ 93.998561][ T5439] loop0: detected capacity change from 0 to 1024 [ 94.000434][ T5435] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.013788][ T5435] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.021500][ T5435] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.035801][ T5435] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5434] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5434] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] close(3) = 0 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5434] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5084] close(3) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5441 [pid 5434] <... clone3 resumed> => {parent_tid=[5440]}, 88) = 5440 ./strace-static-x86_64: Process 5440 attached [pid 5434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5440] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5434] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5441 attached [pid 5441] set_robust_list(0x5555939db6a0, 24 [pid 5440] <... rseq resumed>) = 0 [pid 5439] <... mount resumed>) = 0 [pid 5434] <... futex resumed>) = 0 [pid 5434] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5440] set_robust_list(0x7f96081b79a0, 24 [pid 5441] <... set_robust_list resumed>) = 0 [pid 5440] <... set_robust_list resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5442 ./strace-static-x86_64: Process 5442 attached [pid 5441] chdir("./23" [pid 5442] set_robust_list(0x5555939db6a0, 24 [pid 5441] <... chdir resumed>) = 0 [pid 5441] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5442] <... set_robust_list resumed>) = 0 [pid 5441] <... prctl resumed>) = 0 [pid 5442] chdir("./23" [pid 5441] setpgid(0, 0 [pid 5442] <... chdir resumed>) = 0 [pid 5440] rt_sigprocmask(SIG_SETMASK, [], [pid 5439] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5435] <... write resumed>) = 53248 [pid 5085] <... ioctl resumed>) = 0 [ 94.049244][ T5435] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.059620][ T5435] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5441] <... setpgid resumed>) = 0 [pid 5440] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5439] <... openat resumed>) = 3 [pid 5435] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] close(3 [pid 5440] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5439] chdir("./file1" [pid 5435] <... futex resumed>) = 0 [pid 5442] setpgid(0, 0 [pid 5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5442] <... setpgid resumed>) = 0 [pid 5441] <... openat resumed>) = 3 [pid 5440] <... open resumed>) = 5 [pid 5439] <... chdir resumed>) = 0 [pid 5435] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5439] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... close resumed>) = 0 [pid 5439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5442] <... openat resumed>) = 3 [pid 5441] write(3, "1000", 4 [pid 5439] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... write resumed>) = 4 [pid 5441] close(3) = 0 [pid 5441] symlink("/dev/binderfs", "./binderfs" [pid 5442] write(3, "1000", 4 [pid 5441] <... symlink resumed>) = 0 [pid 5439] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5439] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5443 ./strace-static-x86_64: Process 5443 attached [pid 5443] set_robust_list(0x5555939db6a0, 24 [pid 5442] <... write resumed>) = 4 [pid 5440] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5438] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... set_robust_list resumed>) = 0 [pid 5441] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5440] <... futex resumed>) = 1 [pid 5439] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = 1 [pid 5434] <... futex resumed>) = 0 [pid 5441] <... futex resumed>) = 0 [pid 5440] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5439] creat("./file0", 000 [pid 5438] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5434] exit_group(0 [pid 5443] chdir("./23" [pid 5441] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5442] close(3 [pid 5441] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5440] <... futex resumed>) = ? [pid 5439] <... creat resumed>) = 4 [pid 5435] <... futex resumed>) = ? [pid 5434] <... exit_group resumed>) = ? [pid 5443] <... chdir resumed>) = 0 [pid 5440] +++ exited with 0 +++ [pid 5442] <... close resumed>) = 0 [pid 5441] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5435] +++ exited with 0 +++ [pid 5442] symlink("/dev/binderfs", "./binderfs" [pid 5441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5442] <... symlink resumed>) = 0 [pid 5441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5442] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... mmap resumed>) = 0x7f96081b8000 [pid 5439] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5434] +++ exited with 0 +++ [pid 5443] <... prctl resumed>) = 0 [pid 5442] <... futex resumed>) = 0 [pid 5441] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5439] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5434, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} --- [pid 5443] setpgid(0, 0 [pid 5442] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5441] <... mprotect resumed>) = 0 [pid 5439] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5438] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] <... setpgid resumed>) = 0 [pid 5442] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5438] <... futex resumed>) = 0 [pid 5442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5438] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5444 attached [pid 5443] <... openat resumed>) = 3 [pid 5442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5439] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5444] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5443] write(3, "1000", 4 [pid 5442] <... mmap resumed>) = 0x7f96081b8000 [pid 5441] <... clone3 resumed> => {parent_tid=[5444]}, 88) = 5444 [pid 5444] <... rseq resumed>) = 0 [pid 5442] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5441] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5444] set_robust_list(0x7f96081d89a0, 24 [pid 5442] <... mprotect resumed>) = 0 [pid 5441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5444] <... set_robust_list resumed>) = 0 [pid 5442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5441] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5444] rt_sigprocmask(SIG_SETMASK, [], [pid 5442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5441] <... futex resumed>) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5444] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5441] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] newfstatat(3, "", ./strace-static-x86_64: Process 5445 attached [pid 5444] memfd_create("syzkaller", 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5445] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5444] <... memfd_create resumed>) = 3 [pid 5443] <... write resumed>) = 4 [pid 5442] <... clone3 resumed> => {parent_tid=[5445]}, 88) = 5445 [pid 5082] getdents64(3, [pid 5445] <... rseq resumed>) = 0 [pid 5444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5445] set_robust_list(0x7f96081d89a0, 24 [pid 5444] <... mmap resumed>) = 0x7f95ffc00000 [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5445] <... set_robust_list resumed>) = 0 [pid 5443] close(3 [pid 5442] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5445] rt_sigprocmask(SIG_SETMASK, [], [pid 5442] <... futex resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5443] <... close resumed>) = 0 [pid 5442] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5445] memfd_create("syzkaller", 0 [pid 5082] unlink("./24/binderfs" [pid 5445] <... memfd_create resumed>) = 3 [pid 5444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5082] <... unlink resumed>) = 0 [pid 5445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5443] symlink("/dev/binderfs", "./binderfs" [pid 5082] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5445] <... mmap resumed>) = 0x7f95ffc00000 [pid 5443] <... symlink resumed>) = 0 [ 94.152328][ T5439] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.185033][ T5439] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5443] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... write resumed>) = 524288 [pid 5443] <... futex resumed>) = 0 [pid 5438] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5443] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5438] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5443] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5443] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5438] <... mmap resumed>) = 0x7f9608197000 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5438] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5443] <... mmap resumed>) = 0x7f96081b8000 [pid 5438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5443] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5443] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 5446 attached [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5438] <... clone3 resumed> => {parent_tid=[5446]}, 88) = 5446 [pid 5082] <... umount2 resumed>) = 0 [pid 5446] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5445] <... write resumed>) = 524288 [pid 5444] munmap(0x7f95ffc00000, 138412032 [pid 5443] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5438] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5446] <... rseq resumed>) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5438] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5444] <... munmap resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./24/file1", [pid 5445] munmap(0x7f95ffc00000, 138412032 [pid 5444] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5445] <... munmap resumed>) = 0 [pid 5444] <... openat resumed>) = 4 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5444] ioctl(4, LOOP_SET_FD, 3 [pid 5082] newfstatat(4, "", [pid 5446] set_robust_list(0x7f96081b79a0, 24 [pid 5444] <... ioctl resumed>) = 0 [pid 5438] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5447 attached [pid 5445] <... openat resumed>) = 4 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5447] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5445] ioctl(4, LOOP_SET_FD, 3 [pid 5082] getdents64(4, [pid 5447] <... rseq resumed>) = 0 [ 94.198910][ T5439] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.206934][ T5439] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.226959][ T5439] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.234180][ T5444] loop2: detected capacity change from 0 to 1024 [ 94.236892][ T5439] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5447] set_robust_list(0x7f96081d89a0, 24 [pid 5446] <... set_robust_list resumed>) = 0 [pid 5444] close(3 [pid 5443] <... clone3 resumed> => {parent_tid=[5447]}, 88) = 5447 [pid 5438] <... futex resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5446] rt_sigprocmask(SIG_SETMASK, [], [pid 5444] <... close resumed>) = 0 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5438] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5446] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5444] close(4 [pid 5446] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5447] <... set_robust_list resumed>) = 0 [pid 5444] <... close resumed>) = 0 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] getdents64(4, [pid 5447] rt_sigprocmask(SIG_SETMASK, [], [pid 5446] <... open resumed>) = 5 [pid 5444] mkdir("./file1", 0777 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5447] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5446] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] <... mkdir resumed>) = 0 [pid 5443] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] close(4 [pid 5446] <... futex resumed>) = 1 [pid 5438] <... futex resumed>) = 0 [pid 5447] memfd_create("syzkaller", 0 [pid 5446] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5444] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5443] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5447] <... memfd_create resumed>) = 3 [pid 5443] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] rmdir("./24/file1" [pid 5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5082] <... rmdir resumed>) = 0 [pid 5439] <... write resumed>) = 53248 [pid 5439] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5082] getdents64(3, [pid 5438] exit_group(0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5446] <... futex resumed>) = ? [pid 5438] <... exit_group resumed>) = ? [pid 5446] +++ exited with 0 +++ [pid 5082] close(3) = 0 [pid 5082] rmdir("./24") = 0 [ 94.244436][ T5445] loop3: detected capacity change from 0 to 1024 [pid 5082] mkdir("./25", 0777 [pid 5445] <... ioctl resumed>) = 0 [pid 5444] <... mount resumed>) = 0 [pid 5439] +++ exited with 0 +++ [pid 5438] +++ exited with 0 +++ [pid 5082] <... mkdir resumed>) = 0 [pid 5445] close(3 [pid 5444] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5445] <... close resumed>) = 0 [pid 5444] <... openat resumed>) = 3 [pid 5082] <... openat resumed>) = 3 [pid 5445] close(4 [pid 5444] chdir("./file1" [pid 5445] <... close resumed>) = 0 [pid 5444] <... chdir resumed>) = 0 [pid 5445] mkdir("./file1", 0777 [pid 5447] <... write resumed>) = 524288 [pid 5444] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5081] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5445] <... mkdir resumed>) = 0 [pid 5444] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5447] munmap(0x7f95ffc00000, 138412032 [pid 5444] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5445] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5444] <... futex resumed>) = 1 [pid 5441] <... futex resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5447] <... munmap resumed>) = 0 [pid 5444] creat("./file0", 000 [pid 5441] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5441] <... futex resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5447] <... openat resumed>) = 4 [pid 5441] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] newfstatat(3, "", [pid 5447] ioctl(4, LOOP_SET_FD, 3 [pid 5444] <... creat resumed>) = 4 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5444] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5441] <... futex resumed>) = 0 [pid 5081] getdents64(3, [pid 5444] <... futex resumed>) = 1 [pid 5441] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5441] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5447] <... ioctl resumed>) = 0 [pid 5441] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5447] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5447] <... close resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./22/binderfs", [pid 5447] close(4) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5447] mkdir("./file1", 0777 [pid 5081] unlink("./22/binderfs" [pid 5447] <... mkdir resumed>) = 0 [pid 5081] <... unlink resumed>) = 0 [pid 5447] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5081] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5445] <... mount resumed>) = 0 [pid 5447] <... mount resumed>) = 0 [pid 5445] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5445] chdir("./file1") = 0 [pid 5445] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5447] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5445] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5447] chdir("./file1" [pid 5445] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5445] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] <... futex resumed>) = 0 [pid 5442] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 0 [pid 5442] <... futex resumed>) = 1 [pid 5447] <... chdir resumed>) = 0 [pid 5445] creat("./file0", 000 [pid 5442] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5447] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5445] <... creat resumed>) = 4 [pid 5447] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5445] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] <... futex resumed>) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = 1 [pid 5445] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] <... futex resumed>) = 0 [pid 5442] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5447] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5443] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5443] <... futex resumed>) = 0 [pid 5447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5447] creat("./file0", 000 [pid 5443] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 94.319532][ T5447] loop4: detected capacity change from 0 to 1024 [ 94.326185][ T5444] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.341479][ T5444] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5442] <... futex resumed>) = 0 [pid 5447] <... creat resumed>) = 4 [pid 5442] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5441] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] <... ioctl resumed>) = 0 [pid 5081] <... umount2 resumed>) = 0 [pid 5441] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] close(3 [pid 5443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5443] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5447] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5441] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5081] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5447] <... futex resumed>) = 0 [pid 5443] <... mmap resumed>) = 0x7f9608197000 [pid 5441] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5447] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5443] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5441] <... mmap resumed>) = 0x7f9608197000 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5081] newfstatat(AT_FDCWD, "./22/file1", [pid 5443] <... mprotect resumed>) = 0 [pid 5441] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5448 attached [pid 5443] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5441] <... mprotect resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5448] set_robust_list(0x5555939db6a0, 24 [pid 5443] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5441] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5448 [pid 5448] <... set_robust_list resumed>) = 0 [pid 5443] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5441] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5448] chdir("./25" [ 94.364369][ T5445] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.373451][ T5444] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.383333][ T5445] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.391001][ T5445] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.393015][ T5444] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5441] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0}./strace-static-x86_64: Process 5450 attached ./strace-static-x86_64: Process 5449 attached [pid 5448] <... chdir resumed>) = 0 [pid 5443] <... clone3 resumed> => {parent_tid=[5449]}, 88) = 5449 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5441] <... clone3 resumed> => {parent_tid=[5450]}, 88) = 5450 [pid 5081] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5448] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5441] rt_sigprocmask(SIG_SETMASK, [], [pid 5449] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5448] <... prctl resumed>) = 0 [pid 5443] rt_sigprocmask(SIG_SETMASK, [], [pid 5441] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] <... openat resumed>) = 4 [pid 5449] <... rseq resumed>) = 0 [pid 5443] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5449] set_robust_list(0x7f96081b79a0, 24 [pid 5443] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... set_robust_list resumed>) = 0 [pid 5443] <... futex resumed>) = 0 [pid 5449] rt_sigprocmask(SIG_SETMASK, [], [pid 5443] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5449] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5441] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] newfstatat(4, "", [pid 5449] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5448] setpgid(0, 0 [pid 5450] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5448] <... setpgid resumed>) = 0 [pid 5441] <... futex resumed>) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5441] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5450] <... rseq resumed>) = 0 [pid 5448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5442] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5081] getdents64(4, [pid 5450] set_robust_list(0x7f96081b79a0, 24 [pid 5442] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5450] <... set_robust_list resumed>) = 0 [pid 5442] <... mmap resumed>) = 0x7f9608197000 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5450] rt_sigprocmask(SIG_SETMASK, [], [pid 5448] <... openat resumed>) = 3 [pid 5442] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5081] getdents64(4, [pid 5450] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5448] write(3, "1000", 4 [pid 5442] <... mprotect resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5450] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5442] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5448] <... write resumed>) = 4 [pid 5442] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] close(4 [pid 5448] close(3) = 0 [pid 5081] <... close resumed>) = 0 [pid 5450] <... open resumed>) = 5 [pid 5448] symlink("/dev/binderfs", "./binderfs" [pid 5442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5081] rmdir("./22/file1" [pid 5450] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... symlink resumed>) = 0 [pid 5442] <... clone3 resumed> => {parent_tid=[5451]}, 88) = 5451 [pid 5442] rt_sigprocmask(SIG_SETMASK, [], [pid 5450] <... futex resumed>) = 1 [pid 5442] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5441] <... futex resumed>) = 0 [pid 5081] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5451 attached [pid 5450] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5442] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, [pid 5451] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5448] <... futex resumed>) = 0 [pid 5444] <... write resumed>) = 53248 [pid 5442] <... futex resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5451] <... rseq resumed>) = 0 [pid 5448] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5444] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [ 94.435611][ T5445] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.445739][ T5444] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.458503][ T5449] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.466444][ T5444] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.478263][ T5445] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5442] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] close(3 [pid 5451] set_robust_list(0x7f96081b79a0, 24 [pid 5448] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5444] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5451] <... set_robust_list resumed>) = 0 [pid 5443] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] rt_sigprocmask(SIG_SETMASK, [], [pid 5447] <... futex resumed>) = 0 [pid 5443] <... futex resumed>) = 1 [pid 5447] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5443] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5451] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5451] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5444] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5441] exit_group(0 [pid 5081] <... close resumed>) = 0 [pid 5451] <... open resumed>) = 5 [pid 5450] <... futex resumed>) = ? [pid 5448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5445] <... write resumed>) = 53248 [pid 5444] <... futex resumed>) = ? [pid 5441] <... exit_group resumed>) = ? [pid 5451] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5450] +++ exited with 0 +++ [pid 5448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5445] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5444] +++ exited with 0 +++ [pid 5441] +++ exited with 0 +++ [pid 5081] rmdir("./22" [pid 5451] <... futex resumed>) = 1 [pid 5442] <... futex resumed>) = 0 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5451] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5442] exit_group(0 [pid 5451] <... futex resumed>) = ? [pid 5448] <... mmap resumed>) = 0x7f96081b8000 [pid 5447] <... open resumed>) = 5 [pid 5445] <... futex resumed>) = ? [pid 5442] <... exit_group resumed>) = ? [pid 5081] <... rmdir resumed>) = 0 [pid 5451] +++ exited with 0 +++ [pid 5448] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5447] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5445] +++ exited with 0 +++ [pid 5442] +++ exited with 0 +++ [pid 5083] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5447] <... futex resumed>) = 1 [pid 5443] <... futex resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5447] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5448] <... mprotect resumed>) = 0 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5442, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 94.495672][ T5449] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.496632][ T5445] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.513105][ T5449] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.522686][ T5449] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.535507][ T5449] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5081] mkdir("./23", 0777 [pid 5083] unlink("./23/binderfs") = 0 [pid 5083] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5449] <... write resumed>) = 53248 [pid 5448] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] <... umount2 resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5449] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5443] exit_group(0 [pid 5083] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5452 attached [pid 5449] <... futex resumed>) = ? [pid 5447] <... futex resumed>) = ? [pid 5443] <... exit_group resumed>) = ? [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... openat resumed>) = 3 [pid 5452] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5449] +++ exited with 0 +++ [pid 5448] <... clone3 resumed> => {parent_tid=[5452]}, 88) = 5452 [pid 5447] +++ exited with 0 +++ [pid 5083] newfstatat(AT_FDCWD, "./23/file1", [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5452] <... rseq resumed>) = 0 [pid 5448] rt_sigprocmask(SIG_SETMASK, [], [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5452] set_robust_list(0x7f96081d89a0, 24 [pid 5448] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5443] +++ exited with 0 +++ [pid 5084] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5452] <... set_robust_list resumed>) = 0 [pid 5448] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5443, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5452] rt_sigprocmask(SIG_SETMASK, [], [pid 5448] <... futex resumed>) = 0 [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5452] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5448] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5085] <... restart_syscall resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5452] memfd_create("syzkaller", 0 [pid 5084] <... openat resumed>) = 3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(3, "", [pid 5085] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... openat resumed>) = 3 [pid 5085] newfstatat(3, "", [pid 5084] getdents64(3, [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [ 94.543347][ T5449] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5085] getdents64(3, [pid 5083] <... openat resumed>) = 4 [pid 5452] <... memfd_create resumed>) = 3 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(4, "", [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5085] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5083] getdents64(4, [pid 5085] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./23/binderfs") = 0 [pid 5085] unlink("./23/binderfs") = 0 [pid 5452] <... mmap resumed>) = 0x7f95ffc00000 [pid 5084] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5085] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] close(4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./23/file1", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5452] <... write resumed>) = 524288 [pid 5084] newfstatat(AT_FDCWD, "./23/file1", [pid 5083] <... close resumed>) = 0 [pid 5081] <... ioctl resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] rmdir("./23/file1" [pid 5452] munmap(0x7f95ffc00000, 138412032 [pid 5085] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] close(3 [pid 5085] <... openat resumed>) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5085] getdents64(4, [pid 5083] <... rmdir resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5452] <... munmap resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(3, [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] close(4 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... close resumed>) = 0 [pid 5085] rmdir("./23/file1") = 0 [pid 5085] getdents64(3, ./strace-static-x86_64: Process 5453 attached [pid 5452] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... openat resumed>) = 4 [pid 5083] close(3 [pid 5453] set_robust_list(0x5555939db6a0, 24 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] newfstatat(4, "", [pid 5083] <... close resumed>) = 0 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5453 [pid 5453] <... set_robust_list resumed>) = 0 [pid 5452] <... openat resumed>) = 4 [pid 5085] close(3 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5453] chdir("./23" [pid 5083] rmdir("./23" [pid 5084] getdents64(4, [pid 5453] <... chdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5453] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5085] rmdir("./23" [pid 5453] <... prctl resumed>) = 0 [pid 5452] ioctl(4, LOOP_SET_FD, 3 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... rmdir resumed>) = 0 [pid 5453] setpgid(0, 0 [pid 5452] <... ioctl resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] getdents64(4, [pid 5083] mkdir("./24", 0777 [pid 5453] <... setpgid resumed>) = 0 [pid 5085] mkdir("./24", 0777 [pid 5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5453] <... openat resumed>) = 3 [pid 5085] <... mkdir resumed>) = 0 [pid 5084] close(4 [pid 5083] <... mkdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5453] write(3, "1000", 4 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] rmdir("./23/file1" [pid 5453] <... write resumed>) = 4 [pid 5085] <... openat resumed>) = 3 [pid 5084] <... rmdir resumed>) = 0 [pid 5453] close(3 [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5453] <... close resumed>) = 0 [pid 5084] getdents64(3, [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5453] symlink("/dev/binderfs", "./binderfs" [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5453] <... symlink resumed>) = 0 [pid 5084] close(3 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5453] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5453] <... futex resumed>) = 0 [pid 5453] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5084] rmdir("./23" [pid 5453] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5452] close(3 [pid 5453] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5084] <... rmdir resumed>) = 0 [pid 5453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5452] <... close resumed>) = 0 [pid 5453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5084] mkdir("./24", 0777 [pid 5453] <... mmap resumed>) = 0x7f96081b8000 [pid 5452] close(4 [pid 5453] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5452] <... close resumed>) = 0 [pid 5453] <... mprotect resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5453] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5452] mkdir("./file1", 0777 [pid 5453] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5452] <... mkdir resumed>) = 0 [pid 5453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5454 attached [pid 5454] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5453] <... clone3 resumed> => {parent_tid=[5454]}, 88) = 5454 [pid 5084] <... openat resumed>) = 3 [pid 5454] <... rseq resumed>) = 0 [pid 5453] rt_sigprocmask(SIG_SETMASK, [], [pid 5452] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5454] set_robust_list(0x7f96081d89a0, 24 [pid 5453] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5454] <... set_robust_list resumed>) = 0 [pid 5454] rt_sigprocmask(SIG_SETMASK, [], [pid 5453] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5454] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5453] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5454] memfd_create("syzkaller", 0) = 3 [pid 5454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5452] <... mount resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5452] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5083] close(3) = 0 [ 94.655719][ T5452] loop1: detected capacity change from 0 to 1024 [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5454] <... write resumed>) = 524288 [pid 5452] <... openat resumed>) = 3 [pid 5085] close(3./strace-static-x86_64: Process 5455 attached [pid 5455] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5455] chdir("./24") = 0 [pid 5454] munmap(0x7f95ffc00000, 138412032 [pid 5452] chdir("./file1" [pid 5085] <... close resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5455 [pid 5455] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5452] <... chdir resumed>) = 0 [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5455] <... prctl resumed>) = 0 [pid 5455] setpgid(0, 0) = 0 [pid 5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5456 attached [pid 5454] <... munmap resumed>) = 0 [pid 5452] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] <... ioctl resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5456 [pid 5456] set_robust_list(0x5555939db6a0, 24 [pid 5455] <... openat resumed>) = 3 [pid 5454] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5452] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] close(3 [pid 5455] write(3, "1000", 4 [pid 5454] <... openat resumed>) = 4 [pid 5456] <... set_robust_list resumed>) = 0 [pid 5455] <... write resumed>) = 4 [pid 5452] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5455] close(3 [pid 5452] <... futex resumed>) = 1 [pid 5448] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5455] <... close resumed>) = 0 [pid 5448] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] chdir("./24" [pid 5455] symlink("/dev/binderfs", "./binderfs" [pid 5452] creat("./file0", 000 [pid 5448] <... futex resumed>) = 0 [pid 5456] <... chdir resumed>) = 0 [pid 5455] <... symlink resumed>) = 0 [pid 5454] ioctl(4, LOOP_SET_FD, 3 [pid 5448] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5456] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5455] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... creat resumed>) = 4 [pid 5455] <... futex resumed>) = 0 [pid 5455] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5455] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5455] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5455] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5458]}, 88) = 5458 [pid 5455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5455] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5458 attached [pid 5458] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5455] <... futex resumed>) = 0 [pid 5458] set_robust_list(0x7f96081d89a0, 24 [pid 5455] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5458] <... set_robust_list resumed>) = 0 [pid 5458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5458] memfd_create("syzkaller", 0 [pid 5456] <... prctl resumed>) = 0 [pid 5458] <... memfd_create resumed>) = 3 [pid 5458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5457 attached [pid 5456] setpgid(0, 0 [pid 5454] <... ioctl resumed>) = 0 [pid 5452] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] <... setpgid resumed>) = 0 [pid 5457] set_robust_list(0x5555939db6a0, 24 [pid 5458] <... mmap resumed>) = 0x7f95ffc00000 [pid 5454] close(3 [pid 5452] <... futex resumed>) = 1 [pid 5448] <... futex resumed>) = 0 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5457 [pid 5452] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5448] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... futex resumed>) = 0 [pid 5448] <... futex resumed>) = 1 [pid 5456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5452] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5448] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] <... set_robust_list resumed>) = 0 [pid 5458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5456] <... openat resumed>) = 3 [pid 5454] <... close resumed>) = 0 [pid 5457] chdir("./24" [pid 5454] close(4 [pid 5457] <... chdir resumed>) = 0 [pid 5454] <... close resumed>) = 0 [pid 5457] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5454] mkdir("./file1", 0777 [pid 5457] <... prctl resumed>) = 0 [pid 5454] <... mkdir resumed>) = 0 [pid 5457] setpgid(0, 0) = 0 [pid 5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5454] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5457] write(3, "1000", 4) = 4 [pid 5458] <... write resumed>) = 524288 [pid 5457] close(3) = 0 [pid 5457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5457] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] write(3, "1000", 4 [pid 5457] <... futex resumed>) = 0 [pid 5457] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5456] <... write resumed>) = 4 [pid 5456] close(3) = 0 [pid 5457] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5456] symlink("/dev/binderfs", "./binderfs" [pid 5457] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5458] munmap(0x7f95ffc00000, 138412032 [pid 5457] <... mmap resumed>) = 0x7f96081b8000 [pid 5458] <... munmap resumed>) = 0 [pid 5456] <... symlink resumed>) = 0 [pid 5457] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [ 94.802961][ T5454] loop0: detected capacity change from 0 to 1024 [ 94.837906][ T5452] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5456] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5456] <... futex resumed>) = 0 [pid 5457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5459 attached [pid 5458] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5459] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5457] <... clone3 resumed> => {parent_tid=[5459]}, 88) = 5459 [pid 5458] <... openat resumed>) = 4 [pid 5459] <... rseq resumed>) = 0 [pid 5457] rt_sigprocmask(SIG_SETMASK, [], [pid 5458] ioctl(4, LOOP_SET_FD, 3 [pid 5459] set_robust_list(0x7f96081d89a0, 24 [pid 5457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5456] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5457] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... set_robust_list resumed>) = 0 [pid 5457] <... futex resumed>) = 0 [pid 5459] rt_sigprocmask(SIG_SETMASK, [], [pid 5457] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5459] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5459] memfd_create("syzkaller", 0) = 3 [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5448] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5459] <... mmap resumed>) = 0x7f95ffc00000 [pid 5448] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5448] <... futex resumed>) = 0 [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5454] <... mount resumed>) = 0 [pid 5454] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5448] <... mmap resumed>) = 0x7f9608197000 [pid 5456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5454] <... openat resumed>) = 3 [pid 5448] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5454] chdir("./file1") = 0 [pid 5448] <... mprotect resumed>) = 0 [pid 5456] <... mmap resumed>) = 0x7f96081b8000 [pid 5456] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5454] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5456] <... mprotect resumed>) = 0 [pid 5454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5448] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5454] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5456] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5454] <... futex resumed>) = 1 [pid 5453] <... futex resumed>) = 0 [pid 5448] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5456] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5454] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5453] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5453] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5460 attached [pid 5454] creat("./file0", 000 [pid 5453] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5460] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5456] <... clone3 resumed> => {parent_tid=[5461]}, 88) = 5461 [pid 5454] <... creat resumed>) = 4 ./strace-static-x86_64: Process 5461 attached [pid 5460] <... rseq resumed>) = 0 [pid 5458] <... ioctl resumed>) = 0 [pid 5456] rt_sigprocmask(SIG_SETMASK, [], [pid 5454] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5460] set_robust_list(0x7f96081b79a0, 24 [pid 5458] close(3 [pid 5456] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5454] <... futex resumed>) = 0 [pid 5453] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... close resumed>) = 0 [pid 5456] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5454] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5453] <... futex resumed>) = 0 [ 94.864837][ T5452] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.867580][ T5458] loop2: detected capacity change from 0 to 1024 [ 94.876646][ T5452] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.888215][ T5452] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.906658][ T5452] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5461] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5460] <... set_robust_list resumed>) = 0 [pid 5459] <... write resumed>) = 524288 [pid 5458] close(4 [pid 5456] <... futex resumed>) = 0 [pid 5453] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... write resumed>) = 53248 [pid 5448] <... clone3 resumed> => {parent_tid=[5460]}, 88) = 5460 [pid 5460] rt_sigprocmask(SIG_SETMASK, [], [pid 5461] <... rseq resumed>) = 0 [pid 5461] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5458] <... close resumed>) = 0 [pid 5461] rt_sigprocmask(SIG_SETMASK, [], [pid 5458] mkdir("./file1", 0777 [pid 5461] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5458] <... mkdir resumed>) = 0 [pid 5461] memfd_create("syzkaller", 0) = 3 [pid 5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5456] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5458] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5460] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5452] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5452] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5448] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5460] <... futex resumed>) = 0 [pid 5459] munmap(0x7f95ffc00000, 138412032 [pid 5448] <... futex resumed>) = 1 [pid 5460] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5459] <... munmap resumed>) = 0 [pid 5448] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5459] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 94.918084][ T5452] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.923758][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5460] <... open resumed>) = 5 [pid 5459] ioctl(4, LOOP_SET_FD, 3 [pid 5458] <... mount resumed>) = 0 [pid 5460] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5448] <... futex resumed>) = 0 [pid 5460] <... futex resumed>) = 1 [pid 5460] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5448] exit_group(0 [pid 5458] <... openat resumed>) = 3 [pid 5452] <... futex resumed>) = ? [pid 5460] <... futex resumed>) = ? [pid 5448] <... exit_group resumed>) = ? [pid 5452] +++ exited with 0 +++ [pid 5460] +++ exited with 0 +++ [pid 5458] chdir("./file1" [pid 5448] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5448, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5458] <... chdir resumed>) = 0 [pid 5458] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5082] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5458] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5461] <... write resumed>) = 524288 [pid 5458] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] munmap(0x7f95ffc00000, 138412032 [pid 5458] <... futex resumed>) = 1 [pid 5461] <... munmap resumed>) = 0 [pid 5458] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5459] <... ioctl resumed>) = 0 [pid 5455] <... futex resumed>) = 0 [pid 5459] close(3 [pid 5455] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... close resumed>) = 0 [pid 5458] <... futex resumed>) = 0 [pid 5455] <... futex resumed>) = 1 [pid 5459] close(4 [pid 5458] creat("./file0", 000 [pid 5455] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5453] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5458] <... creat resumed>) = 4 [pid 5453] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5458] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] <... mmap resumed>) = 0x7f9608197000 [pid 5459] <... close resumed>) = 0 [pid 5458] <... futex resumed>) = 1 [pid 5455] <... futex resumed>) = 0 [pid 5453] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... openat resumed>) = 3 [pid 5461] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5459] mkdir("./file1", 0777 [pid 5458] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5455] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5453] <... mprotect resumed>) = 0 [pid 5461] <... openat resumed>) = 4 [pid 5459] <... mkdir resumed>) = 0 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, [pid 5461] ioctl(4, LOOP_SET_FD, 3 [pid 5459] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5453] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5453] <... rt_sigprocmask resumed>[], 8) = 0 [ 94.962331][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 94.974108][ T5459] loop3: detected capacity change from 0 to 1024 [ 94.992636][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.004597][ T5461] loop4: detected capacity change from 0 to 1024 [pid 5461] <... ioctl resumed>) = 0 [pid 5455] <... futex resumed>) = 0 [pid 5453] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5455] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 5462 attached [pid 5453] <... clone3 resumed> => {parent_tid=[5462]}, 88) = 5462 [pid 5082] unlink("./25/binderfs" [pid 5453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] <... unlink resumed>) = 0 [pid 5462] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5453] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5453] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] close(3 [pid 5462] <... rseq resumed>) = 0 [pid 5461] <... close resumed>) = 0 [pid 5082] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5461] close(4 [pid 5462] set_robust_list(0x7f96081b79a0, 24 [pid 5461] <... close resumed>) = 0 [pid 5462] <... set_robust_list resumed>) = 0 [pid 5461] mkdir("./file1", 0777 [pid 5462] rt_sigprocmask(SIG_SETMASK, [], [pid 5461] <... mkdir resumed>) = 0 [pid 5459] <... mount resumed>) = 0 [pid 5462] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5461] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5462] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000) = 5 [pid 5462] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5453] <... futex resumed>) = 0 [pid 5462] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5461] <... mount resumed>) = 0 [pid 5459] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5461] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5461] chdir("./file1") = 0 [pid 5461] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5461] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5456] <... futex resumed>) = 0 [pid 5461] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5459] <... openat resumed>) = 3 [pid 5456] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5456] <... futex resumed>) = 0 [pid 5461] creat("./file0", 000 [pid 5456] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... creat resumed>) = 4 [pid 5459] chdir("./file1" [pid 5461] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5459] <... chdir resumed>) = 0 [pid 5461] <... futex resumed>) = 1 [ 95.012638][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.017310][ T5458] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5459] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5456] <... futex resumed>) = 0 [pid 5461] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5456] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = 0 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5456] <... futex resumed>) = 0 [pid 5082] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5461] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5456] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5459] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5455] <... futex resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./25/file1", [pid 5455] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5455] <... mmap resumed>) = 0x7f9608197000 [pid 5082] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5082] newfstatat(4, "", [pid 5455] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(4, 0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5082] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./25/file1") = 0 [pid 5082] getdents64(3, [pid 5459] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5455] <... mprotect resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5457] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5082] close(3 [pid 5457] <... futex resumed>) = 0 [pid 5455] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... close resumed>) = 0 [pid 5459] creat("./file0", 000 [pid 5457] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] rmdir("./25") = 0 [pid 5082] mkdir("./26", 0777) = 0 [ 95.061605][ T5458] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.073992][ T5461] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.081912][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.091858][ T5458] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.097497][ T5454] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5459] <... creat resumed>) = 4 [pid 5455] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5082] <... openat resumed>) = 3 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5459] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5459] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] <... futex resumed>) = 0 [pid 5457] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... clone3 resumed> => {parent_tid=[5463]}, 88) = 5463 [pid 5459] <... futex resumed>) = 0 [pid 5457] <... futex resumed>) = 1 [pid 5455] rt_sigprocmask(SIG_SETMASK, [], [pid 5459] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5457] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5455] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5455] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5463 attached [pid 5456] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] <... futex resumed>) = 0 [pid 5456] <... futex resumed>) = 0 [pid 5455] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 95.106172][ T5461] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.125812][ T5459] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.134431][ T5458] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.135560][ T5459] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.149212][ T5461] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5463] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5456] <... mmap resumed>) = 0x7f9608197000 [pid 5463] <... rseq resumed>) = 0 [pid 5456] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5463] set_robust_list(0x7f96081b79a0, 24 [pid 5456] <... mprotect resumed>) = 0 [pid 5463] <... set_robust_list resumed>) = 0 [pid 5456] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5463] rt_sigprocmask(SIG_SETMASK, [], [pid 5456] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5463] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5463] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5456] <... clone3 resumed> => {parent_tid=[5464]}, 88) = 5464 [pid 5456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5456] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5456] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5464 attached [pid 5457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5082] <... ioctl resumed>) = 0 [pid 5457] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5464] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5457] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5454] <... write resumed>) = 53248 [pid 5082] close(3 [pid 5464] <... rseq resumed>) = 0 [pid 5454] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] set_robust_list(0x7f96081b79a0, 24 [pid 5454] <... futex resumed>) = 0 [pid 5082] <... close resumed>) = 0 [pid 5454] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5464] <... set_robust_list resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5457] <... mprotect resumed>) = 0 [pid 5455] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5453] exit_group(0 [pid 5457] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5453] <... exit_group resumed>) = ? [pid 5457] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5464] rt_sigprocmask(SIG_SETMASK, [], [pid 5462] <... futex resumed>) = ? [pid 5457] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5454] <... futex resumed>) = ? [pid 5454] +++ exited with 0 +++ [pid 5457] <... clone3 resumed> => {parent_tid=[5466]}, 88) = 5466 [pid 5464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5463] <... open resumed>) = 5 [pid 5462] +++ exited with 0 +++ [pid 5457] rt_sigprocmask(SIG_SETMASK, [], [pid 5453] +++ exited with 0 +++ [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5465 [pid 5464] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5463] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5463] <... futex resumed>) = 0 [pid 5457] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5463] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] <... futex resumed>) = 0 [pid 5457] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5466 attached ./strace-static-x86_64: Process 5465 attached [pid 5456] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5466] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5465] set_robust_list(0x5555939db6a0, 24 [pid 5081] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5466] <... rseq resumed>) = 0 [pid 5465] <... set_robust_list resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5466] set_robust_list(0x7f96081b79a0, 24 [pid 5465] chdir("./26" [pid 5081] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5466] <... set_robust_list resumed>) = 0 [pid 5465] <... chdir resumed>) = 0 [pid 5466] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... openat resumed>) = 3 [pid 5466] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5465] <... prctl resumed>) = 0 [pid 5081] newfstatat(3, "", [pid 5466] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5465] setpgid(0, 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5465] <... setpgid resumed>) = 0 [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5081] getdents64(3, [pid 5465] <... openat resumed>) = 3 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5465] write(3, "1000", 4) = 4 [pid 5081] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5465] close(3 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5465] <... close resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./23/binderfs", [pid 5465] symlink("/dev/binderfs", "./binderfs" [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 95.149235][ T5461] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.159717][ T5461] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.167244][ T5459] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.195575][ T5458] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5465] <... symlink resumed>) = 0 [pid 5081] unlink("./23/binderfs" [pid 5465] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5465] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5081] <... unlink resumed>) = 0 [pid 5465] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5081] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5465] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5457] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5465] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5465] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5464] <... open resumed>) = 5 [pid 5464] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5464] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5467 attached [pid 5464] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5461] <... write resumed>) = 53248 [pid 5461] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5465] <... clone3 resumed> => {parent_tid=[5467]}, 88) = 5467 [pid 5467] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5467] rt_sigprocmask(SIG_SETMASK, [], [pid 5465] rt_sigprocmask(SIG_SETMASK, [], [pid 5456] exit_group(0 [pid 5467] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5467] memfd_create("syzkaller", 0 [pid 5465] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... memfd_create resumed>) = 3 [pid 5465] <... futex resumed>) = 0 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5465] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5467] <... mmap resumed>) = 0x7f95ffc00000 [ 95.220608][ T5461] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.223159][ T5459] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.228570][ T5458] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5466] <... open resumed>) = 5 [pid 5464] <... futex resumed>) = ? [pid 5461] <... futex resumed>) = ? [pid 5456] <... exit_group resumed>) = ? [pid 5466] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] +++ exited with 0 +++ [pid 5466] <... futex resumed>) = 0 [pid 5461] +++ exited with 0 +++ [pid 5456] +++ exited with 0 +++ [pid 5466] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5456, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5081] <... umount2 resumed>) = 0 [pid 5467] <... write resumed>) = 524288 [pid 5458] <... write resumed>) = 53248 [pid 5458] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5455] exit_group(0 [pid 5463] <... futex resumed>) = ? [pid 5458] <... futex resumed>) = ? [pid 5455] <... exit_group resumed>) = ? [pid 5463] +++ exited with 0 +++ [pid 5458] +++ exited with 0 +++ [pid 5455] +++ exited with 0 +++ [pid 5467] munmap(0x7f95ffc00000, 138412032 [pid 5085] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5467] <... munmap resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] newfstatat(AT_FDCWD, "./23/file1", [pid 5467] <... openat resumed>) = 4 [pid 5085] newfstatat(3, "", [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5467] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] getdents64(3, [pid 5467] <... ioctl resumed>) = 0 [pid 5459] <... write resumed>) = 53248 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5467] close(3 [pid 5459] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] <... close resumed>) = 0 [pid 5459] <... futex resumed>) = 0 [pid 5085] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... openat resumed>) = 3 [pid 5467] close(4 [pid 5459] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] exit_group(0 [pid 5083] newfstatat(3, "", [pid 5081] <... openat resumed>) = 4 [pid 5467] <... close resumed>) = 0 [pid 5466] <... futex resumed>) = ? [pid 5459] <... futex resumed>) = ? [pid 5457] <... exit_group resumed>) = ? [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] newfstatat(4, "", [pid 5467] mkdir("./file1", 0777 [pid 5466] +++ exited with 0 +++ [pid 5459] +++ exited with 0 +++ [pid 5457] +++ exited with 0 +++ [pid 5085] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5467] <... mkdir resumed>) = 0 [pid 5081] getdents64(4, [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5084] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] getdents64(4, [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5084] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] close(4 [pid 5084] <... openat resumed>) = 3 [pid 5081] <... close resumed>) = 0 [pid 5467] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5084] newfstatat(3, "", [pid 5081] rmdir("./23/file1" [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5081] getdents64(3, [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] close(3 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... close resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./24/binderfs", [pid 5081] rmdir("./23" [pid 5084] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... rmdir resumed>) = 0 [pid 5084] unlink("./24/binderfs" [pid 5081] mkdir("./24", 0777 [pid 5085] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] <... unlink resumed>) = 0 [pid 5083] getdents64(3, [pid 5085] unlink("./24/binderfs" [ 95.270503][ T5459] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.280812][ T5459] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.298994][ T5467] loop1: detected capacity change from 0 to 1024 [pid 5084] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5081] <... mkdir resumed>) = 0 [pid 5085] <... unlink resumed>) = 0 [pid 5083] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5083] unlink("./24/binderfs" [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... unlink resumed>) = 0 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5084] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5467] <... mount resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] newfstatat(AT_FDCWD, "./24/file1", [pid 5467] <... openat resumed>) = 3 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5467] chdir("./file1" [pid 5084] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5467] <... chdir resumed>) = 0 [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5084] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5467] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5084] <... openat resumed>) = 4 [pid 5467] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] newfstatat(4, "", [pid 5467] <... futex resumed>) = 1 [pid 5465] <... futex resumed>) = 0 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5467] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] getdents64(4, [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5465] <... futex resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5467] creat("./file0", 000 [pid 5465] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(4, [pid 5467] <... creat resumed>) = 4 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5467] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] close(4 [pid 5467] <... futex resumed>) = 1 [pid 5465] <... futex resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5467] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5465] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] rmdir("./24/file1" [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5465] <... futex resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5467] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5465] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5084] getdents64(3, [pid 5085] <... umount2 resumed>) = 0 [pid 5083] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] close(3) = 0 [pid 5084] rmdir("./24") = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] mkdir("./25", 0777 [pid 5083] newfstatat(AT_FDCWD, "./24/file1", [pid 5085] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5085] newfstatat(AT_FDCWD, "./24/file1", [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5085] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... openat resumed>) = 4 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5085] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] newfstatat(4, "", [pid 5085] getdents64(4, [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] getdents64(4, [pid 5081] <... ioctl resumed>) = 0 [pid 5085] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] close(4) = 0 [pid 5085] rmdir("./24/file1" [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5085] <... rmdir resumed>) = 0 [pid 5085] getdents64(3, [pid 5083] getdents64(4, [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] close(3 [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5085] <... close resumed>) = 0 [pid 5083] close(4 [pid 5085] rmdir("./24") = 0 [pid 5083] <... close resumed>) = 0 [ 95.376343][ T5467] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.388799][ T5467] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] rmdir("./24/file1") = 0 [pid 5085] mkdir("./25", 0777 [pid 5084] <... ioctl resumed>) = 0 [pid 5081] close(3 [pid 5085] <... mkdir resumed>) = 0 [pid 5465] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5084] close(3 [pid 5083] getdents64(3, [pid 5081] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5465] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] <... close resumed>) = 0 [pid 5083] close(3./strace-static-x86_64: Process 5468 attached [pid 5465] <... futex resumed>) = 0 [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] <... close resumed>) = 0 [pid 5468] set_robust_list(0x5555939db6a0, 24 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5468] <... set_robust_list resumed>) = 0 [pid 5465] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5083] rmdir("./24" [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5468 ./strace-static-x86_64: Process 5469 attached [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5469 [pid 5468] chdir("./24" [pid 5085] ioctl(3, LOOP_CLR_FD [pid 5083] <... rmdir resumed>) = 0 [pid 5469] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5465] <... mmap resumed>) = 0x7f9608197000 [pid 5468] <... chdir resumed>) = 0 [pid 5083] mkdir("./25", 0777) = 0 [pid 5468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5465] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5469] chdir("./25" [pid 5468] <... prctl resumed>) = 0 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5465] <... mprotect resumed>) = 0 [pid 5468] setpgid(0, 0 [pid 5469] <... chdir resumed>) = 0 [pid 5465] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5083] <... openat resumed>) = 3 [pid 5469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5468] <... setpgid resumed>) = 0 [pid 5465] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5469] <... prctl resumed>) = 0 [pid 5468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5465] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5469] setpgid(0, 0 [pid 5468] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5470 attached [pid 5469] <... setpgid resumed>) = 0 [pid 5468] write(3, "1000", 4) = 4 [pid 5468] close(3 [pid 5470] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5468] <... close resumed>) = 0 [pid 5465] <... clone3 resumed> => {parent_tid=[5470]}, 88) = 5470 [pid 5470] <... rseq resumed>) = 0 [pid 5468] symlink("/dev/binderfs", "./binderfs" [pid 5465] rt_sigprocmask(SIG_SETMASK, [], [pid 5469] <... openat resumed>) = 3 [pid 5470] set_robust_list(0x7f96081b79a0, 24 [pid 5468] <... symlink resumed>) = 0 [pid 5465] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5470] <... set_robust_list resumed>) = 0 [pid 5469] write(3, "1000", 4 [pid 5468] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5470] rt_sigprocmask(SIG_SETMASK, [], [pid 5469] <... write resumed>) = 4 [pid 5468] <... futex resumed>) = 0 [pid 5470] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5469] close(3 [pid 5468] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5465] <... futex resumed>) = 0 [ 95.417591][ T5467] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.444035][ T5467] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5470] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5469] <... close resumed>) = 0 [pid 5468] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5465] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] symlink("/dev/binderfs", "./binderfs" [pid 5468] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5469] <... symlink resumed>) = 0 [pid 5468] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5469] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5469] <... futex resumed>) = 0 [pid 5469] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5468] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5470] <... open resumed>) = 5 [pid 5469] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5468] <... mprotect resumed>) = 0 [pid 5085] <... ioctl resumed>) = 0 [pid 5470] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5468] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5470] <... futex resumed>) = 1 [pid 5469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5465] <... futex resumed>) = 0 [pid 5470] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5468] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5469] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0}./strace-static-x86_64: Process 5471 attached [pid 5469] <... mprotect resumed>) = 0 [pid 5468] <... clone3 resumed> => {parent_tid=[5471]}, 88) = 5471 [pid 5468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5468] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5469] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5468] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5471] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5469] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5471] <... rseq resumed>) = 0 [pid 5469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5471] set_robust_list(0x7f96081d89a0, 24 [pid 5085] close(3 [pid 5471] <... set_robust_list resumed>) = 0 [pid 5471] rt_sigprocmask(SIG_SETMASK, [], [pid 5469] <... clone3 resumed> => {parent_tid=[5472]}, 88) = 5472 ./strace-static-x86_64: Process 5472 attached [pid 5471] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5085] <... close resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5471] memfd_create("syzkaller", 0 [pid 5469] rt_sigprocmask(SIG_SETMASK, [], [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5472] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5472] <... rseq resumed>) = 0 [pid 5471] <... memfd_create resumed>) = 3 [pid 5469] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5469] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5471] <... mmap resumed>) = 0x7f95ffc00000 ./strace-static-x86_64: Process 5473 attached [pid 5472] set_robust_list(0x7f96081d89a0, 24 [pid 5473] set_robust_list(0x5555939db6a0, 24 [pid 5472] <... set_robust_list resumed>) = 0 [pid 5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5473 [pid 5473] <... set_robust_list resumed>) = 0 [pid 5472] rt_sigprocmask(SIG_SETMASK, [], [pid 5467] <... write resumed>) = 53248 [pid 5472] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5467] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5083] close(3 [pid 5472] memfd_create("syzkaller", 0 [pid 5467] <... futex resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5473] chdir("./25" [pid 5472] <... memfd_create resumed>) = 3 [pid 5467] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5473] <... chdir resumed>) = 0 [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5472] <... mmap resumed>) = 0x7f95ffc00000 [pid 5473] <... prctl resumed>) = 0 [pid 5473] setpgid(0, 0 [pid 5465] exit_group(0 [pid 5473] <... setpgid resumed>) = 0 [pid 5470] <... futex resumed>) = ? [pid 5467] <... futex resumed>) = ? [pid 5465] <... exit_group resumed>) = ? [pid 5473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5470] +++ exited with 0 +++ [pid 5467] +++ exited with 0 +++ [pid 5465] +++ exited with 0 +++ [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 5474 attached [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5474 [pid 5473] <... openat resumed>) = 3 [pid 5082] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5474] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.488457][ T5467] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.505252][ T5467] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5474] chdir("./25" [pid 5082] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5474] <... chdir resumed>) = 0 [pid 5474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5474] setpgid(0, 0) = 0 [pid 5474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5473] write(3, "1000", 4 [pid 5082] <... openat resumed>) = 3 [pid 5473] <... write resumed>) = 4 [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5082] newfstatat(3, "", [pid 5474] write(3, "1000", 4 [pid 5473] close(3 [pid 5471] <... write resumed>) = 524288 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5474] <... write resumed>) = 4 [pid 5474] close(3 [pid 5471] munmap(0x7f95ffc00000, 138412032 [pid 5474] <... close resumed>) = 0 [pid 5082] getdents64(3, [pid 5474] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5473] <... close resumed>) = 0 [pid 5471] <... munmap resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5473] symlink("/dev/binderfs", "./binderfs" [pid 5474] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5474] <... futex resumed>) = 0 [pid 5474] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5471] <... openat resumed>) = 4 [pid 5474] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5474] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5471] ioctl(4, LOOP_SET_FD, 3 [pid 5474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5473] <... symlink resumed>) = 0 [pid 5472] <... write resumed>) = 524288 [pid 5471] <... ioctl resumed>) = 0 [pid 5082] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5471] close(3 [pid 5474] <... mmap resumed>) = 0x7f96081b8000 [pid 5471] <... close resumed>) = 0 [pid 5474] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5471] close(4 [pid 5474] <... mprotect resumed>) = 0 [pid 5473] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] munmap(0x7f95ffc00000, 138412032 [pid 5471] <... close resumed>) = 0 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5474] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5473] <... futex resumed>) = 0 [pid 5471] mkdir("./file1", 0777 [pid 5474] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5473] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5472] <... munmap resumed>) = 0 [pid 5471] <... mkdir resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5473] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5472] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5473] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] unlink("./26/binderfs" [pid 5473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5472] <... openat resumed>) = 4 [pid 5473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5471] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5472] ioctl(4, LOOP_SET_FD, 3 [pid 5082] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5475 attached [pid 5474] <... clone3 resumed> => {parent_tid=[5475]}, 88) = 5475 [pid 5473] <... mmap resumed>) = 0x7f96081b8000 [pid 5475] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5474] rt_sigprocmask(SIG_SETMASK, [], [pid 5475] <... rseq resumed>) = 0 [pid 5474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5475] set_robust_list(0x7f96081d89a0, 24 [pid 5474] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] <... set_robust_list resumed>) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5473] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5475] rt_sigprocmask(SIG_SETMASK, [], [pid 5474] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5473] <... mprotect resumed>) = 0 [pid 5082] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5475] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5475] memfd_create("syzkaller", 0 [pid 5473] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5475] <... memfd_create resumed>) = 3 [pid 5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5473] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5475] <... mmap resumed>) = 0x7f95ffc00000 [pid 5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5476 attached [pid 5473] <... clone3 resumed> => {parent_tid=[5476]}, 88) = 5476 [pid 5082] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5476] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5473] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5476] <... rseq resumed>) = 0 [pid 5473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] newfstatat(AT_FDCWD, "./26/file1", [pid 5476] set_robust_list(0x7f96081d89a0, 24 [pid 5473] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5476] <... set_robust_list resumed>) = 0 [pid 5473] <... futex resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5476] rt_sigprocmask(SIG_SETMASK, [], [pid 5473] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5472] <... ioctl resumed>) = 0 [pid 5471] <... mount resumed>) = 0 [pid 5082] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5476] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5472] close(3 [pid 5471] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5476] memfd_create("syzkaller", 0 [pid 5472] <... close resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5476] <... memfd_create resumed>) = 3 [pid 5472] close(4 [pid 5471] <... openat resumed>) = 3 [pid 5476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5475] <... write resumed>) = 524288 [pid 5472] <... close resumed>) = 0 [pid 5471] chdir("./file1" [pid 5082] <... openat resumed>) = 4 [pid 5476] <... mmap resumed>) = 0x7f95ffc00000 [pid 5471] <... chdir resumed>) = 0 [pid 5472] mkdir("./file1", 0777 [pid 5082] newfstatat(4, "", [pid 5476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [ 95.566216][ T5471] loop0: detected capacity change from 0 to 1024 [ 95.594518][ T5472] loop3: detected capacity change from 0 to 1024 [pid 5475] munmap(0x7f95ffc00000, 138412032 [pid 5472] <... mkdir resumed>) = 0 [pid 5471] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5475] <... munmap resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5471] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5471] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5471] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5472] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5471] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5468] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] getdents64(4, [pid 5471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5468] <... futex resumed>) = 0 [pid 5475] <... openat resumed>) = 4 [pid 5471] creat("./file0", 000 [pid 5468] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5475] ioctl(4, LOOP_SET_FD, 3 [pid 5471] <... creat resumed>) = 4 [pid 5476] <... write resumed>) = 524288 [pid 5471] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5082] close(4) = 0 [pid 5082] rmdir("./26/file1") = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5476] munmap(0x7f95ffc00000, 138412032 [pid 5082] close(3 [pid 5471] <... futex resumed>) = 1 [pid 5468] <... futex resumed>) = 0 [pid 5468] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... close resumed>) = 0 [pid 5476] <... munmap resumed>) = 0 [pid 5468] <... futex resumed>) = 0 [pid 5082] rmdir("./26" [pid 5476] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5471] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5468] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5476] <... openat resumed>) = 4 [pid 5082] <... rmdir resumed>) = 0 [pid 5476] ioctl(4, LOOP_SET_FD, 3 [pid 5082] mkdir("./27", 0777) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5476] <... ioctl resumed>) = 0 [pid 5475] <... ioctl resumed>) = 0 [pid 5476] close(3) = 0 [pid 5475] close(3 [pid 5476] close(4 [pid 5475] <... close resumed>) = 0 [pid 5476] <... close resumed>) = 0 [pid 5475] close(4 [pid 5082] <... openat resumed>) = 3 [pid 5476] mkdir("./file1", 0777) = 0 [pid 5475] <... close resumed>) = 0 [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5475] mkdir("./file1", 0777 [pid 5476] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5475] <... mkdir resumed>) = 0 [pid 5475] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5472] <... mount resumed>) = 0 [ 95.658134][ T5475] loop2: detected capacity change from 0 to 1024 [ 95.677775][ T5471] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.685791][ T5471] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.685797][ T5476] loop4: detected capacity change from 0 to 1024 [pid 5472] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5476] <... mount resumed>) = 0 [pid 5468] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5476] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5468] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5476] <... openat resumed>) = 3 [pid 5472] <... openat resumed>) = 3 [pid 5468] <... mmap resumed>) = 0x7f9608197000 [pid 5082] <... ioctl resumed>) = 0 [pid 5468] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5476] chdir("./file1") = 0 [pid 5472] chdir("./file1" [pid 5468] <... mprotect resumed>) = 0 [pid 5082] close(3 [pid 5476] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5082] <... close resumed>) = 0 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5476] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5475] <... mount resumed>) = 0 [pid 5472] <... chdir resumed>) = 0 [pid 5468] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5476] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5468] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5475] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5472] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 5477 attached [pid 5476] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5477 [pid 5477] set_robust_list(0x5555939db6a0, 24 [pid 5475] <... openat resumed>) = 3 [pid 5472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5468] <... clone3 resumed> => {parent_tid=[5478]}, 88) = 5478 [pid 5477] <... set_robust_list resumed>) = 0 [pid 5468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5477] chdir("./27" [pid 5475] chdir("./file1" [pid 5473] <... futex resumed>) = 0 [pid 5472] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5477] <... chdir resumed>) = 0 [pid 5477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5475] <... chdir resumed>) = 0 [pid 5473] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] <... futex resumed>) = 1 [pid 5477] setpgid(0, 0 [pid 5476] <... futex resumed>) = 0 [pid 5475] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5473] <... futex resumed>) = 1 [pid 5472] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5478 attached [pid 5477] <... setpgid resumed>) = 0 [pid 5476] creat("./file0", 000 [pid 5475] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5473] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] <... futex resumed>) = 0 [pid 5468] <... futex resumed>) = 0 [pid 5478] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5475] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5478] <... rseq resumed>) = 0 [pid 5476] <... creat resumed>) = 4 [pid 5475] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5472] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = 1 [pid 5478] set_robust_list(0x7f96081b79a0, 24 [pid 5477] <... openat resumed>) = 3 [pid 5476] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5475] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] creat("./file0", 000 [pid 5469] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5478] <... set_robust_list resumed>) = 0 [pid 5477] write(3, "1000", 4 [pid 5476] <... futex resumed>) = 1 [pid 5475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5474] <... futex resumed>) = 0 [pid 5473] <... futex resumed>) = 0 [pid 5472] <... creat resumed>) = 4 [pid 5478] rt_sigprocmask(SIG_SETMASK, [], [pid 5475] creat("./file0", 000 [pid 5474] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5473] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5478] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 95.714703][ T5471] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.722123][ T5471] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.744269][ T5471] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.751620][ T5471] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5477] <... write resumed>) = 4 [pid 5476] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5475] <... creat resumed>) = 4 [pid 5473] <... futex resumed>) = 0 [pid 5478] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5472] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5477] close(3 [pid 5475] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5477] <... close resumed>) = 0 [pid 5475] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5472] <... futex resumed>) = 1 [pid 5469] <... futex resumed>) = 0 [pid 5477] symlink("/dev/binderfs", "./binderfs" [pid 5475] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5474] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5472] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5478] <... open resumed>) = 5 [pid 5478] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5478] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5477] <... symlink resumed>) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5469] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5468] <... futex resumed>) = 0 [pid 5477] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... futex resumed>) = 1 [pid 5474] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5477] <... futex resumed>) = 0 [pid 5472] <... futex resumed>) = 0 [ 95.799440][ T5476] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.811480][ T5475] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.821048][ T5476] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.827550][ T5475] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.835751][ T5476] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5472] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5477] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5473] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5477] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5474] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5473] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5471] <... write resumed>) = 53248 [pid 5469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5471] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5471] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5477] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5476] <... write resumed>) = 53248 [pid 5474] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] <... futex resumed>) = 0 [pid 5469] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [ 95.835772][ T5476] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.839151][ T5476] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.845568][ T5472] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.851282][ T5476] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.859625][ T5472] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.880487][ T5475] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.882439][ T5472] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5468] exit_group(0 [pid 5477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5476] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] <... futex resumed>) = 0 [pid 5473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5471] <... futex resumed>) = ? [pid 5469] <... futex resumed>) = 0 [pid 5468] <... exit_group resumed>) = ? [pid 5478] <... futex resumed>) = ? [pid 5471] +++ exited with 0 +++ [pid 5478] +++ exited with 0 +++ [pid 5477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5476] <... futex resumed>) = 0 [pid 5474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5473] <... mmap resumed>) = 0x7f9608197000 [pid 5469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5468] +++ exited with 0 +++ [pid 5477] <... mmap resumed>) = 0x7f96081b8000 [pid 5476] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5475] <... write resumed>) = 53248 [pid 5474] <... mmap resumed>) = 0x7f9608197000 [pid 5473] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5469] <... mmap resumed>) = 0x7f9608197000 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5468, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5477] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5475] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5473] <... mprotect resumed>) = 0 [pid 5469] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5477] <... mprotect resumed>) = 0 [pid 5475] <... futex resumed>) = 0 [pid 5474] <... mprotect resumed>) = 0 [pid 5473] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5469] <... mprotect resumed>) = 0 [pid 5477] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5475] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5474] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5473] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5469] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5081] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5474] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5473] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5469] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5479 attached [pid 5477] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5472] <... write resumed>) = 53248 [pid 5469] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5081] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5481 attached ./strace-static-x86_64: Process 5480 attached [pid 5479] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5473] <... clone3 resumed> => {parent_tid=[5479]}, 88) = 5479 [pid 5472] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5482 attached [pid 5481] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5480] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5479] <... rseq resumed>) = 0 [pid 5473] rt_sigprocmask(SIG_SETMASK, [], [pid 5472] <... futex resumed>) = 0 [pid 5469] <... clone3 resumed> => {parent_tid=[5481]}, 88) = 5481 [pid 5081] newfstatat(3, "", [pid 5482] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5481] <... rseq resumed>) = 0 [pid 5480] <... rseq resumed>) = 0 [pid 5479] set_robust_list(0x7f96081b79a0, 24 [pid 5477] <... clone3 resumed> => {parent_tid=[5482]}, 88) = 5482 [pid 5474] <... clone3 resumed> => {parent_tid=[5480]}, 88) = 5480 [pid 5473] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5472] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5469] rt_sigprocmask(SIG_SETMASK, [], [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5482] <... rseq resumed>) = 0 [pid 5481] set_robust_list(0x7f96081b79a0, 24 [pid 5480] set_robust_list(0x7f96081b79a0, 24 [pid 5479] <... set_robust_list resumed>) = 0 [pid 5477] rt_sigprocmask(SIG_SETMASK, [], [pid 5474] rt_sigprocmask(SIG_SETMASK, [], [pid 5473] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5469] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5081] getdents64(3, [pid 5482] set_robust_list(0x7f96081d89a0, 24 [pid 5481] <... set_robust_list resumed>) = 0 [pid 5480] <... set_robust_list resumed>) = 0 [pid 5479] rt_sigprocmask(SIG_SETMASK, [], [pid 5477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5474] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5473] <... futex resumed>) = 0 [pid 5469] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5482] <... set_robust_list resumed>) = 0 [pid 5481] rt_sigprocmask(SIG_SETMASK, [], [pid 5480] rt_sigprocmask(SIG_SETMASK, [], [pid 5479] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5477] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5474] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5473] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5469] <... futex resumed>) = 0 [pid 5081] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5482] rt_sigprocmask(SIG_SETMASK, [], [pid 5481] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5480] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5479] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5477] <... futex resumed>) = 0 [pid 5474] <... futex resumed>) = 0 [pid 5469] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5482] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5481] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5480] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5477] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5474] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./24/binderfs") = 0 [pid 5081] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5482] memfd_create("syzkaller", 0 [pid 5480] <... open resumed>) = 5 [pid 5482] <... memfd_create resumed>) = 3 [pid 5481] <... open resumed>) = 5 [pid 5480] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... open resumed>) = 5 [pid 5482] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5479] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5481] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... futex resumed>) = 1 [pid 5474] <... futex resumed>) = 0 [pid 5481] <... futex resumed>) = 1 [pid 5480] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5479] <... futex resumed>) = 1 [pid 5474] exit_group(0 [pid 5473] <... futex resumed>) = 0 [pid 5469] <... futex resumed>) = 0 [pid 5475] <... futex resumed>) = ? [pid 5474] <... exit_group resumed>) = ? [pid 5473] exit_group(0 [pid 5469] exit_group(0 [pid 5482] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5480] <... futex resumed>) = ? [pid 5476] <... futex resumed>) = ? [pid 5475] +++ exited with 0 +++ [pid 5473] <... exit_group resumed>) = ? [pid 5472] <... futex resumed>) = ? [pid 5469] <... exit_group resumed>) = ? [pid 5476] +++ exited with 0 +++ [pid 5472] +++ exited with 0 +++ [pid 5481] +++ exited with 0 +++ [pid 5469] +++ exited with 0 +++ [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5469, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} --- [pid 5084] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5084] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 95.895437][ T5475] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.896781][ T5472] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.907829][ T5475] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.919139][ T5472] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.922140][ T5475] hfsplus: request for non-existent node 16777216 in B*Tree [ 95.928664][ T5472] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5479] +++ exited with 0 +++ [pid 5473] +++ exited with 0 +++ [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5473, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5084] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] restart_syscall(<... resuming interrupted clone ...> [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... restart_syscall resumed>) = 0 [pid 5084] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./25/binderfs" [pid 5085] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... unlink resumed>) = 0 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5480] +++ exited with 0 +++ [pid 5474] +++ exited with 0 +++ [pid 5085] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5474, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5085] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5085] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5085] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5085] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] unlink("./25/binderfs" [pid 5083] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5085] <... unlink resumed>) = 0 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", [pid 5085] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5083] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./25/binderfs" [pid 5482] <... write resumed>) = 524288 [pid 5083] <... unlink resumed>) = 0 [pid 5083] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5482] munmap(0x7f95ffc00000, 138412032 [pid 5081] <... umount2 resumed>) = 0 [pid 5482] <... munmap resumed>) = 0 [pid 5085] <... umount2 resumed>) = 0 [pid 5084] <... umount2 resumed>) = 0 [pid 5083] <... umount2 resumed>) = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5085] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5081] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] newfstatat(AT_FDCWD, "./25/file1", [pid 5081] newfstatat(AT_FDCWD, "./24/file1", [pid 5482] <... openat resumed>) = 4 [pid 5085] newfstatat(AT_FDCWD, "./25/file1", [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5482] ioctl(4, LOOP_SET_FD, 3 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] newfstatat(AT_FDCWD, "./25/file1", [pid 5083] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5081] umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... openat resumed>) = 4 [pid 5081] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] newfstatat(4, "", [pid 5081] <... openat resumed>) = 4 [pid 5083] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, [pid 5081] newfstatat(4, "", [pid 5083] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5083] getdents64(4, 0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5081] getdents64(4, [pid 5083] close(4 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... close resumed>) = 0 [pid 5081] getdents64(4, [pid 5482] <... ioctl resumed>) = 0 [pid 5085] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] rmdir("./25/file1" [pid 5482] close(3 [pid 5085] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] <... rmdir resumed>) = 0 [pid 5081] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5482] <... close resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] close(4 [pid 5482] close(4 [pid 5085] <... openat resumed>) = 4 [pid 5084] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] getdents64(3, [pid 5482] <... close resumed>) = 0 [pid 5085] newfstatat(4, "", [pid 5081] <... close resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] rmdir("./24/file1" [pid 5085] getdents64(4, [pid 5084] <... openat resumed>) = 4 [pid 5083] close(3 [pid 5482] mkdir("./file1", 0777 [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5081] <... rmdir resumed>) = 0 [pid 5085] getdents64(4, [pid 5084] newfstatat(4, "", [pid 5083] <... close resumed>) = 0 [pid 5081] getdents64(3, [pid 5085] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] rmdir("./25" [pid 5085] close(4 [pid 5084] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5081] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5085] <... close resumed>) = 0 [pid 5081] close(3 [pid 5085] rmdir("./25/file1" [pid 5084] getdents64(4, [pid 5081] <... close resumed>) = 0 [pid 5482] <... mkdir resumed>) = 0 [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5083] <... rmdir resumed>) = 0 [pid 5081] rmdir("./24" [pid 5085] getdents64(3, [pid 5084] getdents64(4, [pid 5081] <... rmdir resumed>) = 0 [pid 5085] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5084] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5083] mkdir("./26", 0777 [pid 5081] mkdir("./25", 0777 [pid 5482] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5085] close(3 [pid 5084] close(4 [pid 5083] <... mkdir resumed>) = 0 [pid 5085] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5081] <... mkdir resumed>) = 0 [pid 5085] rmdir("./25" [pid 5084] rmdir("./25/file1" [pid 5085] <... rmdir resumed>) = 0 [pid 5084] <... rmdir resumed>) = 0 [pid 5084] getdents64(3, [pid 5085] mkdir("./26", 0777 [pid 5084] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5085] <... mkdir resumed>) = 0 [pid 5084] close(3 [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] <... openat resumed>) = 3 [pid 5084] <... close resumed>) = 0 [pid 5084] rmdir("./25" [pid 5083] <... openat resumed>) = 3 [pid 5081] ioctl(3, LOOP_CLR_FD [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] <... rmdir resumed>) = 0 [pid 5083] ioctl(3, LOOP_CLR_FD [pid 5085] <... openat resumed>) = 3 [pid 5085] ioctl(3, LOOP_CLR_FD [ 96.011236][ T5482] loop1: detected capacity change from 0 to 1024 [pid 5084] mkdir("./26", 0777) = 0 [pid 5482] <... mount resumed>) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5482] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] <... openat resumed>) = 3 [pid 5482] <... openat resumed>) = 3 [pid 5084] ioctl(3, LOOP_CLR_FD [pid 5482] chdir("./file1") = 0 [pid 5482] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5482] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5477] <... futex resumed>) = 0 [pid 5482] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5477] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5477] <... futex resumed>) = 0 [pid 5482] creat("./file0", 000 [pid 5477] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] <... creat resumed>) = 4 [pid 5482] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5477] <... futex resumed>) = 0 [pid 5477] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5477] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5482] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5085] <... ioctl resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(3 [pid 5085] close(3 [pid 5083] <... close resumed>) = 0 [ 96.087090][ T5482] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.094628][ T5482] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.102464][ T5482] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5083] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5085] <... close resumed>) = 0 ./strace-static-x86_64: Process 5483 attached [pid 5081] <... ioctl resumed>) = 0 [pid 5483] set_robust_list(0x5555939db6a0, 24 [pid 5477] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5085] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... clone resumed>, child_tidptr=0x5555939db690) = 5483 [pid 5477] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] close(3 [pid 5477] <... futex resumed>) = 0 [pid 5081] <... close resumed>) = 0 [pid 5477] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5081] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5477] <... mmap resumed>) = 0x7f9608197000 [pid 5477] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5084] close(3 [pid 5081] <... clone resumed>, child_tidptr=0x5555939db690) = 5484 [pid 5477] <... mprotect resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5477] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5084] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5483] <... set_robust_list resumed>) = 0 [pid 5477] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5484 attached [pid 5483] chdir("./26" [pid 5477] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5484] set_robust_list(0x5555939db6a0, 24) = 0 [pid 5477] <... clone3 resumed> => {parent_tid=[5487]}, 88) = 5487 ./strace-static-x86_64: Process 5487 attached [pid 5484] chdir("./25" [pid 5477] rt_sigprocmask(SIG_SETMASK, [], [pid 5487] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5484] <... chdir resumed>) = 0 [pid 5477] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5477] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5487] <... rseq resumed>) = 0 [pid 5484] <... prctl resumed>) = 0 [pid 5477] <... futex resumed>) = 0 [pid 5487] set_robust_list(0x7f96081b79a0, 24 [pid 5477] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5485 attached [pid 5487] <... set_robust_list resumed>) = 0 [pid 5484] setpgid(0, 0 [pid 5483] <... chdir resumed>) = 0 [pid 5085] <... clone resumed>, child_tidptr=0x5555939db690) = 5485 [pid 5084] <... clone resumed>, child_tidptr=0x5555939db690) = 5486 ./strace-static-x86_64: Process 5486 attached [pid 5487] rt_sigprocmask(SIG_SETMASK, [], [pid 5484] <... setpgid resumed>) = 0 [pid 5486] set_robust_list(0x5555939db6a0, 24 [pid 5487] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5486] <... set_robust_list resumed>) = 0 [pid 5487] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5485] set_robust_list(0x5555939db6a0, 24 [pid 5484] <... openat resumed>) = 3 [pid 5485] <... set_robust_list resumed>) = 0 [pid 5483] <... prctl resumed>) = 0 [pid 5486] chdir("./26" [pid 5484] write(3, "1000", 4 [pid 5486] <... chdir resumed>) = 0 [pid 5484] <... write resumed>) = 4 [pid 5486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5484] close(3 [pid 5486] <... prctl resumed>) = 0 [pid 5484] <... close resumed>) = 0 [pid 5486] setpgid(0, 0 [pid 5484] symlink("/dev/binderfs", "./binderfs" [pid 5486] <... setpgid resumed>) = 0 [pid 5484] <... symlink resumed>) = 0 [pid 5486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5484] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5484] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5486] <... openat resumed>) = 3 [pid 5484] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5483] setpgid(0, 0 [pid 5486] write(3, "1000", 4 [pid 5485] chdir("./26" [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5483] <... setpgid resumed>) = 0 [pid 5486] <... write resumed>) = 4 [pid 5484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5486] close(3 [pid 5484] <... mmap resumed>) = 0x7f96081b8000 [pid 5486] <... close resumed>) = 0 [pid 5484] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5486] symlink("/dev/binderfs", "./binderfs" [pid 5484] <... mprotect resumed>) = 0 [pid 5486] <... symlink resumed>) = 0 [pid 5485] <... chdir resumed>) = 0 [pid 5484] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5486] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5484] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5483] <... openat resumed>) = 3 [pid 5486] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5485] <... prctl resumed>) = 0 [pid 5483] write(3, "1000", 4./strace-static-x86_64: Process 5488 attached [pid 5486] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5488] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5483] <... write resumed>) = 4 [pid 5488] <... rseq resumed>) = 0 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] setpgid(0, 0 [pid 5484] <... clone3 resumed> => {parent_tid=[5488]}, 88) = 5488 [pid 5488] set_robust_list(0x7f96081d89a0, 24 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5485] <... setpgid resumed>) = 0 [pid 5484] rt_sigprocmask(SIG_SETMASK, [], [pid 5483] close(3 [pid 5488] <... set_robust_list resumed>) = 0 [pid 5486] <... mmap resumed>) = 0x7f96081b8000 [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5488] rt_sigprocmask(SIG_SETMASK, [], [pid 5486] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5484] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... close resumed>) = 0 [pid 5488] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] <... mprotect resumed>) = 0 [pid 5484] <... futex resumed>) = 0 [pid 5488] memfd_create("syzkaller", 0 [pid 5485] <... openat resumed>) = 3 [pid 5483] symlink("/dev/binderfs", "./binderfs" [pid 5488] <... memfd_create resumed>) = 3 [pid 5486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5484] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5483] <... symlink resumed>) = 0 [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5488] <... mmap resumed>) = 0x7f95ffc00000 [pid 5486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5483] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5489 attached [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5483] <... futex resumed>) = 0 [pid 5489] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5486] <... clone3 resumed> => {parent_tid=[5489]}, 88) = 5489 [pid 5483] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5489] <... rseq resumed>) = 0 [pid 5483] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5489] set_robust_list(0x7f96081d89a0, 24 [pid 5486] rt_sigprocmask(SIG_SETMASK, [], [pid 5483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] write(3, "1000", 4 [pid 5483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5486] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... write resumed>) = 4 [pid 5483] <... mmap resumed>) = 0x7f96081b8000 [pid 5486] <... futex resumed>) = 0 [pid 5485] close(3 [pid 5483] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5489] <... set_robust_list resumed>) = 0 [pid 5486] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5489] rt_sigprocmask(SIG_SETMASK, [], [pid 5485] <... close resumed>) = 0 [pid 5489] <... rt_sigprocmask resumed>NULL, 8) = 0 [ 96.133338][ T5482] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.144691][ T5482] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.156808][ T5482] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5485] symlink("/dev/binderfs", "./binderfs" [pid 5489] memfd_create("syzkaller", 0) = 3 [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5485] <... symlink resumed>) = 0 [pid 5489] <... mmap resumed>) = 0x7f95ffc00000 [pid 5487] <... open resumed>) = 5 [pid 5482] <... write resumed>) = 53248 [pid 5477] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5487] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... mprotect resumed>) = 0 [pid 5482] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5487] <... futex resumed>) = 0 [pid 5487] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5483] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5477] exit_group(0 [pid 5487] <... futex resumed>) = ? [pid 5482] <... futex resumed>) = ? [pid 5477] <... exit_group resumed>) = ? [pid 5485] <... futex resumed>) = 0 [pid 5483] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5482] +++ exited with 0 +++ [pid 5488] <... write resumed>) = 524288 [pid 5485] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, [pid 5483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5485] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5487] +++ exited with 0 +++ [pid 5485] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5477] +++ exited with 0 +++ [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5483] <... clone3 resumed> => {parent_tid=[5490]}, 88) = 5490 [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5485] <... mmap resumed>) = 0x7f96081b8000 [pid 5483] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5490 attached [pid 5488] munmap(0x7f95ffc00000, 138412032 [pid 5485] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE [pid 5483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5490] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5489] <... write resumed>) = 524288 [pid 5488] <... munmap resumed>) = 0 [pid 5485] <... mprotect resumed>) = 0 [pid 5483] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... restart_syscall resumed>) = 0 [pid 5490] <... rseq resumed>) = 0 [pid 5483] <... futex resumed>) = 0 [pid 5485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5483] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5490] set_robust_list(0x7f96081d89a0, 24 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5490] <... set_robust_list resumed>) = 0 [pid 5082] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5082] <... openat resumed>) = 3 [pid 5490] memfd_create("syzkaller", 0 [pid 5082] newfstatat(3, "", [pid 5490] <... memfd_create resumed>) = 3 [pid 5485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5082] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5490] <... mmap resumed>) = 0x7f95ffc00000 [pid 5488] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5491 attached [pid 5490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5488] <... openat resumed>) = 4 [pid 5485] <... clone3 resumed> => {parent_tid=[5491]}, 88) = 5491 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5491] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053 [pid 5485] rt_sigprocmask(SIG_SETMASK, [], [pid 5491] <... rseq resumed>) = 0 [pid 5489] munmap(0x7f95ffc00000, 138412032 [pid 5488] ioctl(4, LOOP_SET_FD, 3 [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] newfstatat(AT_FDCWD, "./27/binderfs", [pid 5491] set_robust_list(0x7f96081d89a0, 24 [pid 5489] <... munmap resumed>) = 0 [pid 5082] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5491] <... set_robust_list resumed>) = 0 [pid 5491] rt_sigprocmask(SIG_SETMASK, [], [pid 5489] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5082] unlink("./27/binderfs" [pid 5491] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5489] <... openat resumed>) = 4 [pid 5491] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5489] ioctl(4, LOOP_SET_FD, 3 [pid 5485] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... unlink resumed>) = 0 [pid 5491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5491] memfd_create("syzkaller", 0 [pid 5485] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5082] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5491] <... memfd_create resumed>) = 3 [pid 5491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f95ffc00000 [pid 5488] <... ioctl resumed>) = 0 [pid 5488] close(3) = 0 [pid 5488] close(4 [pid 5491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5490] <... write resumed>) = 524288 [pid 5488] <... close resumed>) = 0 [pid 5490] munmap(0x7f95ffc00000, 138412032 [pid 5489] <... ioctl resumed>) = 0 [pid 5488] mkdir("./file1", 0777 [pid 5489] close(3 [pid 5488] <... mkdir resumed>) = 0 [pid 5489] <... close resumed>) = 0 [pid 5489] close(4) = 0 [pid 5489] mkdir("./file1", 0777 [pid 5490] <... munmap resumed>) = 0 [pid 5489] <... mkdir resumed>) = 0 [pid 5488] mount("/dev/loop0", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5490] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5489] mount("/dev/loop3", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5082] <... umount2 resumed>) = 0 [pid 5490] <... openat resumed>) = 4 [ 96.264548][ T5488] loop0: detected capacity change from 0 to 1024 [ 96.275531][ T5489] loop3: detected capacity change from 0 to 1024 [pid 5490] ioctl(4, LOOP_SET_FD, 3 [pid 5082] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5491] <... write resumed>) = 524288 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5490] <... ioctl resumed>) = 0 [pid 5082] newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5082] umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5490] close(3 [pid 5082] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5490] <... close resumed>) = 0 [pid 5490] close(4) = 0 [pid 5490] mkdir("./file1", 0777) = 0 [pid 5082] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5490] mount("/dev/loop2", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5491] munmap(0x7f95ffc00000, 138412032 [pid 5488] <... mount resumed>) = 0 [pid 5082] <... openat resumed>) = 4 [pid 5488] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5082] newfstatat(4, "", [pid 5491] <... munmap resumed>) = 0 [pid 5488] <... openat resumed>) = 3 [pid 5082] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5488] chdir("./file1" [pid 5082] getdents64(4, [pid 5491] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5489] <... mount resumed>) = 0 [pid 5488] <... chdir resumed>) = 0 [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 2 entries */, 32768) = 48 [pid 5491] <... openat resumed>) = 4 [pid 5488] openat(AT_FDCWD, "/dev/loop0", O_RDWR [ 96.315007][ T5490] loop2: detected capacity change from 0 to 1024 [pid 5082] getdents64(4, [pid 5491] ioctl(4, LOOP_SET_FD, 3 [pid 5488] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5082] <... getdents64 resumed>0x5555939e4770 /* 0 entries */, 32768) = 0 [pid 5490] <... mount resumed>) = 0 [pid 5489] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5490] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5489] <... openat resumed>) = 3 [pid 5082] close(4 [pid 5489] chdir("./file1") = 0 [pid 5082] <... close resumed>) = 0 [pid 5489] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5082] rmdir("./27/file1" [pid 5490] chdir("./file1" [pid 5489] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... rmdir resumed>) = 0 [pid 5490] <... chdir resumed>) = 0 [pid 5489] <... futex resumed>) = 1 [pid 5486] <... futex resumed>) = 0 [pid 5082] getdents64(3, [pid 5489] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... getdents64 resumed>0x5555939dc730 /* 0 entries */, 32768) = 0 [pid 5490] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5488] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = 0 [pid 5490] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5489] creat("./file0", 000 [pid 5488] <... futex resumed>) = 1 [pid 5486] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] <... futex resumed>) = 0 [pid 5082] close(3 [pid 5488] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5082] <... close resumed>) = 0 [pid 5082] rmdir("./27" [pid 5489] <... creat resumed>) = 4 [pid 5082] <... rmdir resumed>) = 0 [pid 5484] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5488] <... futex resumed>) = 0 [pid 5484] <... futex resumed>) = 1 [pid 5489] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] <... futex resumed>) = 1 [pid 5488] creat("./file0", 000 [pid 5484] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] <... futex resumed>) = 0 [pid 5082] mkdir("./28", 0777 [pid 5491] <... ioctl resumed>) = 0 [pid 5490] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5489] <... futex resumed>) = 1 [pid 5488] <... creat resumed>) = 4 [pid 5486] <... futex resumed>) = 0 [pid 5483] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... mkdir resumed>) = 0 [pid 5491] close(3 [pid 5490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5489] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5488] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = 0 [pid 5082] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5491] <... close resumed>) = 0 [pid 5490] creat("./file0", 000 [pid 5489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5488] <... futex resumed>) = 1 [pid 5486] <... futex resumed>) = 0 [pid 5484] <... futex resumed>) = 0 [pid 5483] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] close(4 [pid 5488] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5484] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] <... openat resumed>) = 3 [pid 5491] <... close resumed>) = 0 [pid 5490] <... creat resumed>) = 4 [pid 5489] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] <... futex resumed>) = 0 [ 96.368002][ T5491] loop4: detected capacity change from 0 to 1024 [ 96.405686][ T5489] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5491] mkdir("./file1", 0777 [pid 5488] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5484] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] ioctl(3, LOOP_CLR_FD [pid 5490] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... mkdir resumed>) = 0 [pid 5490] <... futex resumed>) = 1 [pid 5491] mount("/dev/loop4", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "" [pid 5483] <... futex resumed>) = 0 [pid 5490] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5483] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5483] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] <... mount resumed>) = 0 [pid 5491] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5491] chdir("./file1") = 0 [pid 5491] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5491] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5491] creat("./file0", 000 [pid 5485] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5491] <... creat resumed>) = 4 [pid 5485] <... futex resumed>) = 0 [pid 5485] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5491] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5491] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [pid 5485] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5082] <... ioctl resumed>) = 0 [ 96.406026][ T5488] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.435723][ T5488] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.443372][ T5490] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.450855][ T5490] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.458928][ T5489] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5483] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5483] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5483] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5484] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5484] <... futex resumed>) = 0 [pid 5483] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5483] <... clone3 resumed> => {parent_tid=[5492]}, 88) = 5492 [pid 5486] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5483] rt_sigprocmask(SIG_SETMASK, [], [pid 5082] close(3./strace-static-x86_64: Process 5492 attached [pid 5486] <... futex resumed>) = 0 [pid 5492] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5484] <... mprotect resumed>) = 0 [pid 5483] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5082] <... close resumed>) = 0 [pid 5492] <... rseq resumed>) = 0 [pid 5486] <... mmap resumed>) = 0x7f9608197000 [pid 5484] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5483] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5082] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5492] set_robust_list(0x7f96081b79a0, 24 [pid 5486] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE [pid 5492] <... set_robust_list resumed>) = 0 [pid 5486] <... mprotect resumed>) = 0 [pid 5484] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5483] <... futex resumed>) = 0 [pid 5082] <... clone resumed>, child_tidptr=0x5555939db690) = 5493 [pid 5483] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5493 attached [pid 5485] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5493] set_robust_list(0x5555939db6a0, 24 [pid 5485] <... mmap resumed>) = 0x7f9608197000 [pid 5493] <... set_robust_list resumed>) = 0 [pid 5485] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5484] <... clone3 resumed> => {parent_tid=[5494]}, 88) = 5494 [pid 5492] rt_sigprocmask(SIG_SETMASK, [], [pid 5493] chdir("./28" [pid 5485] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5484] rt_sigprocmask(SIG_SETMASK, [], [pid 5493] <... chdir resumed>) = 0 [pid 5485] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5484] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5492] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5492] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5493] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5485] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [pid 5484] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5494 attached [pid 5493] <... prctl resumed>) = 0 [pid 5486] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5484] <... futex resumed>) = 0 [pid 5494] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5493] setpgid(0, 0 [pid 5486] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5485] <... clone3 resumed> => {parent_tid=[5495]}, 88) = 5495 [pid 5484] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... rseq resumed>) = 0 [pid 5493] <... setpgid resumed>) = 0 [pid 5486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} [ 96.461039][ T5491] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.473225][ T5489] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.481125][ T5489] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.492406][ T5490] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.495192][ T5488] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5485] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5495 attached [pid 5494] set_robust_list(0x7f96081b79a0, 24 [pid 5493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5485] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5495] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5494] <... set_robust_list resumed>) = 0 [pid 5493] <... openat resumed>) = 3 [pid 5485] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5495] <... rseq resumed>) = 0 [pid 5494] rt_sigprocmask(SIG_SETMASK, [], [pid 5493] write(3, "1000", 4 [pid 5485] <... futex resumed>) = 0 [pid 5495] set_robust_list(0x7f96081b79a0, 24 [pid 5494] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5493] <... write resumed>) = 4 [pid 5485] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5495] <... set_robust_list resumed>) = 0 [pid 5494] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5493] close(3 [pid 5495] rt_sigprocmask(SIG_SETMASK, [], [pid 5493] <... close resumed>) = 0 [pid 5486] <... clone3 resumed> => {parent_tid=[5496]}, 88) = 5496 ./strace-static-x86_64: Process 5496 attached [pid 5495] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5493] symlink("/dev/binderfs", "./binderfs" [pid 5486] rt_sigprocmask(SIG_SETMASK, [], [pid 5496] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053 [pid 5495] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5493] <... symlink resumed>) = 0 [pid 5486] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5496] <... rseq resumed>) = 0 [pid 5493] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5496] set_robust_list(0x7f96081b79a0, 24 [pid 5493] <... futex resumed>) = 0 [pid 5486] <... futex resumed>) = 0 [pid 5496] <... set_robust_list resumed>) = 0 [pid 5493] rt_sigaction(SIGRT_1, {sa_handler=0x7f9608247fa0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f9608239150}, NULL, 8) = 0 [pid 5493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5496] rt_sigprocmask(SIG_SETMASK, [], [pid 5493] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5486] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5496] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f96081b8000 [pid 5493] mprotect(0x7f96081b9000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081d8990, parent_tid=0x7f96081d8990, exit_signal=0, stack=0x7f96081b8000, stack_size=0x20300, tls=0x7f96081d86c0} => {parent_tid=[5497]}, 88) = 5497 [pid 5493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5493] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 96.523573][ T5490] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.540002][ T5491] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.543530][ T5490] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.551023][ T5488] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5493] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5497 attached [pid 5497] rseq(0x7f96081d8fe0, 0x20, 0, 0x53053053) = 0 [pid 5497] set_robust_list(0x7f96081d89a0, 24) = 0 [pid 5497] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5497] memfd_create("syzkaller", 0 [pid 5484] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5497] <... memfd_create resumed>) = 3 [pid 5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5496] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5485] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5497] <... mmap resumed>) = 0x7f95ffc00000 [pid 5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 5494] <... open resumed>) = 5 [pid 5494] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 96.573475][ T5491] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.579921][ T5489] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.590860][ T5490] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.603903][ T5488] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.611467][ T5489] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5494] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5497] <... write resumed>) = 524288 [pid 5492] <... open resumed>) = 5 [pid 5486] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5492] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5492] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5497] munmap(0x7f95ffc00000, 138412032 [pid 5496] <... open resumed>) = 5 [pid 5496] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5497] <... munmap resumed>) = 0 [pid 5489] <... write resumed>) = 53248 [pid 5490] <... write resumed>) = 53248 [pid 5496] futex(0x7f96082aa6d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] exit_group(0 [pid 5497] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5492] <... futex resumed>) = ? [pid 5483] <... exit_group resumed>) = ? [pid 5497] <... openat resumed>) = 4 [pid 5492] +++ exited with 0 +++ [pid 5497] ioctl(4, LOOP_SET_FD, 3) = 0 [ 96.615487][ T5491] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.633564][ T5488] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.640512][ T5491] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.648672][ T5495] ------------[ cut here ]------------ [ 96.652503][ T5497] loop1: detected capacity change from 0 to 1024 [ 96.654929][ T5495] WARNING: CPU: 0 PID: 5495 at fs/hfsplus/extents.c:346 hfsplus_free_extents+0x708/0xae0 [pid 5497] close(3) = 0 [pid 5488] <... write resumed>) = 53248 [pid 5497] close(4 [pid 5488] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... close resumed>) = 0 [pid 5488] <... futex resumed>) = 0 [pid 5497] mkdir("./file1", 0777 [pid 5488] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5497] <... mkdir resumed>) = 0 [pid 5484] exit_group(0 [pid 5494] <... futex resumed>) = ? [pid 5488] <... futex resumed>) = ? [pid 5484] <... exit_group resumed>) = ? [pid 5494] +++ exited with 0 +++ [pid 5488] +++ exited with 0 +++ [pid 5484] +++ exited with 0 +++ [pid 5497] mount("/dev/loop1", "./file1", "hfsplus", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_MANDLOCK|MS_NOATIME, "") = 0 [pid 5491] <... write resumed>) = 53248 [pid 5486] exit_group(0 [pid 5081] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5484, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5497] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5496] <... futex resumed>) = ? [pid 5491] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... exit_group resumed>) = ? [pid 5081] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5497] <... openat resumed>) = 3 [pid 5496] +++ exited with 0 +++ [pid 5491] <... futex resumed>) = 0 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5497] chdir("./file1" [pid 5491] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5081] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5497] <... chdir resumed>) = 0 [pid 5081] <... openat resumed>) = 3 [pid 5497] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5081] newfstatat(3, "", [pid 5497] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5081] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 96.671179][ T5495] Modules linked in: [ 96.675293][ T5495] CPU: 0 PID: 5495 Comm: syz-executor331 Not tainted 6.9.0-syzkaller-00967-gcd97950cbcab #0 [ 96.685455][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 96.694294][ T5491] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.695612][ T5495] RIP: 0010:hfsplus_free_extents+0x708/0xae0 [pid 5497] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5497] <... futex resumed>) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5081] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5497] creat("./file0", 000 [pid 5493] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5497] <... creat resumed>) = 4 [pid 5493] <... futex resumed>) = 0 [pid 5081] newfstatat(AT_FDCWD, "./25/binderfs", [pid 5493] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5081] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5081] unlink("./25/binderfs" [pid 5497] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5081] <... unlink resumed>) = 0 [pid 5497] <... futex resumed>) = 1 [pid 5493] <... futex resumed>) = 0 [pid 5081] umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5497] futex(0x7f96082aa6c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] futex(0x7f96082aa6c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5493] <... futex resumed>) = 0 [pid 5497] write(4, "\x74\x68\x72\x65\x61\x64\x65\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 392007683 [ 96.708928][ T5495] Code: cb 44 89 ef 89 de e8 f7 54 1a ff 41 39 dd 75 22 49 83 c7 28 e8 29 53 1a ff 41 bc 05 00 00 00 e9 de f9 ff ff e8 19 53 1a ff 90 <0f> 0b 90 e9 7d f9 ff ff 44 89 ef 89 de e8 c6 54 1a ff 41 29 dd 73 [ 96.728663][ T5495] RSP: 0018:ffffc90004ebf510 EFLAGS: 00010293 [ 96.734915][ T5495] RAX: ffffffff827bc007 RBX: ffff88806c84c820 RCX: ffff88802ac08000 [ 96.743095][ T5495] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801c7c6048 [ 96.751268][ T5495] RBP: ffff88807d404000 R08: ffff88801c7c604f R09: 1ffff110038f8c09 [ 96.759380][ T5495] R10: dffffc0000000000 R11: ffffed10038f8c0a R12: dffffc0000000000 [pid 5493] futex(0x7f96082aa6cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5493] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f9608197000 [pid 5493] mprotect(0x7f9608198000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f96081b7990, parent_tid=0x7f96081b7990, exit_signal=0, stack=0x7f9608197000, stack_size=0x20300, tls=0x7f96081b76c0} => {parent_tid=[5498]}, 88) = 5498 [pid 5493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5493] futex(0x7f96082aa6d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 96.767562][ T5495] R13: 0000000000000001 R14: ffffc90004ebf630 R15: ffff88802d1d21d8 [ 96.775639][ T5495] FS: 00007f96081b76c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 96.784869][ T5495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.791555][ T5495] CR2: 00007f96081b7d58 CR3: 0000000022826000 CR4: 00000000003506f0 [ 96.799657][ T5495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.807769][ T5495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.812567][ T5497] hfsplus: request for non-existent node 16777216 in B*Tree [pid 5493] futex(0x7f96082aa6dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5490] <... futex resumed>) = ? [pid 5489] <... futex resumed>) = ? [pid 5490] +++ exited with 0 +++ [pid 5489] +++ exited with 0 +++ [pid 5486] +++ exited with 0 +++ [pid 5483] +++ exited with 0 +++ [pid 5083] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5083] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5083] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5083] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 96.815864][ T5495] Call Trace: [ 96.815879][ T5495] [ 96.824920][ T5497] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.826501][ T5495] ? __warn+0x163/0x4e0 [ 96.826542][ T5495] ? hfsplus_free_extents+0x708/0xae0 [ 96.826586][ T5495] ? report_bug+0x2b3/0x500 [ 96.842658][ T5497] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.846541][ T5495] ? hfsplus_free_extents+0x708/0xae0 [ 96.864047][ T5495] ? handle_bug+0x3e/0x70 [ 96.868447][ T5495] ? exc_invalid_op+0x1a/0x50 [ 96.873202][ T5495] ? asm_exc_invalid_op+0x1a/0x20 [ 96.878290][ T5495] ? hfsplus_free_extents+0x707/0xae0 [ 96.883892][ T5495] ? hfsplus_free_extents+0x708/0xae0 [ 96.889332][ T5495] ? hfsplus_find_init+0x14a/0x1c0 [ 96.893019][ T5497] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.894558][ T5495] hfsplus_file_truncate+0x7d0/0xb50 [ 96.907206][ T5495] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 96.913595][ T5495] ? unmap_mapping_range+0xf8/0x290 [ 96.918861][ T5495] ? __pfx_unmap_mapping_range+0x10/0x10 [pid 5083] getdents64(3, ./strace-static-x86_64: Process 5498 attached [pid 5498] rseq(0x7f96081b7fe0, 0x20, 0, 0x53053053) = 0 [pid 5498] set_robust_list(0x7f96081b79a0, 24) = 0 [pid 5498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5498] open("./file1", O_RDONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_DIRECT|0x34, 000 [pid 5084] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5486, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5084] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5084] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5084] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5084] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5084] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5084] unlink("./26/binderfs" [pid 5498] <... open resumed>) = 5 [pid 5497] <... write resumed>) = 53248 [pid 5084] <... unlink resumed>) = 0 [pid 5083] <... getdents64 resumed>0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5498] futex(0x7f96082aa6dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5497] futex(0x7f96082aa6cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5084] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5083] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5498] <... futex resumed>) = 0 [pid 5497] <... futex resumed>) = 0 [pid 5493] exit_group(0 [ 96.924602][ T5495] ? setattr_prepare+0x1f5/0xb20 [ 96.929587][ T5495] ? truncate_setsize+0xcf/0xf0 [ 96.934310][ T5497] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.934510][ T5495] hfsplus_setattr+0x1ce/0x280 [ 96.941740][ T5497] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.946568][ T5495] ? __pfx_hfsplus_setattr+0x10/0x10 [ 96.959225][ T5495] notify_change+0xb9d/0xe70 [ 96.963985][ T5495] do_truncate+0x220/0x310 [ 96.968457][ T5495] ? __pfx_do_truncate+0x10/0x10 [pid 5083] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5493] <... exit_group resumed>) = ? [pid 5083] newfstatat(AT_FDCWD, "./26/binderfs", [pid 5498] +++ exited with 0 +++ [pid 5497] +++ exited with 0 +++ [pid 5493] +++ exited with 0 +++ [pid 5083] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5083] unlink("./26/binderfs") = 0 [pid 5083] umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5082] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5493, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5082] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5082] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 96.973520][ T5495] path_openat+0x29fe/0x3240 [ 96.978197][ T5495] ? __pfx_path_openat+0x10/0x10 [ 96.983310][ T5495] do_filp_open+0x235/0x490 [ 96.987887][ T5495] ? __pfx_do_filp_open+0x10/0x10 [ 96.993045][ T5495] ? _raw_spin_unlock+0x28/0x50 [ 96.997956][ T5495] ? alloc_fd+0x59d/0x640 [ 97.002329][ T5495] do_sys_openat2+0x13e/0x1d0 [ 97.007189][ T5495] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.012485][ T5495] ? lockdep_hardirqs_on+0x99/0x150 [ 97.017781][ T5495] ? _raw_spin_unlock_irq+0x2e/0x50 [pid 5082] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5082] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5082] getdents64(3, 0x5555939dc730 /* 4 entries */, 32768) = 112 [pid 5082] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5082] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 97.023085][ T5495] ? ptrace_notify+0x279/0x380 [ 97.027900][ T5495] __x64_sys_open+0x225/0x270 [ 97.032627][ T5495] ? __pfx___x64_sys_open+0x10/0x10 [ 97.037953][ T5495] ? do_syscall_64+0x102/0x240 [ 97.042765][ T5495] do_syscall_64+0xf5/0x240 [ 97.047394][ T5495] ? clear_bhb_loop+0x35/0x90 [ 97.052137][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.058123][ T5495] RIP: 0033:0x7f9608221b89 [pid 5082] unlink("./28/binderfs") = 0 [ 97.062570][ T5495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 97.082356][ T5495] RSP: 002b:00007f96081b7218 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 97.090871][ T5495] RAX: ffffffffffffffda RBX: 00007f96082aa6d8 RCX: 00007f9608221b89 [ 97.099048][ T5495] RDX: 0000000000000000 RSI: 0000000000004374 RDI: 0000000020000040 [ 97.107098][ T5495] RBP: 00007f96082aa6d0 R08: 00007ffe75cc4757 R09: 0000000000000000 [ 97.115174][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96082760c0 [ 97.123211][ T5495] R13: 0031656c69662f2e R14: 0073756c70736668 R15: 6465646165726874 [ 97.131212][ T5495] [ 97.134336][ T5495] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.141636][ T5495] CPU: 0 PID: 5495 Comm: syz-executor331 Not tainted 6.9.0-syzkaller-00967-gcd97950cbcab #0 [ 97.151746][ T5495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 97.161906][ T5495] Call Trace: [ 97.165208][ T5495] [ 97.168149][ T5495] dump_stack_lvl+0x241/0x360 [ 97.172857][ T5495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.178094][ T5495] ? __pfx__printk+0x10/0x10 [ 97.182703][ T5495] ? _printk+0xd5/0x120 [ 97.186885][ T5495] ? vscnprintf+0x5d/0x90 [ 97.191225][ T5495] panic+0x349/0x860 [ 97.195237][ T5495] ? __warn+0x172/0x4e0 [ 97.199423][ T5495] ? __pfx_panic+0x10/0x10 [ 97.203864][ T5495] ? show_trace_log_lvl+0x4e6/0x520 [ 97.209101][ T5495] __warn+0x346/0x4e0 [ 97.213109][ T5495] ? hfsplus_free_extents+0x708/0xae0 [ 97.218511][ T5495] report_bug+0x2b3/0x500 [ 97.222860][ T5495] ? hfsplus_free_extents+0x708/0xae0 [ 97.228316][ T5495] handle_bug+0x3e/0x70 [ 97.232488][ T5495] exc_invalid_op+0x1a/0x50 [ 97.237005][ T5495] asm_exc_invalid_op+0x1a/0x20 [ 97.241872][ T5495] RIP: 0010:hfsplus_free_extents+0x708/0xae0 [ 97.247973][ T5495] Code: cb 44 89 ef 89 de e8 f7 54 1a ff 41 39 dd 75 22 49 83 c7 28 e8 29 53 1a ff 41 bc 05 00 00 00 e9 de f9 ff ff e8 19 53 1a ff 90 <0f> 0b 90 e9 7d f9 ff ff 44 89 ef 89 de e8 c6 54 1a ff 41 29 dd 73 [ 97.267775][ T5495] RSP: 0018:ffffc90004ebf510 EFLAGS: 00010293 [ 97.273945][ T5495] RAX: ffffffff827bc007 RBX: ffff88806c84c820 RCX: ffff88802ac08000 [ 97.282016][ T5495] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801c7c6048 [ 97.290032][ T5495] RBP: ffff88807d404000 R08: ffff88801c7c604f R09: 1ffff110038f8c09 [ 97.298021][ T5495] R10: dffffc0000000000 R11: ffffed10038f8c0a R12: dffffc0000000000 [ 97.306011][ T5495] R13: 0000000000000001 R14: ffffc90004ebf630 R15: ffff88802d1d21d8 [ 97.314031][ T5495] ? hfsplus_free_extents+0x707/0xae0 [ 97.319467][ T5495] ? hfsplus_find_init+0x14a/0x1c0 [ 97.324606][ T5495] hfsplus_file_truncate+0x7d0/0xb50 [ 97.329923][ T5495] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 97.335783][ T5495] ? unmap_mapping_range+0xf8/0x290 [ 97.341006][ T5495] ? __pfx_unmap_mapping_range+0x10/0x10 [ 97.346657][ T5495] ? setattr_prepare+0x1f5/0xb20 [ 97.351849][ T5495] ? truncate_setsize+0xcf/0xf0 [ 97.356719][ T5495] hfsplus_setattr+0x1ce/0x280 [ 97.361541][ T5495] ? __pfx_hfsplus_setattr+0x10/0x10 [ 97.366855][ T5495] notify_change+0xb9d/0xe70 [ 97.371471][ T5495] do_truncate+0x220/0x310 [ 97.375907][ T5495] ? __pfx_do_truncate+0x10/0x10 [ 97.380967][ T5495] path_openat+0x29fe/0x3240 [ 97.385617][ T5495] ? __pfx_path_openat+0x10/0x10 [ 97.390689][ T5495] do_filp_open+0x235/0x490 [ 97.395300][ T5495] ? __pfx_do_filp_open+0x10/0x10 [ 97.400361][ T5495] ? _raw_spin_unlock+0x28/0x50 [ 97.405258][ T5495] ? alloc_fd+0x59d/0x640 [ 97.409613][ T5495] do_sys_openat2+0x13e/0x1d0 [ 97.414341][ T5495] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.419565][ T5495] ? lockdep_hardirqs_on+0x99/0x150 [ 97.424786][ T5495] ? _raw_spin_unlock_irq+0x2e/0x50 [ 97.430041][ T5495] ? ptrace_notify+0x279/0x380 [ 97.434819][ T5495] __x64_sys_open+0x225/0x270 [ 97.439524][ T5495] ? __pfx___x64_sys_open+0x10/0x10 [ 97.444752][ T5495] ? do_syscall_64+0x102/0x240 [ 97.449580][ T5495] do_syscall_64+0xf5/0x240 [ 97.454101][ T5495] ? clear_bhb_loop+0x35/0x90 [ 97.458825][ T5495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.464823][ T5495] RIP: 0033:0x7f9608221b89 [ 97.469256][ T5495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 97.488967][ T5495] RSP: 002b:00007f96081b7218 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 97.497405][ T5495] RAX: ffffffffffffffda RBX: 00007f96082aa6d8 RCX: 00007f9608221b89 [ 97.505496][ T5495] RDX: 0000000000000000 RSI: 0000000000004374 RDI: 0000000020000040 [ 97.513493][ T5495] RBP: 00007f96082aa6d0 R08: 00007ffe75cc4757 R09: 0000000000000000 [ 97.521494][ T5495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96082760c0 [ 97.529572][ T5495] R13: 0031656c69662f2e R14: 0073756c70736668 R15: 6465646165726874 [ 97.537689][ T5495] [ 97.541023][ T5495] Kernel Offset: disabled [ 97.545584][ T5495] Rebooting in 86400 seconds..